Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=kraty.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 08, 2026
Valid Until
December 07, 2026
31 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
A6:62:FA:C0:6C:BF:49:CB:DA:14:04:1A:53:F9:0A:D1:B8:38:6D:98:66:60:EB:12:D5:8D:88:A8:EE:0C:1E:11
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
litigando.it
*.litigando.it
*.api.litigando.it
*.app.litigando.it
*.dash.litigando.it
*.dashboard.litigando.it
*.dev.litigando.it
*.integration.litigando.it
*.intelligence.litigando.it
*.reports.litigando.it
*.supersets.litigando.it
*.visual.litigando.it
*.www.litigando.it
90phutttt.xyz
*.90phutttt.xyz
*.mitom.90phutttt.xyz
*.ww16.90phutttt.xyz
*.xoilac.90phutttt.xyz
beesloveto.buzz
*.beesloveto.buzz
*.buzzww38.beesloveto.buzz
*.discovery.beesloveto.buzz
citizensagainsthate.com
*.citizensagainsthate.com
*.comww16.citizensagainsthate.com
*.ww38.citizensagainsthate.com
*.admin.fixos.it
*.analytic.fixos.it
*.analytics.fixos.it
*.app.fixos.it
*.backend.fixos.it
*.dashboard.fixos.it
*.dashboards.fixos.it
*.demo.fixos.it
*.dev.fixos.it
fixos.it
*.fixos.it
*.report.fixos.it
*.staging.fixos.it
*.superset.fixos.it
*.email.kraty.com
kraty.com
*.kraty.com
*.ww17.kraty.com
lurene.com
*.lurene.com
*.ww17.lurene.com
*.res.topfeelgame.com
topfeelgame.com
*.topfeelgame.com
*.10.usagovgrants.org
*.1746781.usagovgrants.org
*.2341045.usagovgrants.org
*.2847236.usagovgrants.org
*.3047238.usagovgrants.org
*.3229028.usagovgrants.org
*.3271619.usagovgrants.org
*.3d16b4e2-6c4e-46c1-b8bf-1c8640560eed.usagovgrants.org
*.admin.usagovgrants.org
*.api.usagovgrants.org
*.app.usagovgrants.org
*.backend.usagovgrants.org
*.blog.usagovgrants.org
*.dash.usagovgrants.org
*.dashboards.usagovgrants.org
*.demo.usagovgrants.org
*.dev.usagovgrants.org
*.home.usagovgrants.org
*.m.usagovgrants.org
*.metrics.usagovgrants.org
*.mobile.usagovgrants.org
*.news.usagovgrants.org
*.staging.usagovgrants.org
*.stats.usagovgrants.org
*.superset.usagovgrants.org
*.supersets.usagovgrants.org
*.sysdem.usagovgrants.org
*.test.usagovgrants.org
usagovgrants.org
*.usagovgrants.org
*.visual.usagovgrants.org
*.vpn.usagovgrants.org
*.w.usagovgrants.org
*.wap.usagovgrants.org
*.web.usagovgrants.org
*.webmail.usagovgrants.org
*.wp.usagovgrants.org
*.ww10.usagovgrants.org
*.www.usagovgrants.org
Other domains in certificate