Cached · just now
79/100 SECURITY SCORE

Certificate Information

Subject
CN=ajuntamentdelspallaresos.cat
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 06, 2026
Valid Until
May 07, 2026 83 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
25:78:82:BC:22:4B:8E:7F:7C:5E:12:E4:D4:4D:4C:CD:E3:A9:4B:72:5D:F1:D5:EB:CB:49:63:68:21:A0:C1:A1
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
xuanbd.com *.xuanbd.com

Other domains in certificate

ajuntamentdelspallaresos.cat *.ajuntamentdelspallaresos.cat *.news.ajuntamentdelspallaresos.cat
falakcash.co *.falakcash.co *.www.falakcash.co
fcb8.sx *.fcb8.sx *.www.fcb8.sx
ferocactus.org *.ferocactus.org *.www.ferocactus.org
fireterhot.vip *.fireterhot.vip *.www.fireterhot.vip
fireterkuat.vip *.fireterkuat.vip *.www.fireterkuat.vip
fishmouthliving.rent *.fishmouthliving.rent *.www.fishmouthliving.rent
fixyourbranding.com *.fixyourbranding.com *.www.fixyourbranding.com
florentmarchet.fr *.florentmarchet.fr *.www.florentmarchet.fr
fofofo.art *.fofofo.art *.www.fofofo.art
fontstime.com *.fontstime.com *.www.fontstime.com
foodtruckfranchising.com *.foodtruckfranchising.com *.www.foodtruckfranchising.com
forexconsole.com *.forexconsole.com *.www.forexconsole.com
fornax.cc *.fornax.cc *.www.fornax.cc
hentaisiu.com *.hentaisiu.com
herohost.cloud *.herohost.cloud
hexparts.com *.hexparts.com
hiinfluenceroomcrew.com *.hiinfluenceroomcrew.com
hipres.lol *.hipres.lol
hipsonyc.com *.hipsonyc.com
id888game.com *.id888game.com *.pay.id888game.com
*.nodejs.pizzeriaallegro.com pizzeriaallegro.com *.pizzeriaallegro.com
*.miuflix.vhx.io vhx.io *.vhx.io
xrdiv.net *.xrdiv.net
xrpproject.com *.xrpproject.com
xrtzc.tv *.xrtzc.tv
xs10071.cc *.xs10071.cc
xs50063.cc *.xs50063.cc
xs80058.cc *.xs80058.cc
yellownamezone.com *.yellownamezone.com
yn-yn.com *.yn-yn.com
zbet.boo *.zbet.boo
zeil.me *.zeil.me
ziluewll.com *.ziluewll.com
ziscollege.com *.ziscollege.com