Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=mecatools.com.co
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
April 02, 2026
Valid Until
July 01, 2026
44 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A6:CC:34:48:D8:36:3C:2A:5E:C0:07:50:E9:7D:F2:97:64:90:F4:17:46:0B:45:4D:2A:C5:24:B0:0A:D3:BD:F6
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
fixfast.pro
www.abad.tj
aishagroupllc.com
alqarawiyyeenuniversity.org
apexlearningcentre.co.ke
test.ardaacar.net
dev.ariontalk.com
wod.atomicfitness.it
axelium.tech
bestune.az
www.bildungswerk-westafrika.de
bonusbrothers.hu
soiree-communautes.breizhcamp.org
bxai.co.za
uat.checkin.c21school.edu.kh
calculatewage.com
calculatewage.org
calculatewages.com
carbon-cut.com
cerradopeliculas.com.br
charankamalproperties.com
admobwise.chozhanaaduapps.in
codeforge.ws
collective.crownmakers.io
cucinaecomfort.it
daste.digital
deeplink.leuven.delcom.nl
www.developsyglobal.in
diario-de-trading.com
www.diario-de-trading.com
www.dlunarayjewels.com
www.dmapp.technology
www.dyno.jp
projects.fenercioglu.com.tr
firstday.club
www.firstday.club
imageknockout.gabri.in
gecapa.com.br
gosiabrandys.pl
governancias.com
www.gvplacements.com
htxhomesolutions.com
socialclimb.ipogeostelle.it
rms-dev.jolisnob.net
rms.jolisnob.net
www.jyvaskylanlentoasema.fi
www.kadirarslan.org
www.klubekonomistasrpske.com
www.lempa.com.br
admissions.lingayasvidyapeeth.edu.in
loanit.kr
lvaca.in
www.lvaca.in
link.api.m10.az
maliktec.com
mapes-view.com
marcoboumya.ch
mecatools.com.co
www.mecatools.com.co
prometheus.medalhei.com
merzouga.app
demo.michele40.it
www.miecpasje.org
miportafolio.fun
www.mnemonio.com
www.motovasiya.az
mudanzasdelsur.es
www.nominallogic.com
nurilman.site
www.nutrioid.app
admin.oceanenglish.app
app.oceanenglish.app
admin.eldercare.korobanu.orphe.io
www.outfitlet.com
star.placeme.io
www.plts-desa-ujir.id
www.pozomillonarioplus.com
prescriptohub.com
c48.redrockstech.co.za
admin.referaku.com
webmenu.restomax.com
rootprintlandscapes.in
www.saleppazari.com
psmirror.shadowninjas.net
auth.silkcity.group
paddock.simcompany.hu
smartfuel.ie
www.smartfuel.ie
snackandgrill.be
splittyai.app
synthetic.fm
termyx.dev
test.valiscode.hu
vaultex.finance
vidyasetuca.com
www.weverest.com
www.workingbear.com
worka.xlumion.com
yallabuy.club
yjkim.kr
Other domains in certificate