Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=toolive.it
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
April 01, 2026
Valid Until
June 30, 2026 47 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A6:7C:FB:DC:68:00:BC:6A:F4:F8:0A:7D:01:49:AB:18:91:2A:92:8A:A0:6C:85:06:2B:A0:CE:DD:6C:4D:28:5D
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
toolive.it *.toolive.it *.admin.toolive.it *.chart.toolive.it *.dev.toolive.it *.staging.toolive.it *.store.toolive.it

Other domains in certificate

139ww.com *.139ww.com *.ww25.139ww.com *.www.139ww.com
*.32e0bbc5-c1fe-49be-91f1-fe8a78d71682.alicoin.vip *.admin.alicoin.vip alicoin.vip *.alicoin.vip *.api.alicoin.vip *.app.alicoin.vip *.appsheet.alicoin.vip *.assets.alicoin.vip *.azurepipelines.alicoin.vip *.blog.alicoin.vip *.bmc.alicoin.vip *.celery.alicoin.vip *.centos.alicoin.vip *.demo.alicoin.vip *.dev.alicoin.vip *.e5bb0ed6-4067-4bd3-be9d-e1b5a11c4aff.alicoin.vip *.e756a3b8-c72e-4174-bffd-a57c0b461be3.alicoin.vip *.export.alicoin.vip *.git.alicoin.vip *.gitlab.alicoin.vip *.gov.alicoin.vip *.hostmaster.alicoin.vip *.iixkrblog.alicoin.vip *.ijhthm.alicoin.vip *.iot.alicoin.vip *.jobs.alicoin.vip *.m.alicoin.vip *.mail.alicoin.vip *.mars.alicoin.vip *.new.alicoin.vip *.staging.alicoin.vip *.test.alicoin.vip *.twilio.alicoin.vip *.vip.alicoin.vip *.vpn.alicoin.vip *.woxrudev.alicoin.vip *.www.alicoin.vip *.xiteiwoxrudev.alicoin.vip
*.52678a2e-122d-4fed-ab3e-ed4b9b01ef57.choisoc99.today *.account.choisoc99.today *.api.choisoc99.today *.backup.choisoc99.today choisoc99.today *.choisoc99.today *.demo.choisoc99.today *.hostmaster.choisoc99.today *.mail.choisoc99.today *.mta.choisoc99.today *.new.choisoc99.today *.old.choisoc99.today *.qa.choisoc99.today *.secure.choisoc99.today *.shop.choisoc99.today *.staging.choisoc99.today *.stg.choisoc99.today *.v1.choisoc99.today *.v2.choisoc99.today *.web.choisoc99.today
dev-portal.xyz *.dev-portal.xyz *.wms-system.dev-portal.xyz
*.autodiscover.ecskyshopping.com *.cpcalendars.ecskyshopping.com ecskyshopping.com *.ecskyshopping.com *.flowise.ecskyshopping.com *.qa.ecskyshopping.com *.random.ecskyshopping.com *.staging.ecskyshopping.com *.webmail.ecskyshopping.com
*.app.garciarestaurant.com garciarestaurant.com *.garciarestaurant.com *.www.garciarestaurant.com
hotelkeeper.com *.hotelkeeper.com *.scvuo.hotelkeeper.com *.www10.hotelkeeper.com *.www24.hotelkeeper.com