76/100 SECURITY SCORE

Certificate Information

Subject
CN=stellantisfs.com
Issuer
C=US, O=Let's Encrypt, CN=YR1
Valid From
May 31, 2026
Valid Until
August 29, 2026 70 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
BE:93:C2:38:9D:D5:93:74:4D:9F:71:8C:C9:3C:E3:30:CA:DF:EF:A8:94:CC:D7:E8:92:48:75:F7:DF:45:2C:8E
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
garnachostyle.com *.garnachostyle.com *.3fad7889-2fea-4f95-a884-854a7a581676.garnachostyle.com *.admin.garnachostyle.com *.demo.garnachostyle.com *.members.garnachostyle.com *.test.garnachostyle.com

Other domains in certificate

*.8ab1c10a-0417-46af-a0f1-9d2613fdf703.cds7.com *.api.cds7.com *.auth.cds7.com cds7.com *.cds7.com *.client.cds7.com *.connectvpn.cds7.com *.docs.cds7.com *.dqulhrsb.cds7.com *.external.cds7.com *.gateway.cds7.com *.localhost.cds7.com *.login.cds7.com *.m.cds7.com *.members.cds7.com *.mobile.cds7.com *.my.cds7.com *.new.cds7.com *.office.cds7.com *.portal.cds7.com *.remoteaccess.cds7.com *.sharepoint.cds7.com *.sslvpn.cds7.com *.sso.cds7.com *.vpn.cds7.com *.vpn1.cds7.com *.vpn2.cds7.com *.web.cds7.com *.webvpn.cds7.com *.ww12.cds7.com *.www.cds7.com *.xivluqrt.cds7.com
*.access.healingartsinteractive.org *.app.healingartsinteractive.org *.bhmpters.healingartsinteractive.org *.desktop.healingartsinteractive.org *.dev.healingartsinteractive.org *.gp.healingartsinteractive.org healingartsinteractive.org *.healingartsinteractive.org *.help.healingartsinteractive.org *.m.healingartsinteractive.org *.mta-sts.healingartsinteractive.org *.rd.healingartsinteractive.org *.remote.healingartsinteractive.org *.remoteapp.healingartsinteractive.org *.remoto.healingartsinteractive.org *.secure.healingartsinteractive.org *.ssl.healingartsinteractive.org *.sslvpn.healingartsinteractive.org *.vdi.healingartsinteractive.org *.vpn.healingartsinteractive.org *.vpn1.healingartsinteractive.org *.vpnssl.healingartsinteractive.org
*.em.stellantisfs.com *.payment.stellantisfs.com stellantisfs.com *.stellantisfs.com
*.app.synalab.es *.bi.synalab.es *.ca674d46-fa12-4c85-afab-130fd9dc7697.synalab.es *.chat.synalab.es *.citaprevia.synalab.es *.ehfvrpass.synalab.es *.ekdfvicsyxcikznspfsmsitemaps.synalab.es *.flowise.synalab.es *.infomesap.synalab.es *.informes.synalab.es *.informesap.synalab.es *.informesapp.synalab.es *.informessap.synalab.es *.pass.synalab.es *.sitemap.synalab.es *.sitemaps.synalab.es synalab.es *.synalab.es *.tiendasalud.synalab.es *.vvv.synalab.es *.vvvv.synalab.es *.wsxsiicsyxcikznspfsmsitemaps.synalab.es *.ww.synalab.es *.www.synalab.es *.wwww.synalab.es