SSL Certificate Analysis for utra.zone - Security Grade & TLS Configuration

Open Cached · just now

76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1

Let's Encrypt

Certificate Information

Subject

CN=1fashionglobal.net

Issuer

C=US, O=Let's Encrypt, CN=R13

Valid From

February 12, 2026

Valid Until

May 13, 2026 88 days

Public Key

RSA 4096 bit Strong

Signature Algorithm

SHA256-RSA

SHA-256 Fingerprint

45:CE:8B:BA:1E:5E:A4:42:95:ED:18:21:04:0C:DC:98:33:C8:C3:9E:88:AA:19:D6:86:B4:C4:58:7A:51:73:59

Alternative Names

89 domains

Security Configuration

TLS Protocols

TLS 1.2 TLS 1.3

Forward Secrecy

Supported (Modern clients use PFS)

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains

utra.zone *.utra.zone *.app.utra.zone *.random.utra.zone *.sitemaps.utra.zone *.www.utra.zone

Other domains in certificate

1fashionglobal.net *.1fashionglobal.net *.www.1fashionglobal.net

abdl.au *.abdl.au *.ww38.abdl.au

*.10.architectmovie.com *.14.architectmovie.com *.1c.architectmovie.com *.78.architectmovie.com *.8f.architectmovie.com *.9c.architectmovie.com *.a1.architectmovie.com *.ae.architectmovie.com *.af.architectmovie.com architectmovie.com *.architectmovie.com *.b1.architectmovie.com *.be.architectmovie.com *.d1.architectmovie.com *.d2.architectmovie.com *.db.architectmovie.com *.dd.architectmovie.com *.ed.architectmovie.com *.ff.architectmovie.com

*.bi.bitforextraders.online bitforextraders.online *.bitforextraders.online *.dewavesempire.bitforextraders.online *.report.bitforextraders.online

blohmvoss-naval.com *.blohmvoss-naval.com *.random.blohmvoss-naval.com *.ww38.blohmvoss-naval.com

*.admin.buitenlampen.com *.api.buitenlampen.com *.app.buitenlampen.com *.assets.buitenlampen.com *.bot.buitenlampen.com buitenlampen.com *.buitenlampen.com *.demo.buitenlampen.com *.hostmaster.buitenlampen.com *.m.buitenlampen.com *.members.buitenlampen.com *.shop.buitenlampen.com *.sitemap.buitenlampen.com *.test.buitenlampen.com *.ww1.buitenlampen.com *.ww25.buitenlampen.com *.ww38.buitenlampen.com

*.hostmaster.incorpate.com incorpate.com *.incorpate.com

knightinn.com *.knightinn.com

lotusflower.com *.lotusflower.com