Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=www.sushikoasturias.pedidomovil.es
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 27, 2025
Valid Until
February 25, 2026
87 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B9:73:30:B3:59:C7:31:4A:AC:F0:10:12:06:37:6E:6C:D4:97:AE:E9:D4:7A:14:D7:E9:9E:ED:D1:06:90:1B:71
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
app.lettershop.fr
aafpets.org
activme.org
www.activme.org
auth.aiheadshots.us
www.alexest.net
website.anagraph.io
baisar.in
auth.bdalil.com
app-clinicas.belaatende.com.br
www.boeconsulting.no
test.boginni.net
feedback.braverangels.org
www.carlswerk-victoria.de
carrerarailings.com
cashengbung.org
archive.cenatus.org
retiro.ceudecapella.com.br
churchtranslation.de
courtify.io
ea.cryptoethic.com
cyberdad.io
www.dilebon.be
dnieln7.xyz
dscdelft.nl
ecoabc.com.mx
www.ecothinkers.net
app-dev.emotions-diary.ru
app.emotions-diary.ru
credenciado.essilorconecta.com.br
auth.finlayfitnessservices.uk
www.fitedgefitness.com
genitorionline.it
dev.getevoapp.com
events.gowrishankar.info
www.gqamisasolutions.co.za
digital.haden.dev
homeradar.co.uk
dominikk.impactwrap.dev
bunbunapp.impossible-labs.io
inquiry.online
reg.iol2019.com
jordy-hertogs.nl
www.knowvic.in
koenigseder.me
demo-feriavirtual.lapieza.io
lasuite-spa.com
fd-test.le-dev.com
newtab.liao.dev
clientes.lifesource.es
loli.tokyo
marketfind.net
marketfind.org
www.markgoodwin.dev
microdens.shop
miku.shop
mobilpay.app
app.nikugen.jp
www.nonlinear-vegan.io
noul.fr
www.noul.fr
oben.global
sudoku-fighter.offroadlabs.com
app2.one-group.se
ozgunozdemir.com
www.pagosescuinapa.com.mx
www.sushikoasturias.pedidomovil.es
pixelwavemedia.io
www.rapron.com
booking.samasportshub.in
stg.register.satella.shop
app.senergypower.com
www.siware.dev
soultechcenter.com
sqctechs.top
www.sqctechs.top
www.su-pay.jp
www.sugarnroses.com
juan.suitefeedback.com
www.tagnool.com
tanveejobs.com
www.taxquarter.com
www.teamcollect.net
tente.app
screenbox.terron.me
thera-automacoes.com.br
refer.timeoutiq.com
todayhenry.co
developers.beta.trexity.com
www.vbender.co.uk
web.viewdigicard.com
livetrack.vionixasia.com
www.livetrack.vionixasia.com
bestel.speeltuin.watdrinkje.be
www.xtradr.app
yakyim.net
portfolio.yoojongwoo.com
www.yssolutions.org
yuliasv.com
zauscher.net
Other domains in certificate