Open Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.les-halles-boucherie-traiteur-restaurant.fr
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 30, 2025
Valid Until
January 29, 2026 75 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
72:58:AA:DC:64:F2:68:55:D4:F8:EA:29:7D:F6:A2:11:A1:A7:FD:9E:E3:30:C5:8D:1A:48:C5:DC:CD:9C:F5:B1
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
dosukoisakaba.com

Other domains in certificate

igp.12traits.com
boundaries.28east.co.za
profile.qa.abilitystack.com sl-dev.abilitystack.com
www.agoravoice.site
app.agricultureresearch.wales
admin.aimzegypt.com
get.alpinemedia.com
dev.app.apolloscribe.com
apprutanaturaldelriotinto.com
asmih.me
www.axel65.com
bait-alkhair.store
www.battle-energy.com
www.bdbdg.kr
authorize.blackprint.dev
caiodeiro.site
fastnote.candraaji.com
docs.cannactrl.com
interpreter.cappisco.be
wow-kuji.chance-store.jp
clashroyale.cards
www.claytonpierce.dev
arunai.co.in
b2b.cocone.co
www.coderivy.ai
www.sancakmekanik.com.tr
goto.idealcard.com.tw
conan-ui.com
contfacil.com
verify.cupla.app
daayada.com www.daayada.com
www.dahmon.dev
event-dev.ddangkongschool.com
admin.dhariwala.com
clasificados.diariodexalapa.com.mx
www.dogecolors.com
www.dojo.contact
easyeatsordering.co.uk
www.eezeverify.com
www.ehudtamir.com
admin.evenero.com
join.eventdoctor.app
shaders.evos.studio
www.exitol.co.za
fin.fredocloud.com
fugiro.capital
www.gayadeals.in
www.geniteam.llc
gloriafitness.at
gluttonysadvocate.com
gwjgames.com
go-staging.heatseekr.app
hoivaorvokki.fi
web.inquery.hulic-agency.com
app.ideastats.io
saregrupobachoco.inter.mx
iskiuphill.com
jaguar-welding.com
www.jarrak.au
calculatoradmin.jtssolar.ro
www.les-halles-boucherie-traiteur-restaurant.fr
makerspacefriendlies.com
y.mandm.app
www.manutenzione.software
insight.mcsproject.com
mikyot-ai.com
minhaproducaomedica.com.br
novazonrelay.com
go.occitan.co.za
cos.overview.one
dev.pedeomenu.com.br
www.pushburgers.com
reformedchristian.org
www.refresh.estate
renataschiropsicologa.it
www.ridl.app
waqaf.rufaqaa.org
www.sabaken.dev
www.schuttersclub-vsz.be
shikaku-kanri.com
seller.shopcircuit.ai
www.sinclairfamily.biz
stage.caregiver.sios.life
demo.stratics.io
www.sunnyday.dev
www.supercent.io
account-dev.tanto.app
tech-sulting.com
terapiasyspaluar.com
qrgenscan.toolsmpro.com
dl.top-chefs.nl
mevale.ver.ga ver.ga
www.vpsmaster.in
sharingenergy.wowdesk.jp
base.yonaskbrom.com
sidr.zapay.link