Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.squali.io
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
January 14, 2026
Valid Until
April 14, 2026 78 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
63:0D:5F:50:53:B7:06:F6:66:91:14:93:1F:8C:1D:E3:88:2D:9E:DA:9E:8F:5B:09:3F:5D:6F:A1:36:61:EE:87
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
app.equipo.dk

Other domains in certificate

lcl00579.aidangendreau.ca
airesumebuilder.info www.airesumebuilder.info
akisum.com
beta-dev.allevi.app
ama-log.ru
artecipo.com.br
www.aswath.me
www.barrydijkema.nl
bicrec.in
l.bioquimica.cl
admin.butlersbuildingsupply.com
www.buydomainanytime.com
capillar.it
auth.casabuena.org
registrierung.cat4school.de
www.christianbabin.com
revideo.co.kr
codelit.ai
codren.me
coloredigit.com
dimfutbolturnuvasi.com.tr www.dimfutbolturnuvasi.com.tr
comforterslifechoices.com
d-cryptbattle.org
daitle.com
dantasservcontabeis.com.br
www.darkwinston.me
www.darzekielventures.com
www.ddsmith.studio
sandbox.dietoplanner.com
www.firefx.co.za
link.portal.friuliemergenze.it
app.funvite.app
gianlucaangioni.com
goldenminds.org
app.gotrace.world
pay.truemerchantadvantage.gr4vy.app pay.wpay.gr4vy.app
taskcollab.harshtools.shop
heyneighbor.app
www.ilmium.com
jdevelopss.com
app.jimtime.it
jince.rest
jsystem.site
karinekrainer.com.br
kongkongbang.xyz
simple-calender.kro.kr
wallet.ksaai.ai
www.laareperiadc.com
contagion.laurent.soy
www.lcns.co.za
www.leaaxel.ai
www.lernzettel.org
colonialcannabis.liagrow.com
surpresa.limanascimento.com.br
www.meatodoor.com
mygiftacademy.com
gardener.netlaw.com
admin-lamquangdai.nexlab.tech
nomadicvalue.com
overlook-living.com
qr.overture7421.org
locator.patientaccess.org
pizzapup.app
playout.studio
www.primpixels.com
proffmaxx.co.uk
profile-studio.online
renatachaves.com.br
ahmadiyya.rktechs.io
www.rowster.in
rucheoconnect.fr
safehooveshaven.org www.safehooveshaven.org
saveonwater.com www.saveonwater.com
www.scephiro.me
sivanekron.com www.sivanekron.com
smlczy.xyz
solitaire.global
app.somosexacom.com
www.sqlunlimited.co.uk
www.squali.io
stagecart.me
syedsajidhussain.com www.syedsajidhussain.com
www.taniarai.com
www.tasktennis.io
technovation.cc
tyler-dean-smith.com
docs.video-api.io
auth.vyb-dev.events
winnomi.com
www.xarflo.com
portal.xiotch.com
www.yaanatours.com