77/100 SECURITY SCORE

Certificate Information

Subject
CN=app.digitalaligner.com.br
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
June 19, 2026
Valid Until
September 17, 2026 40 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
20:BB:E0:07:6B:BC:8D:E4:D9:2C:61:99:61:B7:C3:2C:14:1C:3B:8B:58:88:4F:01:62:49:1C:F5:98:B6:B4:7B
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
asymmetricalcorp.com

Other domains in certificate

accessive.gg
agenda-mult.com.br
app.dev.altamiraweb.com
app.apptranslator.io
www.arosteknik.dk
atlascarkeys.es
dev.autowass.ro
auxinova.co.uk
www.bamsports.com
binammar.com.pk
treinamentos.bossainfor.com.br
bridgecanadaedu.com
bugsbegone.mu
www.poa.caritaslima.org.pe
champtrack.app
www.christophermurraycellist.co.uk
sop.cleaninginmotion.com
www.cleverr.in
deltamodders.com
app.digitalaligner.com.br
delete.digitalliberia.com
www.diversa-europe.eu
www.dk-audio.dk
doctorjavierperez.com
www.draftly.team
www.draninacarla.com.br
www.eaglesne.ws
app.earlygrad.com
edu.edcan.kr
edenalabs.live
engelyourcoach.nl
evertally.app
factor2am.nl
forvaro.com
www.glamour.ma
comeonkitty.goodcirclegames.com
www.gordonfamilydaycare.com.au
gruposcout926.org.ar
henbrox.com
hust-cv-student-20214986.id.vn
hypnoxperts.com
icao-alphabet.org
firebase.idera.com.br
idilium.net
www.incognita.land
ismecka.cz
www.iut.or.kr
www.izmirsoftware.com.tr
hydra.jarsss8.es
portfolio.jerboapp.com
jisunglife.kr
score.kfcorp.net
www.krishna02.in
www.kysports.top
events.laser-torch.com
kateseuranta.leoclean.fi
www.mambas.no
www.mcnet.in
melfar-serviceudlejning.dk
demo.menuya.app
www.momt.shop
omkostningsberegner.dev.monax.dk
game-scrush.mondayclub.io
www.montclairnibosi.com
www.namehacker.net
new.naturalpettoothfairy.com
www.newleap.io
oops-games.com
baby.patricksonneveld.nl
betasihotel.premiumhotel.pl
www.puggapp.no
domains.pylonsites.co.za profile.pylonsites.co.za
admin.rabbitrecycling.online
rakeshtechnologies.in
wotamark.rnsk.app
www.tere.rocola.es
staging.mana.saulesaptieka.lv
selfimproving.dev
www.sisleys-crellow.co.uk
www.sleepy.help
aivisibility.snickitybit.com
www.soluciontecnologica.ec
www.sparkforge.buzz
stomatologia29.pl
ledger.student-orgs.org
app.studioalfaargenta.it
www.stylusav.com
bodamejialandaverde.swanmoments.lat
academy.telly.cz
www.thedeck.poker
www.thedriftnft.com
tremeax.com.br
www.uhstechnology.com
dev.pagamento.vadeaviao.com.br
www.videotron.be
www.words-war.com
app.wrecklog.com.au
erp-rental.xyzgoprint.com