Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=www.arslanticaret.web.tr
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 21, 2025
Valid Until
February 19, 2026
76 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
FD:49:22:B9:C3:44:C1:4D:D0:E8:3E:89:62:68:0C:FE:EB:0C:0F:0C:96:EC:30:2E:4D:4F:C9:E8:B8:62:9B:69
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
claims.snowfox.ai
admin.alexandrumarica.ro
alexandrumarica.ro
alicsnet.com
www.alicsnet.com
www.apalmadrid.org
appnexify.com
ashishk.com.au
auth.google.baitaconteudoplay.com.br
basicteleprompter.com
auth.beastsport.tv
beyondentity.com
canvas.beyondentity.com
www.beyondentity.com
www.bulancakfirmarehberi.com
blue-cell.co.kr
gestao.conectacatingueira.com.br
curriculox.com.br
cursosakashicos.com.ar
www.d2soft.ru
dominio.deft.work
demirstack.com
etiket.app
evofusion.in
facetomemories.com
fit-level-up-von.app
bergmansautos.flowaroo.com
chinmayi.foryouproducts.store
freehub.737703.xyz
app.gaertner-boehmer.de
www.gaertner-boehmer.de
globro.ai
goaltrack.net
www.greenwoodislandresort.com
gtmpropertysolutions.com
www.gtmpropertysolutions.com
gubeitrading.com
www.gubeitrading.com
hafarworld.com
www.hafarworld.com
www.haterbazar.com
app.iddealize.com
fbs.iknowbots.com
www.fbs.iknowbots.com
jakeiherb.com
jollyredsbbq.fi
www.jollyredsbbq.fi
me.juiyiwell.com
aec-infinity.kinfri.online
l-essence-elle.com
status.labrador.ai
leaves-admin.com
www.lenosequity.com
lexirise.com
www.lexirise.com
business.lunchyapp.com
magiccalculatorapp.com.br
app.matchone.jp
send.me2mad.com
rufirebasec2.moboreader.com
mojebaterka.cz
crm-2.mysecureqa.com
n4yo.com
newandhramealshotels.com
newmoonsr.com
www.nsoll.cz
o89192.party
odola.or.ke
app.outdore.co.uk
demo.get.outdore.co.uk
perisaiabadisinergi.com
wf.pickaxepros.com
qscolb2830.com
admin.quiksy.store
raelectricalltd.com
www.rhomben.com
salman-portfolio.rest
sarapotyscki.it
sarasara.hair
savania.tg
savar.in
seowebsites.be
shippo.mn
worst.sintlambertusvrienden.be
sistemasan.site
pets.smarttoolscloud.com
www.startupvalidator.xyz
studytimer.io
dev.sundayswag.co.za
ptrabajo.superbidcolombia.com
mentalio.teachhorizon.online
techwithsam.dev
thegrowthplug.com
uskitchen.net
hot.wcgslot.cyou
www.arslanticaret.web.tr
westlintonandcarlopscdt.org
crp-report.yourgutmap.co.uk
web.yoyoyo.online
zambranadescanso.com
Other domains in certificate