77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.graph.com.pe
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
January 02, 2026
Valid Until
April 02, 2026 79 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D8:13:61:F2:9E:77:64:2D:DD:72:46:3D:3C:CA:D5:6D:CC:30:76:3C:BD:30:76:9B:CC:80:4E:63:DF:6A:5D:83
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
constructionstyle.uz

Other domains in certificate

www.7directionsksa.com
abbasparyavi.com
www.acmatuab.com
webapp.acuizen.com
cdn.aiderly.de
airfieldhub.com
trikatuka.aknakn.eu
www.aman-technology.com
catalogo.amarcadorobo.com.br
credit.appmozart.com
assets.appointia.com.ar
iscrizioni.associazionefelicidad.it
club.dev.bestathletes.co
betofumi.com
links.bitstack-app.com
blakeminix.com
phase1-admin.breazie.com
bridden.com
carpinteria-andrioli.com.ar
caylerandsons.co.uk
www.caylerandsons.tv
chesmalto-portotorres.it
design-test.cityfurniture.com
alkateknoloji.com.tr
masbeneficios.cuponclick.com.mx
darkpiece.com
digibook.digimogo.com
discoveryksa.net
djount.com
dsprestigeautos.co.uk
easybanglapatente.com
ould-et-fils.ent.ne
ephoenixdev.com
www.esclicker.com
financeautopilot.com
sb.share.fintelli.app
access.fleetwms.com
www.gccontender.com
ghalas.eu
www.vilcabamba.gob.ec
www.gogoapt.com
www.goitfine.com
gonebug.com
www.graph.com.pe
greatsmiledeerfield.com
station.hangtok.com
www.hearttoheartconnection.org
iaidometer.hu
totem.idun.com.br
app.impactdirectors.org
innrsys.com
investcoinonline.com
isinfluence.com
jankrokos.com
www.jasonkrieck.com
www.juanignacioschwemm.com
klo-apps.com
agent.logivan.com
www.m-juuksur.ee
mhroy.fi
mojiful.com
ui.motapi.com
www.my-shelfy.com
games.mycluetivity.com
orodentalaid.com
www.padelcorner.mx
fawkes.prod.eu.panorama.paloaltonetworks.com
paramparafoods.ca
www.parcelbee.in
sandbox.sancor.portal.pay2b.net
old.peerdustry.com
dashboard.perigigi.com
fishby.pixoby.space
dynasty.portfolioview.co.za woodland.portfolioview.co.za
walter.qdx.co
qoqmeme.com
raccoon.website
realtybulls.com
app.relevantleads.io
revolucaosolar.com.br
salmanechafik.ma
www.santuh.in
www.sbz360.pt
shekhar.us
www.shirleyball.com
discount-solo-401k.solerabank.com
www.sprenity.com
www.stindustriesmdu.com
superrlink.com
tarnokymezes.hu
brew.terrible.dk
daysix.thetraumaapp.com
tvtiebreaker.com
unbiasedbreak.com
intranet.vanwijnen.nl
wex.wanax.com
xueying.business
zapwise.com.br