Cached · just now
86/100 SECURITY SCORE

Certificate Information

Subject
CN=app.sabreality.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
January 07, 2026
Valid Until
April 07, 2026 76 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
AB:C6:1B:10:F0:76:6A:A4:AD:A2:98:08:B0:B3:E8:97:98:BD:10:2D:4B:83:90:7F:C6:65:D6:30:F9:5A:4D:3C
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Excellent
max-age=64072000; includeSubDomains; preload
Content-Security-Policy
Basic
script-src; connect-src; frame-src
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

79 domains
admin.niec.so hrm.niec.so legal.niec.so operation.niec.so outreach.niec.so

Other domains in certificate

demo.360web.us
partners.americancareersearch.com
projetos.ativore.com
portal.ativoreasset.com
brca.baltimorerentcourtagents.com
cityofsanmateoprohealth.briotix.works cityofsanmateoprosystem.briotix.works costcoja.briotix.works ejgalloprohealth.briotix.works firstrepublic.briotix.works ocwen.briotix.works prosystem-papajohns.briotix.works
www.cgt-watch.com
contractorportal.chowderfinancial.com customerportal.chowderfinancial.com
herzogwinery.cloacina.com
app.closedloopsolution.com
order.ffm.com.sa
biofinance.contabio.com.br saudeservice.contabio.com.br
app.dailymanagementsystem.com
tmsv3.enrichapps.com tmsv3sales.enrichapps.com
tracker.epinc.ca
nivea.eptgl.com
tesoroviejo.frm-ops.com
demo.gkdatalink.com
www.goldsgymprocurement.online
app.graciecb.com
teaming.hyperionportal.com
chsd.kliktikhub.com
www.knowsys.io
healthservice.lifely.world
go.lmsparking-app.com
client.loanofficerdashboard.com
arc.mci-it.co.za qms.mci-it.co.za
portal.my-motor.claims
gold-crown.myanalystpro.app
trusthouse.gosh.net.nz
cns.novvai.systems
idealtech.nudgsystems.com
www.onguardpropertyhistoryreport.com
kaiser.openkeydb.com
imgsales.operal.ca instaprix.operal.ca mst.operal.ca vaudreuilmp.operal.ca
bombeiro.parauapebas.app
portal.predicto.systems
projects.rajhomes.co
content.recyclist.co
pg.reelanalytics.net
logistic.rivaplus.com
app.sabreality.com
19972.softpme.cl demo.softpme.cl
helper.solarmedix.com
professional.stanleyprep.com
hodaka.storagebloc.com ih.storagebloc.com kz.storagebloc.com
agent.studyportalturkey.com
tcs.succeedwithfusion.com
retirement.t.bank sbaportal.t.bank
oracle.teameverest.ngo
www.theeduserve.in
crm.theplantpeople.co.nz
member.tie.org
vendors.uacrestaurants.com
e-block.vencu.es
hotelbarroso.yahconsultoria.com.br
kiva.zitus.mx