Open
Cached
·
just now
80/100
SECURITY SCORE
Certificate Information
Subject
CN=vania-retail.talentlytica.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 30, 2025
Valid Until
March 30, 2026
70 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
40:FC:27:FC:BC:D1:BD:90:96:D6:13:EB:78:A0:7E:25:36:C9:EF:3A:FB:F8:C2:E7:A9:92:D5:8E:69:8A:21:6C
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
Wildcard CAs
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • You have authorized 6 CAs - consider limiting to only the CAs you actively use
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
Subject Alternative Names
100 domains
gllowbe.com
www.addtlsaas.com
leaderboard.aldred.dev
altancare.com
auravision.kids
www.bcgcrypto.com
bluni.it
www.bob.dance
www.bovitzpaneltools.com
eltaranteo.bracelit.es
korkeasaari.cintoia.com
3d.cityscaper.de
smec-manage.classet.in
cloudadvize.com
weather.mandipkk.com.np
serkankilic.com.tr
serial-number.oneclass.com.tw
surfinia.com.ua
dashboard.connectedboat.eu
website.contentvoila.com
www.coupones.tech
devadmin.deciml.in
www.dietelefonistinnen.de
cmsstg.dtpayments.io
elorank.me
demo.enercred.com.br
links.froedtert.care
goto.gasgas.app
stockapp.gdagtekin.com
www.geektuc.com
archive.grazianonegri.it
www.gurudevmohan.com
www.hatchetsoftware.com
www.hbkcolumbus.com
healwithvidhi.com
go.heepsy.com
henning-diekamp.de
www.hl7map.com
www.hopefoundationind.org
sc.hotekan.com
www.hsinghltd.co.uk
dashboard.invessed.app
jocompas.joaquin.app
app.jointownhall.com
widget.knallah.com
acostaverde-performance.lernit.app
app.lessonteacher.ng
luckycharmsdnbhd.com
luft-brix.de
www.mgain.club
www.miatheapp.com
assistenterh.minervafoods.com
qa.mobilenxt.app
start-sit.muretech.dev
admin.mydogbuddy.co.za
admin.onepay1.one
pablotobalina.com
parkur.energy
l.pebblecred.com
www.peregrinefoundry.com
dashboard.pinartes.org
kamedalab.widgetes.albatross.pirika.org
pixelentertainment.de
privacy.poknapham.in
www.remomo.net
rinkpifinance.com
www.rinkpifinance.com
www.rivermeadlodge.org.uk
sacareplus.com.au
app.salameypico.com
cms.salesapp2go.com
barracks.scry.one
sean.pictures
sebastianunda.com
meet.senseteq.io
sismoalerta.com
www.snowchron.com
www.solo-thai.com
spyk.com.br
macutriviamb.sqwadhq.com
www.sriharsha.app
order.stapay.jp
suiamaradio.com
vania-retail.talentlytica.com
tangkaihung.com
www.tigpan.com
prime-stage.truckstop.com
www.tsukutech.com
vercaemsttuinen.be
www.vickiebrennan.app
virify.ai
www.webetapp88.com
westepoutside.com
apps.wooliesx.com.au
admin.workant.io
books.xealak.com
app.you-p.io
game.yuzu-hr.com
staging.game.yuzu-hr.com
zenli.st
Other domains in certificate