Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=pomodot.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 07, 2026
Valid Until
December 06, 2026
82 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
64:5E:22:C4:08:2D:D5:E7:5D:EE:A8:33:03:09:F7:2F:97:35:12:41:91:6D:76:D3:00:23:EB:83:4F:B2:C9:BB
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
incose.org.za
dev.feasibility.stem.28east.co.za
www.acuathleticscamps.com
dev.portal.adgile.media
al-abdulrahamn.com
www.andrianaskaperdas.com
arnoldi.co.za
auth.assetmason.com
www.bisconstruction.ca
www.blissfill.app
pdfreport.bowheadhealth.com
mensajeros.boxdeliverygt.com
menu.caffeitalianomantova.com
admin.cofcontests.com
coopdero.com.ar
primetimetable.ear.com.br
www.emeraldstorm.autos
auth.en-passant.org
preview.energotoplinarstvo.com
www.ericcoleswing.lol
ethorama.library.ethz.ch
www.flowcircuits.com
www.gigl.com.au
app.graphite-mining.com
www.graphtechit.com
support-restaurant.gupshup.io
harrydeboer.dev
app.staging.hideoutapp.io
www.hilobit.com
admin.honesty-group.pl
ictica.com
indiaresultexam.com
priorize.jesusbossa.dev
jmf.com.do
www.klgmtg.hair
www.koleli.com.tr
londoncleaningwizard.co.uk
luc-hariman.com
alerts.luciole-app.com
dashboard.luciole-app.com
www.mafrefiresystems.com
area51.magicexhibits.com
pdok.mapconverter.app
platform.marketadvisor.io
en.docs.api.marlim.co
marwanfazora.com
www.maxcleaners.co.uk
medicalbillcalculator.com
mindsclik.com
miningprogram.com
www.myfiis.com.br
mytripmystyle.com
brest.nabimoon.com
modulschulung.new.de
www.newvision.surf
previous.nilear.com
ocacto.com.br
app.ordaonline.com
padiapp.com.ng
palivvo.eu
parkvernon.autos
www.paspoortvoorsucces.nl
potenzial.pionierkraft.de
link.planter.eco
pocketscm.com
www.polyglot-online.com
pomodot.com
prettybrains.com
quickdash.co.uk
rbshoa.com
redwingslogistics.net
validation-station-new.rinkt.com
rplusperu.com
login.saberise.com
www.samsung-cundinamarca.com
dev.gdpr.seriously.com
www.sinoauto.autos
www.softtronica.com
somasomasomaya.com
sopawppy.com
stardust2water.com
onu.studentstore.com
harborfolio.stuten.dev
admin.syncup.com.ng
www.en.frame.toegangsbon.nl
www.trippbarker.com
truellista.com
vaurd.com
www.waiandshan.com
weirtz.com
willswise.com
winderful.co.uk
wordtomyself.com
workplacerightsadvocates.com
xecapcuutoanquoc.com
webpricing.xivis.com
geocredi.xptoconsig.com.br
yako.dev
margin-app-michael.yunjingtech.com
bashamtb.zakenzie.com
Other domains in certificate