Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.rudama.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 17, 2026
Valid Until
October 15, 2026
64 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D5:6A:0F:67:1A:86:41:66:3C:65:69:53:0D:00:00:96:67:35:8F:BD:43:F8:AD:4A:49:88:FE:6C:AC:46:4A:9C
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
erp.swiperesources.com
google-auth.0xnegative.dev
acuflow.de
adisanmetals.in
aikidojo.ch
www.ajaijoy.in
www.ajgav.ind.in
www.alignchiroclinic.com
link.among.world
ampyourself.nl
admin.appteck.de
portal-colaborarvo.sandbox.arvohealth.com
www.bandz.com.br
www.c-store.cl
www.casaflo.ai
chestnutpledge.surf
chintaka.com
cleochat.app
www.crinkex.com
customwarepro.com
dottorquaranta.it
deeplink.dragoappli.com
blog.drbu.org
drivecommander.org
www.dynasoft.co.uk
www.elephantplena.com
eloyjo.com
www.equidentity.be
bestellen.europa-pizza.de
femilanreoke.org
fortcell.com
worker.link.gigsmart.soy
www.goahead.lol
www.grandtechglobal.com
app.gtmhelix.com
www.guantifu.autos
guidez.pl
www.jeccapital.surf
www.jonahhalili.com
image-converter.joyousgarage.com
www.kaetc.com
kavya-spa.com
www.kavya-spa.com
admin.klikban.id
kloners.in
www.leadsbase.ru
scodicms.llgsupport.nl
markmiska.sk
time.mazeffa.com
measurementlab.net
megastaria.net
memoryforlifephotography.com
prenotazioni-stage.miogarage.it
mobdev.com.br
qr.nava.eco.br
www.particlelift.mom
pitchfork.dev
presenteieme.com.br
cafeteria.qwerdesigns.com
raav-therapie.de
rankverse.live
www.registr-dluzniku-k-nahlednuti-zdarma.cz
www.rpinvestments.ca
www.rudama.com
esd.sanbs.org.za
scholarlink.ovh
shwejhamehpaw.com
www.shwejhamehpaw.com
simbiss.li
simonadoes.it
www.sleepyjoegame.com
slkenterprises.in
admin.smarttrails.ch
www.speak-buddy.com
www.stjohnhaifa.com
www.studystudify.com
www.sunreno.ca
bodagaldamezvaldivieso.swanmoments.net
www.tamiltranslator.com
www.techsfo.com
aiwishcards.techyabe.com
www.tekdatum.com
terrasjes.eu
terrifx.co.il
tugucci.tetsuhiro.dev
theapisource.com
themindfighter.in
auth.theodesia.com
ticketa.co.zw
timezonewhiz.com
dev.tovlogistica.com.br
twistedsyx.net
web3transaction.tyr-tools.com
www.vaultrockcapital.com
vayro.bg
bayer.vidocto.com
weareone.com
www.wesleycooper.com
www.wetroll.it
mapas.yatto.com.br
Other domains in certificate