Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=www.markia.mx
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 17, 2025
Valid Until
March 17, 2026
81 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
38:76:8E:FD:AC:A0:C2:E8:BD:1A:B5:D4:C8:FB:59:2C:BD:29:57:6D:2F:A7:40:8B:40:A2:2B:7C:A1:85:6D:87
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
fayadds.com
afc-shop.anbi-reception.jp
cerespo.anbi-reception.jp
sankofoods.anbi-reception.jp
portale-qualita.anccp.it
aodesmaroc.com
autodoprava-kosice.sk
gestionale.avocadolab.it
lspgroup.b-bot.cloud
www.admin.bewell-deals.com
books.booksstore.online
www.byewaste.nl
www.changmashristi.com
checkmarkacademy.space
experience.colgate.digital
uykuogretmeni.com.tr
app.criativocorretor.com.br
cubestacker.com
www.danaleson.se
datalabsys.com
www.datasaddle.io
devfest-2025.developers-group-dijon.fr
dispatch.ovn.devserver.cc
dfwnow.org
app.digideckmon.com
dominovip.online
enia.business
app.ghosttide.eventup.ro
sigap.fdkuinsu.id
feel-o-meter.com
fincherbox.com
fusus.com.br
www.fusus.com.br
giovannibuonsante.com
gridlinepartners.co.uk
hamzaashrafi.com
ibrahimmedhat.com
jobneedsolutions.com
www.jobneedsolutions.com
raffle-randomizer.johnchristophersantos.com
kaldron.io
portal.kerrpumps.com
kobechina.jp
www.kobechina.jp
gracjan-011.lampartoms.com
gracjan-012.lampartoms.com
lateraluslabs.com
sistema.legalizeseven.com.br
login.loject.jp
www.luminousworks.nz
www.mapesafoundation.co.za
marginlab.ai
www.markia.mx
www.martu-gymon.pl
admin.mazevault.com
mide.autos
www.mide.autos
www.molnia.jp
my-studyflow.com
dev.myend.com
navigointelligence.ai
www.neurofocuscoaching.co.uk
www.neurofocuscoaching.com
nexedz.org
sampler.niallg.ie
tategakinote.niche-apps.work
www.norskklassiker.no
insights.nortic.se
myduka.paycloudafrica.com
www.pousadanatalinobroleze.com.br
www.pro-conversion.com
hakobune1.retro-ink.com
app.rocksoft.global
www.rozaniecrodzicow-knb.pl
sachin.ink
securo.cloud
admin.stayleafhotel.com
reservation.supagetti.com
www.tesis.digital
theboutique.so
www.therapycornerconsulting.com
www.thewellviacompany.com
tippressure.com
links.triber.app
truecolours.org.au
vault.trustline.id
www.uniqorn.live
inspection2.dl.fb.gl.services.int.unpaidworks.com
www.vendorgatesolutions.com
www.vidralglass.com.br
weinrechsouren.com
worka.id
admin.yalla.pizza
menu.yalla.pizza
pos.yalla.pizza
store.yalla.pizza
yogaspire.in
foodsensitivity130-report.yourgutmap.co.uk
foodsensitivityvegan-report.yourgutmap.co.uk
medglobal.zendot.in
Other domains in certificate