Cached · just now
75/100 SECURITY SCORE

Certificate Information

Subject
CN=venditalampade.it
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 26, 2026
Valid Until
January 24, 2027 80 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
E5:79:1A:5E:1E:20:02:6D:C3:2E:F2:28:EB:F2:0D:47:86:2A:4E:FA:4F:F2:DE:32:DF:D1:13:AD:F3:77:36:2F
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

81 domains
itjv.com *.itjv.com *.palermo.itjv.com *.wvthj.itjv.com

Other domains in certificate

100sepg.app *.100sepg.app
afd-shop.de *.afd-shop.de
annashcherbyna.com *.annashcherbyna.com
aswxlbgdlkrlhvr.info *.aswxlbgdlkrlhvr.info *.www.aswxlbgdlkrlhvr.info
cannedyperformingarts.com *.cannedyperformingarts.com
clearvaluediy.site *.clearvaluediy.site
diyprojectsshowcase.icu *.diyprojectsshowcase.icu
drugrehabauburn.com *.drugrehabauburn.com
financeinquiry.live *.financeinquiry.live
frigidair.ca *.frigidair.ca *.www.frigidair.ca
gardencarepros.site *.gardencarepros.site
gossipclearance.store *.gossipclearance.store
govly.app *.govly.app
htaxrelief.com *.htaxrelief.com
ispedresearch.net *.ispedresearch.net
javfinder.sh *.javfinder.sh *.wildcard.javfinder.sh *.www.javfinder.sh
oneonedream.net *.oneonedream.net
publidz.com *.publidz.com
rmqvibes.pics *.rmqvibes.pics
servicospetrobras.org *.servicospetrobras.org
skndtrust.com *.skndtrust.com
starwarsmessageboards.com *.starwarsmessageboards.com
sumplus.org *.sumplus.org
*.sai.tea.house tea.house *.tea.house
*.bo.titanltdivestments.com titanltdivestments.com *.titanltdivestments.com
usmrgpjlebogu.com *.usmrgpjlebogu.com
*.api.venditalampade.it *.app.venditalampade.it *.backend.venditalampade.it *.blog.venditalampade.it *.hostmaster.venditalampade.it *.notexistspymhvbbs.venditalampade.it *.pymhvbbs.venditalampade.it venditalampade.it *.venditalampade.it *.www.venditalampade.it
wdkuo.app *.wdkuo.app
whatkillsmarriage.com *.whatkillsmarriage.com
wwwvisitrhodeisland.com *.wwwvisitrhodeisland.com
*.mailservice.zank.mobi zank.mobi *.zank.mobi