Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=kamakazi.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 21, 2026
Valid Until
January 19, 2027
87 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
63:97:CA:32:6F:11:4F:62:98:E7:71:31:6E:7B:48:77:F5:3A:7C:E4:C8:EA:9D:E0:0E:A6:35:59:73:24:81:CE
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
88 domains
rootinghost.com
*.rootinghost.com
*.6c6d7adf-a9f8-4426-8bdc-b79bbd1d1670.rootinghost.com
*.admin.rootinghost.com
*.avito.rootinghost.com
*.bf42ccc3-b43d-49b3-9e27-bccefa4dbc40.rootinghost.com
*.cnvqyafabegestao.rootinghost.com
*.demo.rootinghost.com
*.dev.rootinghost.com
*.fcfe83ea-0374-4600-89d5-7b44e1a15194.rootinghost.com
*.ffvggtest.rootinghost.com
*.gestao.rootinghost.com
*.jlncaswb.rootinghost.com
*.mhwxigestao.rootinghost.com
*.staging.rootinghost.com
*.test.rootinghost.com
albergotto.it
*.albergotto.it
*.api.albergotto.it
*.app.albergotto.it
*.backend.albergotto.it
*.demo.albergotto.it
*.remote.albergotto.it
*.wwww.albergotto.it
*.dev.dollhouse-cologne.de
dollhouse-cologne.de
*.dollhouse-cologne.de
*.fortinet.dollhouse-cologne.de
*.jszyqcloudvpn.dollhouse-cologne.de
*.partner.dollhouse-cologne.de
*.portal.dollhouse-cologne.de
*.bbs.kamakazi.com
*.bsd.kamakazi.com
kamakazi.com
*.kamakazi.com
*.admin.polemik.it
*.app.polemik.it
*.backend.polemik.it
*.dashboard.polemik.it
*.demo.polemik.it
*.dev.polemik.it
*.intelligence.polemik.it
polemik.it
*.polemik.it
*.report.polemik.it
*.staging.polemik.it
*.visual.polemik.it
*.admin.sanjo.com
*.app.sanjo.com
*.assets.sanjo.com
*.authsmtp.sanjo.com
*.autodiscover.sanjo.com
*.ballpark.sanjo.com
*.correo.sanjo.com
*.correu.sanjo.com
*.email.sanjo.com
*.exch2016.sanjo.com
*.exchangecorp.sanjo.com
*.exmail2.sanjo.com
*.gitlab.sanjo.com
*.hostmaster.sanjo.com
*.imap.sanjo.com
*.m.sanjo.com
*.mail.sanjo.com
*.momos.sanjo.com
*.msexch2k13.sanjo.com
*.mx001.sanjo.com
*.mywebmail.sanjo.com
*.ogrencieposta.sanjo.com
*.owa.sanjo.com
*.pesoplumatickets.sanjo.com
sanjo.com
*.sanjo.com
*.sanjo.sanjo.com
*.servidor1.sanjo.com
*.sitemap.sanjo.com
*.sitemaps.sanjo.com
*.smail.sanjo.com
*.smtpa.sanjo.com
*.temp.sanjo.com
*.us.sanjo.com
*.webmail.sanjo.com
*.webmail2013.sanjo.com
*.ww1.sanjo.com
*.ww16.sanjo.com
*.ww25.sanjo.com
*.ww38.sanjo.com
*.ww5.sanjo.com
Other domains in certificate