77/100 SECURITY SCORE

Certificate Information

Subject
CN=poslikavazleo.si
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 16, 2025
Valid Until
January 14, 2026 56 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D2:C8:13:C1:FE:BA:2D:31:0D:13:E9:DB:2F:DB:43:86:B8:C8:E3:43:4D:EE:F3:39:E9:20:0C:CB:DF:34:35:9F
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
app.salesbuckets.com

Other domains in certificate

www.adiranids.com
online.asbestlogboek.nl
avantagescpo.ca
apps.b4bh.com
app.beulive.com
bimblybyte.com
workorders.bitimus.com
blckcode.com
partners.bonpay.co
dropdesk.bradbieselin.com
startmeup-faq.bridge2things.at
cadeaux-entre-nous.fr
chess-fu.com
c3.roadrunner.cinedeck.app
awesomepiece.co.kr
codeengineer.dev
coral-clinic.com
cryptotools.fun
www.cyriel.com
darkhorsesgroup.us
www.databackup.com.br
www.delplaya.tech
www.designs2.com.mx
emeddesk.ca
www.escapateypunto.com
www.fantasie-it.de
dev-oracle8l0x.fortunetra.com
galsenblockchain.xyz www.galsenblockchain.xyz
gcpworkshop.com
gfc.io
dev.glissandoo.com
goranger.app
dev.crm.v2.greentiger.in
santatereza.guiasaudemais.com
link.helbiz.com
www.hyperdock.in
in2soc.tech
www.inparallel.app
intejer.cl
qa.iotdataroom.com
alumni.jdtioaa.com
kamionskiprevoz.com
kevinrono.com
protect.keyholding.com
kind-path.co.uk
kuusamoairport.fi
media.lange.click
learnguru.net
magneticforce.com
www.mambaanalysis.net
www.marktbox.de
matisseverduyn.com
mdcportal.ca
links.measureprotocol.com
mysewingangel.com
nexflux.ca
nextnails.care
app.niikiis.com niikiis-carga.niikiis.com
nippun.com
crm2.nvasolar.app
onetrust.417.cz
perfectlybuilt.uk
poslikavazleo.si
michael.pratt.im
prycetechnologies.sg www.prycetechnologies.sg
psycoforensis.com
aasa.radanalyzer.com
rebeldottie.com
www.royaltondeveloper.com
rrveiculosmt.com.br
saisondeski.fr
www.saran-k.dev
www.sdgolftrip.com
voucher.sensi.ie
simuladorcreditoschile.cl
siradvisors.com
auth.google.snews.tv
auth.spilaktier.dk
spr.cx
sssolarenergia.com.br
app.studioauckland.com
summerhammer.dev
www.swingtoplaces.com
tannercottle.com
the-happy.app
thealphaassociates.com
thepremonitions.org
tropicalz.in
veroniquethepub.com
wavy.vteam.com
qrcode.vvfvillages.pro
page.wanpass.me
admin-test.wejha.com
www.yatantaxi888.com
tianshijihua.yuanzhongheng.site
zobbogames.com