Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=mandalyn.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 10, 2026
Valid Until
January 08, 2027
77 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
4E:14:F5:66:F5:1A:45:54:D2:92:D3:E9:5D:D5:24:A5:BA:5C:A3:F4:DA:21:EF:12:C7:56:F9:DF:E1:D0:06:67
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
silvered.it
*.silvered.it
*.admin.silvered.it
*.aniqmail.silvered.it
*.api.silvered.it
*.app.silvered.it
*.backend.silvered.it
*.correo.silvered.it
*.dashboard.silvered.it
*.demo.silvered.it
*.dev.silvered.it
*.eposta.silvered.it
*.ex02.silvered.it
*.exchange.silvered.it
*.imap.silvered.it
*.imap4.silvered.it
*.mail3.silvered.it
*.mx001.silvered.it
*.mymail.silvered.it
*.mywebmail.silvered.it
*.ogrencieposta.silvered.it
*.outlook.silvered.it
*.pop3.silvered.it
*.rds.silvered.it
*.redash.silvered.it
*.reporting.silvered.it
*.staging.silvered.it
*.superset.silvered.it
*.visual.silvered.it
*.webmail.silvered.it
*.webmail05.silvered.it
*.www.silvered.it
*.analytics.drasticamente.it
*.bi.drasticamente.it
*.cloud.drasticamente.it
*.correo.drasticamente.it
drasticamente.it
*.drasticamente.it
*.email.drasticamente.it
*.exch2016.drasticamente.it
*.hostmaster.drasticamente.it
*.mail1.drasticamente.it
*.mail3.drasticamente.it
*.metric.drasticamente.it
*.mx.drasticamente.it
*.mx001.drasticamente.it
*.outlook.drasticamente.it
*.pop3.drasticamente.it
*.portal.drasticamente.it
*.rd.drasticamente.it
*.rdweb.drasticamente.it
*.reporting.drasticamente.it
*.smail.drasticamente.it
*.smtp.drasticamente.it
*.superset.drasticamente.it
*.webmail2013.drasticamente.it
*.adminer.lauta.it
*.analytics.lauta.it
*.dashboard.lauta.it
*.email.lauta.it
*.hostmaster.lauta.it
*.imap.lauta.it
*.imap4.lauta.it
lauta.it
*.lauta.it
*.mail.lauta.it
*.mx.lauta.it
*.owa.lauta.it
*.pop.lauta.it
*.pop3.lauta.it
*.rd.lauta.it
*.rdweb.lauta.it
*.remote.lauta.it
*.report.lauta.it
*.vpnssl.lauta.it
*.www.lauta.it
*.c.mandalyn.com
*.cicd.mandalyn.com
*.hostmaster.mandalyn.com
mandalyn.com
*.mandalyn.com
*.mx4.mandalyn.com
*.random.mandalyn.com
*.travel.mandalyn.com
*.v2.mandalyn.com
*.beta.smartfinancialtips.co
*.portal.smartfinancialtips.co
*.preprod.smartfinancialtips.co
smartfinancialtips.co
*.smartfinancialtips.co
Other domains in certificate