Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=galardaoimoveis.com.br
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 17, 2025
Valid Until
March 17, 2026
58 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
AF:D6:C1:C1:E8:D9:CE:DB:D9:D1:B3:76:B3:C8:0B:3C:AD:26:BC:C5:BC:53:65:73:E2:19:FA:7E:2B:53:29:42
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
book-forex.com
5tacosta.cl
allhabitats.com
web-development-guidelines.andrejnsimoes.com
ateliermomomo.com
www.atrexler.com
autochoice.it
www.indique.ayoapp.com.br
barnashki.cz
www.boldambition.org
app.bookezy.lk
brainagent.org
brglobal.kr
storybook.chektdev.com
chotaurl.com
manual-auth.ottimosystems.co.th
einsteigen-staging.collla.com
demo.configlab.co
cosasqueodio.com
www.cuadd.org
aj-lucas.app.cyberloop.ai
daswanienterprises.com
databizz.co
consumer-frontend.production.konstanz.delcom.nl
digiclass.no
www.domsmandsspillet.dk
rosymarti.edu.pe
elevateroofhangerchennai.com
link.dev.everready.ai
questions.examind.io
fablefoxstudio.com
www.fendlife.com
eparcel.fitsexpress.lk
foresight.software
galardaoimoveis.com.br
getsetcoding.com
giftsformen24.com
app.gomo.world
gostans.com
dev.gtmtls.co
hack-in.wiki
www.dashboard.if7sports.com
www.infocore.com.pe
jschwarzdevelopment.com
bkr.kartindo.com.br
learnmerlin.com
matyas.lefeyer.fr
legendarypadel.com.br
lichodev.xyz
lilshopofcards.ca
playground.lliangchenc.com
share.logic-wiz.com
lucifine.net
www.m1st1ck.com
cl.m22apps.com
melodyiq.com
metta.social
mminstalling.com
moboxapp.com
backoffice.mya-tech.tech
samples.mylang.in
holiday.nabilamerthabit.com
auth.navattic.com
nextgencloud.info
www.notebirdapp.com
soul.nysaclan.xyz
penda.al
pixelgram.app
ask.pulpo.ai
bus.racha.studio
pondicherry.rainbowsdroptaxi.com
rarendare.com
chat.raunak.me
ruby.by
advans-cm.d6-staging.rubyx.io
www.sadashivcafe.online
igor.saladproject.org
scharade.jp
skrrtx.live
app.stjohnfenton.org
dev.sushant.uk
svnworld.shop
www.tesf.club
alta.ticksy.app
tovil.care
www.tripzo.co
www.tunystech.com
admin.utstudentrewards.com
www.uyreka.com
vatszdesign.com
app.weve.co
wheelofnames.online
www.when2call.com
samuel.white.engineer
whychildhoodcancer.org
willtofreedom.org
worldartnavigator.com
www.wotar.org
staging.api.wtmove.app
www.zachariacurtis.uk
Other domains in certificate