77/100 SECURITY SCORE

Certificate Information

Subject
CN=agrorendement.agroptimize.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 04, 2025
Valid Until
January 02, 2026 52 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F8:3F:FA:0A:13:DD:6A:0E:0D:3F:05:97:65:49:73:39:CE:24:A4:CA:53:31:AD:38:BE:2A:D7:8B:5B:CF:DB:BB
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
internal.dev.deliversense.com

Other domains in certificate

20pointtracker.com
8tlas.com
8xplorer.com
abkucuk.com
abtixco.com
agrorendement.agroptimize.com
aldanabond.com
amabie-labo.com
andreaskurz.art
anotherbyte.ca
www.aokarkau.com
apx-td.apxor.com
aranalbandian.com
archiepumper.com
my.artcollecting.app
forms.artschoolsfbay.com
aurora-thread.com
erode.azhagudroptaxi.in pondicherry.azhagudroptaxi.in
bacchus2022.com
bailandolavida.com
bpsw.beroepsethiek.app
bharatconf.com
blockpartre.com
www.booza.app
centra-k.ca
www.chainzent.com
chandeluxe.ma
clicktocall.in
app.dabbagaram.com
dataimo.com
deangelisosteopata.it
link.fintecture.com
www.flutterbytesconf.com
flyingpaperclips.com
demo.focus-group.jp
demo.geckolabs.co.uk
go.getalphaheater.com
green-piezo.com
greeninfernoband.com
helplesshole.com
hhg-exe.jp
icrossinguniversal.com
jeffmstuart.com
app.js.eco
juntofinance.app
just-taking-a-ride.com
karabalat.com
www.kosmiq.in
kunjisoft.com
kutchitservices.com
labellaspizzeria.com
portal.lifecheq.co.za
madeliefs.com
madmtb.com
matrimonio-elisa-andy.com
minimageste.com
pop.mooncat.community
reader.newslit.co
nickmarinelli.ca
eyen.ophshare.net
www.parvsacuify.com
phidrop.com
plutusrealty.com
qsmart247.com
rareridgeassociates.co.uk
syntax.rccsonline.com
mansfield.rgn.io
www.ridgeitsolutions.com
www.rontano.de
dashboard.securely.id
www.semplicementecomunita.it
shipverse.ca
shipverse.co
silvergram.in
referralpartner.simpliscreen.com
dev.smoothy.co
perpetual-assets.solerabank.com
stayhighadventures.in
daksong.dbot.stedu.vn
step.io
cafe.stirlinghigh.co.uk
dev.checkout.stykite.com
sumpoc.net
thebestactorintheworld.com
portal.thegchain.net
thepour.pro
ryd-developer3.thinxcloud-staging.de
trapandsurvive.com
app.dev.trayn.com
tuqire.com
get.ultimatefax.com
www.villagetcg.com
wonder.games
auth.workforceofindia.com
app.wrapassets.io
www.xentacron.com
www.zacklukem.com
zahwahjameel.com