Open Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.lnfnunes.com.br
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 25, 2025
Valid Until
December 24, 2025 47 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
12:9D:DC:6B:C9:1E:B0:EF:BC:F0:37:97:78:85:03:95:52:D8:0F:0B:9F:24:CF:6B:0E:D5:34:0B:D1:7D:60:EC
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
employandrew.info

Other domains in certificate

www.accesscontroll.com
clientes.activafacil.com.mx
www.akivaforthepeople.com
aux-quatre-vents-france.fr
www.barterixapp.com
elearning.bbedc.dev
sh.benz.ninja
mach1gp.bwysistemas.com.br
calllink.co
clickrace.it
clubtennisatpitt.org
actoss.co.in www.octosense.co.in
colintakeo.com
api.hippo.com.bo
consoleit.lk
gestore.cronoframe.it
datadrivenshopping.com
auth.app.dipseastories.com
drjuanbravo.com
dsacademy.org.uk
hub.ecosystem.life
electrodalex.ro
elettricista-pesaro.it
www.ephemeris.me
f1-dashboard.com
fahlwi.ai
ourday.festivio.online
cms.foxbith.com
gallerybarberstudio.com
dfs.icwd.co
www.illicarte.com
vouchers.impactapps.com.au
kpl-advisors.ischoolconnect.com
static.jointhesorority.com
jyvaskylanlentoasema.fi
kazandirankelimeler.com
koeda.fi
www.krawcz.uk
enesjuriquillaunam.lapieza.io
lawyer.legalemirates.com
www.linr.io
livekvitto.se
www.lnfnunes.com.br
www.mamashamimatheherbalist.com
app.maptunity.com
marchelocal.ch
mazudao.io
mewug.de
mgm-here.com
molturalo.es
www.mom-story.com
horarios.naxs.com.ar
play.dev.nftgamelab.com
noga.dev
www.my.nutch.be
ruta.ocho.life
omnatic.com
screener.openlinksgolf.com
www.ossrshipchandlers.com
bpl.play29.com
polygoncast.com
prgoswallet.com
proforextrades.com
www.proofofsound.com
www.projectmanager.publicvm.com
www.pygmiesinc.com
controle.quantumrfid.com
heatmap.relationshipsproject.org
www.rellek.io
www.richest.today
samaritantech.org
flyaway.sandro-paris.com
admin.staging.savedby.io
app.scorepanda.site
www.shreegaming.com
smartsurveywork.com
sudoku.solli.dev
www.sozcuk.xyz
fb.dev.spelezoli.lv
studiotwentytwobeautybar.com
auth.summaries.com
takayasuseinenkai.com
www.technickclarke.com
thairinruam.de
thatastrochap.com
www.turankerteszet.hu
blog.uskay.io
resourcecube2.vamo.tw
venuseffect.gr
vermaercke.be
www.vintagejorts.com
www.vipasbusiness.com
g.viral.net
www.wicaksanaberlian.com
careers-ace.witeseb.website
www.wmc-inc.org
wyllie.dev
www.yljewelry.co