Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=pais.imaginakids.com.br
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 25, 2025
Valid Until
March 25, 2026
74 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
5A:C2:74:08:C3:90:1E:0A:AD:F2:BB:C0:A5:8B:11:0E:AE:F8:DC:97:02:08:47:68:A7:FA:D8:F8:3A:55:96:8E
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
hammond-nails-buckhead.mybestsalons.com
app.9reason.com
www.access-token.com
adaenterprises.in
agrimk.com
www.antigasoftware.com
www.quotes.antistatique.net
demo.ararts.in
www.axlemovingsystems.com
helm.aytul.org
verbatim.bibemus-consulting.com
bcchevroletofnewalbany.carmunity.io
catkodagu.com
crm.chiedimi.it
clarissacortese.com
loopus.co.in
rewards.dailycoffee.com.my
admin.cottagekennelsandcattery.co.uk
www.cricanalyst.app
ddabroad.in
dianaxin.com
dimension42.dev
dokibo.com
dperreo.com
miportal.ueb.edu.bo
elkr.io
www.emergency-hamburg.com
www.esparconsulting.com
forsexuality.com
www.fortunateskull.com
www.gobrat.com
guincho.dev
pais.imaginakids.com.br
bega.impactapps.com.au
www.iredpoint.com
test.iseteki.jp
izbee.co
tictactoe.jideguru.dev
apply.judicialappointments.digital
kishoredroptaxi.com
mauriciofranklinpt.kn-app.com
tenant-admin.kudo.coach
captree.landskies.com
lefantan.com
locationfindar.com
stage.dap.mestergruppen.cloud
analytics.mineforinsights.com
mudandmuses.com
snowday.mystique.com
www.myuncles228.com
pic-tonybetuk.mentor.neccton.com
www.neilmolina.com
www.nexis.fund
beta.nia.nc
www.novimgamestudios.com
login.nubedeventas.com
okk.cl
oldgothenburg.com
billing.pairtreefamily.com
pdf-watermark.com
elcuboytapas.pedidomovil.es
pennyfintech.com
prossell.online
sandpit-login.quantexa.com
questionexistence.com
www.quincedream.com
rabbitholeus.com
ramtinmovahed.com
relationgenius.com
remindly.cc
www.richardsoncarcamo.com
app.roadietripplanner.com
www.rondeibert.net
keywe.rootdemo.com
applesstrack.rxoconnectdev.rxo.com
connect-ng-carrier-assigned-loads.rxoconnectdev.rxo.com
connect-ng-carrier-bids.rxoconnectdev.rxo.com
connect-ng-carrier-payments.rxoconnectdemo.rxo.com
connect-ng-carrier-registration.rxoconnectdemo.rxo.com
scienterra.com
www.scottlittle.org
app.seekh.co
sethdavidkay.com
tollab.shopimix.com
www.skrept.com
macutriviasc.sqwadhq.com
www.startupguru.org
catalogue.sterve.shop
www.techcareer.io
union-bauzentrum.eu
www.uvscompras.com
www.vanlife.cool
stage.vetevo.de
quote.wemoveanything.com
www.yoghap.com
yotty.com
forms.yourdocket.com
zetagroup.cl
www.zincgame.xyz
www.zinggrid.com
Other domains in certificate