76/100 SECURITY SCORE

Certificate Information

Subject
CN=royalwin808.baby
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
April 24, 2026
Valid Until
July 23, 2026 35 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
93:E1:5F:64:B6:3B:A1:66:61:61:D6:B8:70:4C:3E:56:92:0B:C8:64:20:32:E4:31:73:15:F8:1D:DA:7A:08:A4
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
ciclopes.com *.ciclopes.com *.admin.ciclopes.com *.agent.ciclopes.com *.api.ciclopes.com *.app.ciclopes.com *.backend.ciclopes.com *.dashboard.ciclopes.com *.demo.ciclopes.com *.dev.ciclopes.com *.hostmaster.ciclopes.com *.stats.ciclopes.com *.visual.ciclopes.com *.workflow.ciclopes.com *.www.ciclopes.com

Other domains in certificate

antu.it *.antu.it *.apl.antu.it *.autodiscover.antu.it *.connect.antu.it *.cra.antu.it *.cuvpn.antu.it *.go.antu.it *.mail.antu.it *.mx.antu.it *.portal-labvpn.antu.it *.rdweb.antu.it *.reporting.antu.it *.secure.antu.it *.superset.antu.it *.supersets.antu.it *.vpntoj.antu.it *.xapp.antu.it
bestisland.it *.bestisland.it
*.app.bigappleyogafrance.com *.autodiscover.bigappleyogafrance.com bigappleyogafrance.com *.bigappleyogafrance.com *.cpanel.bigappleyogafrance.com *.ftp.bigappleyogafrance.com *.mail.bigappleyogafrance.com *.webmail.bigappleyogafrance.com *.www.bigappleyogafrance.com
gondix.cfd *.gondix.cfd *.hostmaster.gondix.cfd *.www.gondix.cfd
*.demo.haberfem.com haberfem.com *.haberfem.com *.mssql.haberfem.com *.remote.haberfem.com *.ww1.haberfem.com
*.admin.mediocremusicblog.com *.api.mediocremusicblog.com *.app.mediocremusicblog.com *.backend.mediocremusicblog.com *.dev.mediocremusicblog.com *.ftp.mediocremusicblog.com mediocremusicblog.com *.mediocremusicblog.com *.random.mediocremusicblog.com *.staging.mediocremusicblog.com
*.admin.royalwin808.baby *.api.royalwin808.baby *.app.royalwin808.baby *.assets.royalwin808.baby *.d163a756-f184-45f2-9f82-0398fd4ed221.royalwin808.baby *.demo.royalwin808.baby *.dev.royalwin808.baby *.members.royalwin808.baby *.net.royalwin808.baby royalwin808.baby *.royalwin808.baby *.staging.royalwin808.baby *.test.royalwin808.baby
*.fax.skyewealthmanagement.com skyewealthmanagement.com *.skyewealthmanagement.com
watchtogether.it *.watchtogether.it
*.api.xn--8dbaco.gifts *.app.xn--8dbaco.gifts *.dev.xn--8dbaco.gifts *.ed22cedc-0215-457f-9e5f-f5a1848e9137.xn--8dbaco.gifts *.hostmaster.xn--8dbaco.gifts *.www.xn--8dbaco.gifts xn--8dbaco.gifts *.xn--8dbaco.gifts