SSL Certificate Analysis for www.obsproject.studio - Security Grade & TLS Configuration

Open Cached · just now

76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1

Let's Encrypt Active incidents

Certificate Information

Subject

CN=urlyy.com

Issuer

C=US, O=Let's Encrypt, CN=YR2

Valid From

June 10, 2026

Valid Until

September 08, 2026 77 days

Public Key

RSA 4096 bit Strong

Signature Algorithm

SHA256-RSA

SHA-256 Fingerprint

0B:32:98:E6:5A:D6:60:22:FF:52:E1:02:30:9A:A7:C6:04:C9:13:DE:58:03:9B:A6:3E:3C:28:DC:FB:5A:40:BD

Alternative Names

84 domains

Security Configuration

TLS Protocols

TLS 1.2 TLS 1.3

Forward Secrecy

Supported (Modern clients use PFS)

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

84 domains

obsproject.studio *.obsproject.studio *.32.obsproject.studio *.com.obsproject.studio *.www.obsproject.studio

Other domains in certificate

*.admin.an99.makeup an99.makeup *.an99.makeup *.api.an99.makeup *.app.an99.makeup *.dashboard.an99.makeup *.dev.an99.makeup *.nvvpubrpocpzy8mn.an99.makeup *.secure.an99.makeup *.staging.an99.makeup *.test.an99.makeup *.yhonkwjeqmapp.an99.makeup

*.1f99d3bd-fd60-4dea-9f94-4b8253db996c.gaypage.co *.74b80188-0ee8-4443-a48d-fa28601036b3.gaypage.co *.analytics.gaypage.co *.app.gaypage.co *.beheer.gaypage.co *.cams.gaypage.co *.ciscoasa.gaypage.co *.dev-superset.gaypage.co *.dev.gaypage.co *.dndtctrjdqyuz.gaypage.co *.emv1.gaypage.co gaypage.co *.gaypage.co *.home.gaypage.co *.m.gaypage.co *.mobile.gaypage.co *.news.gaypage.co *.poc-analytic.gaypage.co *.sistema.gaypage.co *.sitemap.gaypage.co *.sitemaps.gaypage.co *.wap.gaypage.co *.web.gaypage.co *.www.gaypage.co

*.admin.gestionefatturazione.it *.app.gestionefatturazione.it *.chart.gestionefatturazione.it *.dash.gestionefatturazione.it gestionefatturazione.it *.gestionefatturazione.it *.staging.gestionefatturazione.it *.superset.gestionefatturazione.it *.wwww.gestionefatturazione.it

*.able.reach.software *.bespaarloket.reach.software reach.software *.reach.software

*.dev.slotmacau288.com *.go.slotmacau288.com *.mail1.slotmacau288.com *.secure.slotmacau288.com slotmacau288.com *.slotmacau288.com *.static.slotmacau288.com *.testing.slotmacau288.com *.uat.slotmacau288.com

*.dev.soc99.quest soc99.quest *.soc99.quest

urlyy.com *.urlyy.com