Open Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=lagunachat.it
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 11, 2025
Valid Until
February 09, 2026 85 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
89:B5:5C:7E:DA:78:E3:2A:9A:1D:8B:D7:85:CB:A9:A3:BA:DB:77:5A:D5:E5:DB:D0:34:CF:55:B1:43:08:37:2E
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
ashland.io

Other domains in certificate

fire-prod.agilelements.com
aivaportal.com
ambientararquitetura.com.br
admin.apier.dev
numberedheadings-stage.bobswift.appfire.app
arjanmotors.in
artificialprism.com
avaharford.com
www.awefalafel.com
bindimport.com
boysvswomen.com
rmx.bttls.com
buscaseguros.net
fukumaru.cfs-japan.com
www.wireview.codecaptives.com
dashboard.curi.lc
cybernetyc.com
dottorcugini-otorino.it
www.dragonshade.app
luzyverdad.sisa.edu.bo
sosparebriseplus.app.effiquo.com
explorescience.ai
auth.eynra.com
seller.firebulk.com
app.fitnesspilot.com
livy.foxhub.space
test.frenbit.com
huckleback.com
alphabytelab.id.vn
todo.igoraugst.dev
auth.immatriculation-auto.info
warriorboxing.impactwrap.com
implantfile.com.br
soc.intelliguild.com
app-canary.interplay.io
blackjackcounter.ip-ddns.com
justguess.it.com
app.jlmoraiscontabil.com.br
keystonefinance.net
douha.khaldi.dev
kimato.info
evolado.koolbyd.com
lagunachat.it
laurasiddallcreative.co.uk
beesharer.livs.work
madrigalcap.com
mastermindy.com
admin.mattressraja.com
mdivani.org
account-uat.megsapp.com
admin.muuzbox.com
admin.datapoint.net.in
online.543.co.zm
orevalbrands.com
www.paipoojaghar.com
pairwiseorg.com
palmweb3.com
pehlivan.dev
pickaday.se
letshine.piticommerce.com
plantfoodsales.com
proto.ppm.one
app.prepmedecine.be
www.pulsekittens.io
www.rafacotrim.com.br
rafortiz.com
ramsonsjewellersgoldsavings.com
admin.reci-pro.com
www.srichaitanya.reinventuniforms.com
www.resourcingally.com
models.staging.roboflow.ai
rocsch.com
sarahsbudget.com
www.sazposh.com
www.sbajet.com
pronto.sisidev.com
www.nextgenacademy.smartscouting.app
resetpwd.snaifun.it
straetus.help
evaluator.studygazelle.com
admin.studyreserve.com
stumberger.si
sushadu.in
app.swiftlinklogisticsja.com
tanquesysepticos.com
taykeen.ma
tmss.at
tris.uk
db.trustedhouse.com
umersarfraz.com
vernalizeme.com
www.verve.lk
www.vietsono.com
www.voxelcubes-games.com
www.winresponse.io
woodofmetal.com www.woodofmetal.com
wzborowski.site
akankshaportfolio.zootem.com