Open
Cached
·
just now
79/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.bonacieux.style
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 19, 2026
Valid Until
November 17, 2026
72 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
11:15:5F:48:01:3D:43:91:C9:B6:32:98:7D:ED:AE:95:23:B8:9C:9C:E1:8E:DD:A9:ED:A7:35:B1:1F:A5:2B:D5
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Present
local-network=(self), loopback-network=(self)
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
documentmanager.in
admin.101attentive.com
adokaeadvertisements.in
agenciaxv.cl
www.aktechnologies.in
anafurlan.com.br
aqode.it
astafan.it
contracts.axsar.com
bamaeat.com
bansalconsultancyservices.in
www.barlicktap.com
portfolio.basantjanghel.in
bayvue.co.tz
senda.bi-devsolutions.com
binaryascent.online
www.bodosup.jp
www.bonacieux.style
www.bug-bite-identifier.app
www.c4etalent.com
convenios.coopsigloxx.coop
www.daffodilsmttc.com
davecourtemanche.com
www.dolorlibre.com
elix.digital
dashboard.empvia.com
www.eokul.dev
erbala.in
www.executive-fusion.com
www.g7mototaxi.fr
microflow.gaynaakoit.com
www.gdiautomatiza.com
globalvoyage.ci
globenu.com
www.glowandsmilecare.com
wb-bpp.keshif.me
khadmeensindh.org.pk
www.kinglib.online
volunteer.ksug.ai
lansingshoals.org
launcherintel.com
leveleleven.ai
lezzetialadonerkebap.com
console.livestockks.com
lucapimenta.com
www.maggiegetsyouhome.com
www.maretex.com
matildahealth.co
www.matildahealth.co
mbs-challenge-series.de
mgllw.com
www.misturagastronomia.com.br
momspuregrind.com
www.nateandrews.com
neetexampro.com
www.nivantatravels.site
noidapackersmovers.co.in
www.nyxistech.com
omsoni.me
opositagratis.com
investhouse.partnerhub.co.za
paulosergiocarvalho.com.br
pavan-kumar.is-a.dev
playhooked.com
portillopavingmd.com
www.primeleadssolutions.online
procurios.app
www.psicologocayambe.com
puretechchain.com
puretechzincir.com
www.puretechzincir.com
q28.online
backoffice.guardiancapital.qitech.digital
consultorias.guardiancapital.qitech.digital
qub3dstudios.com
www.reach-tech.com
lab2enrl.removis.jp
revledg.com
rigshunglobta.org
sc-tech-mali.com
apps.serifgunenc.com
siam-conception.com
solstice-events-ahmedabad.in
auth.soxastr.online
specdest.com
svchaitanyagroup.com
portal.textifyi.com
tmjapp.com.br
tricon.eng.br
vectis.in
vel.veerashaivamart.in
vengot.top
vikashadvocate.xyz
visitkerala.eu
wallpaperforge.in
neets.wenstravel.ro
westvillelanding.com
womenphotographerr.com
wonkyzipper.com
yaestaapp.com
Other domains in certificate