Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.kondickomat.cz
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 19, 2026
Valid Until
October 17, 2026
61 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A8:71:8B:60:B8:72:F3:10:B7:70:52:EC:A3:DE:43:2C:72:CB:B6:75:5A:DC:95:51:BF:5E:99:C5:F7:95:53:46
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
flagautomations.com
www.70kgless.com
administratu.uy
afrinexdigital.com
aimachine.pl
www.aioremote.net
college-clicker.ajayliu.com
albergueluisaaron.org
www.alexmd.autos
almondsoftwares.com
amandakarolynne.com.br
www.aquarenda.com
www.asgworks.nl
dev.azrael-core.com
sta.baomedia.asia
barsosteria.it
bazarix.store
cart.bizgeek.in
raf.bmhost.net
chenshiyaju.com
www.claripower.com
claripower.fr
www.codecenter.ro
cosmeera.app
dentalsafariltd.com
app.dorydelivery.com
www.educationadmissions.co.uk
shutthebox.errenn.com
bill.escrowbms.in
ezyteck.com
grow.fastor.ai
florafarming.in
fndbridge.com
www.fndbridge.com
data.foxlabs.com.tr
fvr.me
georgashomes.gr
certificados.gustavofreitas.dev
track.hoopscrm.com
www.ihafsa.com
indianunionmuslimleague.com
www.indu40.com
usm-com.isdata.ai
www.ismetcucen.com
casefiles.jamesborder.com
dropwordpuzzles.jamesborder.com
dashboard.jointaction.com.au
kartawfrp.pl
www.kondickomat.cz
lapadregiyim.com
projects.lets-automate.co
www.lifeofobjects.co.uk
www.lucpc.org
app.luzdosil.es
deep.mai.menu
meubemaventurado.com.br
mitsapps.com
maintenance.mndassociation.org
www.mobilepflege-petker.de
neuralui.dev
www.nholme.com
www.offenerechnungen.ch
www.ollygraham.uk
orinoqo.nl
otherhuman.it
api.pendla.com
prosprmoney.com
www.pttbs.com
quedapoco.com.ar
www.quqian.rest
researchwith.me
reviewsbuddy.xyz
www.rngdng.de
connect-ng-carrier-dashboard.rxoconnectdevint.rxo.com
connect-ng-purchase-orders.rxoconnectdevint.rxo.com
seenmade.com
www.seenmade.com
www.semplicementecomunita.it
acc.stg.service-atomgroup.com
www.hosei.shitatekan.com
www.stanleydiji.ca
studioearth.org
www.data.tapbds.com
findmyface.thai.run
thedata.ai
www.thedata.ai
thenu.app
www.thenu.app
tourpilot.it
www.fiesc.insights.umanni.com.br
vantagespire.co.uk
www.vardenturnus.no
veganske-tilbud.dk
app.voteril.com
share.wackenradio.de
blog.wiesler.se
xiaochengxu.biz
auth.yovoice.app
www.zoosedlec.cz
zoosedlec.cz
Other domains in certificate