Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=www.danielimondo.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 02, 2025
Valid Until
March 02, 2026
87 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
90:B1:71:DB:2B:57:19:8B:68:06:B0:F7:24:BB:84:C2:6C:EE:39:69:3B:0D:57:05:87:B1:4A:23:86:9E:09:B2
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
iuriscorpec.com
www.abrahamjesus.com
blog.agnostech.in
developer.alt.ai
anglesoftheglobe.com
www.apexbuildingservice.com
a2examen.aporeldele.com
artemisa.makeup
aubinnythegreat.com
www.balzenda.com
www.beauty-avantgarde.de
help.beitary.com
bleedsblue.store
bookanantara.com
bradfordcollegept.com
brainnn.us
braydenoneal.com
studioinfo.btartisticyoga.com
buycalc.ai
hagakure.app-staging.c-rayon.com
cancees.com
ceramicoslaplata.com
contactless.citadelselfstorage.com
www.codenova.us
www.corechiptech.com
solarwebtracker.culin.org
culturah.co
www.danielimondo.com
darktrojanmusic.com
app.dataconnecta.com
www.datandecision.com
www.developmentunited.org
deweerdmetaal.nl
www.deweerdmetaal.nl
dhulaii.com
dylankoevort.com
emailconfirm.evertelapp.com
factureclients.com
featherdp.com
nfl.fivethirtyeight.com
dellds-staging-ideacloud.forgedx.com
fouone.com
text-generator.funapp.day
gentrifiednobody.com
www.geraup.com
get-stellar.com
dashboard.getslideapp.com
getsomelounge.com
www.gokmengoksel.com
greenlabsvirtuallabs.com
www.guillaume-deroy.com
hawkevindia.com
imreszabo.com
admin.industrialpmr.com
casadapicanha.infinitifood.com.br
www.infosmite.com
innovaleph.com
kaplan.ischoolconnect.com
leadershipwithoutapaycheck.jenniferwadella.com
www.jeography.net
joinwana.com
jornadaz.com
www.kamaladeville.com
app.kardbank.com.br
positdeploy.kimbodo.com
auth.kukarella.com
kylegibson15.ninja
lexoprime.com
lisbelcruz.com
web.londr.com
marcellthesouza.com
refer.matadortrust.com
maximpekarsky.com
monkeykingandfriends.com
www.mustangdentistry.com
mysticmarrows.com
boname-gerling-quartier.kitchen.operate-app.com
partyrino.com
roi.patchbox.com
pik-app.com
www.precisionstandardtransmission.com
privitae.ca
competencias.punk-lab.com
ratemyflightinstructor.ca
login-dev.reachmobile.com
www.sabrinamianne.com
www.silversnapslk.com
api.socaghri.com
pride.sodeliciousdairyfree.com
www.sportsbattleapp.com
www.telanganaswagruhafoods.com
www.theonefo.com
entry.thrivewithdory.com
www.usecherrypick.com
studio.v-llage.com
www.venturdigital.com
admin.violeta-app.com
walletpayment.net
www.woodyforcouncil.com
world-restroom-map.com
Other domains in certificate