SSL/TLS Analysis for angular.dev

Analyzed on November 02, 2025 at 19:09 UTC

Security Score
77 / 100

Certificate Information

Subject
CN=www.cercacarrozzeria.it
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 10, 2025
Valid Until
January 08, 2026 67 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F8:1B:A9:95:61:30:99:7A:19:D0:30:CA:D6:7A:E3:7A:5D:B2:EA:7C:DC:75:12:2E:95:C9:48:EE:AB:9E:3B:8A
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
angular.dev

Other domains in certificate

2pennies.net
aftonomo.com
app.ahazou.com
ai.alchemica.agency
amascarello.com
hamedo2.anyware.software
www.apemax.io
togokitchen.asap2go.com
www.avenidaveiculosptc.com.br
balazstoth.hu
venues.barmapper.co.uk
basketballireland.tv
token-sale.beyondi.ninja
birthdays.email
blogletter.cz
static.bluestars.org
test.byteed.com
www.cercacarrozzeria.it
roster.chatterslaundry.co.nz
core.v3.contentfabric.io
www.couperus.dev
dq8.d-navi.net
landing.dashport.run
www.dingvoice.com
dunaweekend.com
thiruvallur.eacabs.com
www.flantool.com
enterprise.flutterflow.io
www.furry-online.com
getresponse.chat
app.getvidon.com
goldn.onl
irumagunshi-950559.ndljp.grikk.co.jp
hopscotch.academy
integrationhub.idealofsweden.team
www.ileco2.pl
inezjonsson.se
ingpine.com
guardian.inpulse.education
kine-ortho.isi.pf
jubileeswingdance.com
polymer.junaid.guru
gestion.kayou.nc
walletqa.kaytrust.id
marketcap.keymajorcoin.com
www.koalendar.com
koren.gal
www.kristapadgett.com
landmarkt-hammereisenbach.de
lucianoivansoro.com
omnicom.madhive.com
www.mark-cs.com
www.martialcoder.com
manager.millsta.com
www.minhdo.info
link.business.mojob.io
www.monk-soft.com
share.neoufitness.com
nokwandam.co.za
notaiobasso.it
www.orin-news.com
www.outch.work
pagexray.com
resume.pedlop.com
www.pestprosol.com
appointment.physiobalance.fit
dev.admin.plan2win.be
bsecure.platebni-brany.cz
success.playmetrics.com
referral.playstore.playship.com
pointly.ch
www.pokobarko.com
protectors-of-balance.de
www.raise.live
realtorvarma.com
recursivetechsol.com
rolfborjlind.com
beacon-park.dashi.staging.sasaki.com
sms.selfcity.fr
shellynews.com
siposistvan.com
live.snapmentor.no
spsfulfillment.com
tetris.stackskull.com
choirtracks.sullenart.co.uk
integration.taxnitro.com
www.tensecondsatatime.com
therelief.in
d.dash.seeker.tibilsolutions.com
www.truleaf.in
wholesale.uggaustralia.com.au
permm.phar.umich.edu
voucher.demo.uniqgift.com
wifi-plug.vicnastea.io
invitation.wavescool.com
wikmit.com
www.yedding.com
zahnaerzte-kroker.de
ajudabase.zrb.jp