77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.sushikoasturias.pedidomovil.es
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 27, 2025
Valid Until
February 25, 2026 87 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B9:73:30:B3:59:C7:31:4A:AC:F0:10:12:06:37:6E:6C:D4:97:AE:E9:D4:7A:14:D7:E9:9E:ED:D1:06:90:1B:71
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
app.lettershop.fr

Other domains in certificate

aafpets.org
activme.org www.activme.org
auth.aiheadshots.us
www.alexest.net
website.anagraph.io
baisar.in
auth.bdalil.com
app-clinicas.belaatende.com.br
www.boeconsulting.no
test.boginni.net
feedback.braverangels.org
www.carlswerk-victoria.de
carrerarailings.com
cashengbung.org
archive.cenatus.org
retiro.ceudecapella.com.br
churchtranslation.de
courtify.io
ea.cryptoethic.com
cyberdad.io
www.dilebon.be
dnieln7.xyz
dscdelft.nl
ecoabc.com.mx
www.ecothinkers.net
app-dev.emotions-diary.ru app.emotions-diary.ru
credenciado.essilorconecta.com.br
auth.finlayfitnessservices.uk
www.fitedgefitness.com
genitorionline.it
dev.getevoapp.com
events.gowrishankar.info
www.gqamisasolutions.co.za
digital.haden.dev
homeradar.co.uk
dominikk.impactwrap.dev
bunbunapp.impossible-labs.io
inquiry.online
reg.iol2019.com
jordy-hertogs.nl
www.knowvic.in
koenigseder.me
demo-feriavirtual.lapieza.io
lasuite-spa.com
fd-test.le-dev.com
newtab.liao.dev
clientes.lifesource.es
loli.tokyo
marketfind.net
marketfind.org
www.markgoodwin.dev
microdens.shop
miku.shop
mobilpay.app
app.nikugen.jp
www.nonlinear-vegan.io
noul.fr www.noul.fr
oben.global
sudoku-fighter.offroadlabs.com
app2.one-group.se
ozgunozdemir.com
www.pagosescuinapa.com.mx
www.sushikoasturias.pedidomovil.es
pixelwavemedia.io
www.rapron.com
booking.samasportshub.in
stg.register.satella.shop
app.senergypower.com
www.siware.dev
soultechcenter.com
sqctechs.top www.sqctechs.top
www.su-pay.jp
www.sugarnroses.com
juan.suitefeedback.com
www.tagnool.com
tanveejobs.com
www.taxquarter.com
www.teamcollect.net
tente.app
screenbox.terron.me
thera-automacoes.com.br
refer.timeoutiq.com
todayhenry.co
developers.beta.trexity.com
www.vbender.co.uk
web.viewdigicard.com
livetrack.vionixasia.com www.livetrack.vionixasia.com
bestel.speeltuin.watdrinkje.be
www.xtradr.app
yakyim.net
portfolio.yoojongwoo.com
www.yssolutions.org
yuliasv.com
zauscher.net