Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=agrisense-maps.updateme.co.za
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 29, 2025
Valid Until
March 29, 2026
89 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A9:85:8C:8F:00:45:49:F7:AB:D7:C4:1B:68:36:68:45:BD:4F:AD:C9:5D:0F:0F:8A:40:BF:B6:8D:2B:64:29:40
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
app.agertech.it
elections.24heures.ch
40gauchos.com
a4al.lol
aandtsalon.com
iia.agency.in
oceanscan.anekonnect.io
www.apprutanaturaldelriotinto.com
aylee.co
dev.bigdreamboard.com
portal-qa.bitsonic.ai
www.blockapps.app
borreliachecken.se
app.breezeai.com
www.brianjwoodbury.com
cantstoplearning.help
inventory.cleanportsmouth.co.uk
tnorth.co.in
trailpass.contextfound.com
uidev.cove.io
creativeincarnation.com
app.darkgps.com
demt.co
dev-z.eu
demo.divisi.app
doubles.ai
www.entremind.cl
familyfresh.club
www.filmsreel.com
flowtapes.com
app.foodlee.io
monitor.qa.fynchmobility.net
explore-test.gemini.edu
ovelseskjoring.gjensidige.no
hoseasims.com
emoji-codebreakers.immersescape.games
app.imoveisuniao.com.br
jackfitterer.com
jouwboodschappenbuddy.nl
kasiawozniak.photo
omnibusdemexico-performance.lernit.app
www.lewiscountymutual.com
dev.eventos.linka.la
portal-staging.logichat.io
www.lucernewater.ch
webportal.marinwildfire.org
www.mashaimmigration.com
maxbarber.berlin
relocation.movemytalent.com
www.msbauheld.de
muttch.com
www.myswaps.de
cof2.neoufitness.com
www.oasis-scantrad.fr
www.oken.app
www.onframefilms.com
paganeto.store
auth.parkingcupid.com
pat-meta.com
www.pitangaprefabricados.com.br
driver.pksoslo.com
projectnext.app
www.propertybuddy.app
proseller.app
www.pythonisrad.com
dev.quakermaps.com
demo.quakerproject.com
victon-album.re2fe.com
www.reach-tech.com
rndm-bmx.com
rootxplore.com
runchamps.app
runningman.io
driver.dev.safetyinminutes.ca
salarytt.com
samuelblackburn.com
admin.santaritajacutinga.app
scottmsarsfield.com
teams.sicrux.app
singhsaurabh.com
somar.ae
l.dev.clue.spinlow.co
sportboard.app
app.starlinklab.in
www.mentor.talsee.app
www.taylorsversionforspotify.com
www.tcgnotify.net
www.thedataninja.app
timesoftware.llc
tokimuniti.com
twentywineteen.biz
typeforce.app
www.underscore.co.jp
agrisense-maps.updateme.co.za
www.vastuviterp.com
wingbot.app
wizzeh.com
app.woodstock.club
www.ycskerb78.com
zero1code.info
Other domains in certificate