Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=www.peirolo.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
January 06, 2026
Valid Until
April 06, 2026
85 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
DD:A3:DB:38:68:E4:AD:7D:39:07:47:A2:B1:05:C8:7F:D0:6F:EB:42:2D:3C:1A:E8:95:28:65:BF:08:FD:33:27
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
fixdentalcareug.com
1stop-solutions.com
agendacinemadesenfants.com
akgslearning.com
admin.csos.amiti.cloud
www.aonecomfort.com.au
ashxshrish.com
dramatic-catchball-chat-a.asukaishii.net
reports.avgust.com.co
app.beamly.com
auth.bikemarks.ai
impos.bitsytetech.com
blessingbox-ai.com
ideamaker.bokeringo.com
hnt-atestados.bondy.com.br
hnt.bondy.com.br
www.brightonandhovechessclub.org
bytesdeploy.com
cborodescu.com
www.cborodescu.com
cemerlangitech.com
chamadofacil.com.br
dev.clickhoroscope.com
cophero.com
curemontreal.org
www.curiouspacks.com
www.cygdisenos.com
register.districtconference7030.com
www.drista.in
old-blog.dsjin.co
e-movie-tickets.store
x7zz1x3el1hvd5e.easyapp.co
xisb986wyw4wm.easyapp.co
xjqiqzi3mizef.easyapp.co
ecapyc.com
cep.edu.co
eduzolve.com
crm.elmasa.online
envorum.com
ernestns.com
fabricadeequilibrio.com.br
demodrone.falcomatics.com
fmecofwny.org
founderstruck.com
paperless.fridaplatform.online
www.friendstravelsvellore.in
portal.fullyfocusedlearning.com
fuxmidia.com
g0solutions.com
www.ggugitt.com
admin.gocube.tech
grati.me
www.grigtechnologies.com
growmic.com
umpromo.harapekogames.com
henriquesalgado.eu
admin.hex5.app
kiosk.heysalad.app
share.hot-story.com
synergyxyz-intelligence.hypergro.ai
synergyxyz-neo.hypergro.ai
isomatric.com
react.todo.keigo.io
lakitowines.com
www.lakitowines.com
www.landscapingandmoore.com
littlecaution.org
www.maheba.com.ar
mibwine.com
michellemade.com
www.mojepodujatia.sk
moneylovefun.com
mrteerecovery.com
dexterite.oacsolutions.io
oggie.ai
acaorelevante.orbit-lab.ai
paineldeinsights.orbit-lab.ai
app-link.oxitec.com
www.peirolo.com
qtab.ai
regnavita.com
revenli.com
placement.rnwmultimedia.com
ruplacement.sayanmandal.space
schirona.ch
scoreboostergujrat.com
app.snappypenguin.com
snichols.co.nz
beta.social-notes.com
agrisanterre-app.speakylink.com
spiritfaithministries.com
www.ssmadvocates.com
www.farmlife.stefanhinterhoelzl.at
app.tapsurvey.io
torbejarabi.com
siscawiwid.webredirect.org
wefttakt.com
xk-mobile.com
yep-dev.art
www.zerodayarcade.com
Other domains in certificate