Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.shusson.info
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 02, 2026
Valid Until
October 31, 2026
55 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
23:6E:64:A8:D3:AA:78:45:93:A4:D0:B6:A7:22:3B:8C:1F:94:0C:9C:B0:B2:36:6F:7A:C0:81:80:B0:FA:21:E4
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
decodedlearn.com
2share.app
www.alsakerhytte.no
andanilogistics.com
miimbi.angelis.ai
app.angie-nutricion.com
antika.com.mk
apexmindworks.ai
jorge.barbizo.com
beatingline.com
admin.beonlegal.pl
www.bmahub.net
brewjoys.com
byadigital.com
www.carnivalxchange.com
citizen.love
www.cosmicindicators.com
tiles.crimeometer.com
pro.culturelille.fr
curiousworm.in
curricular.me
dagning.net
www.dakshinrealty.in
kajaaniperehdytys.edukamu.fi
app.finzace.com
www.flightshunter.it
forturafinflow.com
www.generalbiotics.com
genteck.com
www.genteck.com
gerardmolina.com
get-to.de
gooeyz.ca
grandwedding.in
greenfood.live
hairstyling-thomas.de
mahlzeit.heidenblut.eu
www.henrykruell.com
dev.hngl.io
login.hospitalprivadomendoza.com.ar
sub.idenfit.com
www.indigofast.in
www.innovolegal.cl
jardinesmexico.mx
hkl-cmc.jec-digital.com
www.jlukenoff.com
preprod.jygolebonplan.com
journal.katesohng.com
www.keelewarehousing.com
lantz.io
led-vertising.be
lesther.tech
api.losergain.com
i.m69r.com
auth.macroprep.app
www.manarformation.com
app.matchwise-sg.com
socials.matchwise-sg.com
meshunderground.com
app.neurozone.com
games.olgdigital.com
staging.nuscalibur.ourcodelab.com
patentforge.ai
pdfkit.uk
registrierung.petleo.de
torneo.pingujuegos.com
primary.clinic
principalpoint.com
qaree.bi
www.ryanduffield.com
order-staging.sadhrasya.in
www.saniplus.com.uy
auth.dashboard.sandbox.aws.sardine.ai
auth.dashboard.sandbox.fis.sardine.ai
www.sbsnet.me
www.shusson.info
siraaj.uk
beta.sprouthub.com
saintsfordtailgateadmin.sqwadhq.com
wework.sqwadhq.com
suchi.app
festspielhaus.tablechamp.at
vaiprochao.tecladodoaspas.com.br
www.thectmccorkles.com
clarity.tibil.ai
phm.tibil.ai
www.timwobith.com
www.uberdrivercalculator.com
ulogicit.com
unbrokencircle.art
www.unitedkarateclub.in
urbanclassics.ch
utr8-group.com
admin.valdejalon.app
nexus.vens.co
vivah.at
devauth.watchmenext.tv
preview.workandrise.com
www.xidemmedical.com
weld.yariex.org
Other domains in certificate