Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=app.findigo.lt
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
February 04, 2026
Valid Until
May 05, 2026
86 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A0:89:65:57:74:EC:DA:94:4D:E6:01:94:2C:E6:85:52:BF:DD:A8:6F:2D:F0:23:95:CA:B5:90:79:4C:68:44:1D
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
cyber.org.ma
white-label-sectionalconfig-cert.3dcloud.io
affilimate.io
ct-staging.aldointegrations.com
www.alibookclub.org
amanadecco.com
andriusb.com
www.anwest.com.au
trackit.appflair.dev
www.apphouse.uk
staging.business.appjection.com
www.archstoyanovi.com
bot-dev.bennybutton.com
go.bestgadgetfinds.com
www.bluelightforge.com
tml.bothqandq.com
www.briskine.com
universal.brtmobile.com
calebweldon.com
www.carlos-jiro.com
carrinetworks.com.mx
pagamentos.cesisonhoinfantil.com
fitnessgym.claudiomldo.com
nomad.claudiomldo.com
clovis-sanceo.com
www.agropoultry.com.np
compu21safetytraining.com
cdmedia-bulgaria.contentcard.com
cynanrhodes.com
dev.cypherpunkstudio.com
dharacreative.com
byggdittvisma.direktkonsult.se
www.dothetrek.com
d1-myproductbook.dpdlocal.co.uk
login.ehryourway.com
elisharudenkov.com
class.enkeldigital.com
espacioalmanativa.com
dashboard.sandbox.eventovirtual.co
app.findigo.lt
jobs4neets.formprof.ro
app.foun.co
playground.fungoman.net
fztlab.com
discovr.getmade.co
globalvisaportal.pro
auth.gmassistant.ai
graemezinck.ca
guang-kai.com
games.icancare.in
ifaf.us
ilarepress.com
www.imaginer.co
envoy.impreszions.biz
www.industrylinq.com
app.storybert.jakob-fuss.com
www.jideguru.dev
k-burkhardt.dev
preprod.kards.fr
www.kartfinity.com
platform.keywordsai.co
kovacdaniel.com
kuco.top
www.lalolita.rocks
menufacile.info
stage.moduslogic.co.uk
mstommes.com
billet.museumjorn.dk
www.nikx.co
numbus.in
oakslab.xyz
st-auth.omochim.com
oraclog.com
www.ordernoshery.com
auth.place202.com
ipad.prenota.cc
docs.propps.com
publizm.no
pentagon.re2fe.com
www.registryimdo.org
hyperlocal.rehov.net
rekafoodfinder.com
www.reservaibirapitanga.com
www.roverseinc.com
sarah-and-jack.com
vijay.snapmentor.no
spacemq.com
stackstrumps.com
www.stocksorstonks.com
taxiride.in
www.tenforachange.com
thermodelchoc.com
alpha.conference.thinkbitevents.com
main-stage.truckstop.com
uptothe.cloud
utronics.com.br
supertrader.vambuu.com
next.wearkai.com
windupmusic.com
zufna.com
Other domains in certificate