Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=santiagoconstruccion.cl
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
June 15, 2026
Valid Until
September 13, 2026
31 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C1:08:CE:67:B8:7F:44:38:6F:8F:66:D2:8D:16:C4:71:7F:29:E2:B7:A9:A9:18:61:62:92:81:3D:32:3B:E3:77
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
jeloid.com
www.jeloid.com
aeciodiasacessos.com.br
agentic-prompt.com
akaredigital.com
www.akaredigital.com
qa.plataforma-cri.alpop.com.br
anadolugeziyor.com
ru.argon.gl
docs.autovist.com.br
www.barbershopsystem.pt
www.boomerkart.com
crowdfunding.bottomuptorino.it
www.canyoncarvings.com
staging.app.cargotic.com
admin.cavin.flowers
learning.choucroutetropicale.fr
medical.circulo.vip
cityweave.lat
www.colegioceapi.com.br
www.costavaluegroup.com
www.countdrops.mom
app.staging-web.ctrl.co.za
admon.dailyquest.org
drsh.defibeo.com
deeplink.development.delcom.nl
defibeo.deroesch.com
draana.sramospsiquiatra.drtis.com.br
www.echoeslabs.org
eternovatech.com.np
fearlessfrontrange.com
fourpalmsnh.com
www.fr3nchwine.com
gdmesas.com.br
app.levante.gniotecnologia.com.br
flappy.goodonesolutions.in
auth.staging.grovinn.com
guardianvan.com.br
cospa.hamaruto.com
hitechsystemshyd.in
admin.homepisos.com.ar
portal.ifrengenharia.com.br
cengiz.ilerler.info
industrymover.com
games.inklesslabs.com
www.itcondo.com.br
kireetiinfra.com
hub.landmanor.org
laririos.com.br
lotttechnologies.com
maiconritter.com.br
massimohq.com
app.mathis-atax.com
nmbcentennialtour.com
norlevelapp.com
app.nutilogi.eu
www.test-website.octo-gaming.com
pgmo.omgprogram.com
oodgo.com
www.pinprompt.app
pm5f.com
weekend.pmc.org
poetas.net
phoenixapp.primeinstore.co.za
admin.pueblo.app
redember.network
vote.rentor.com
legacyxi.rsclabs.net
id.anth-xk9f.aisim.sandboxaq.com
santiagoconstruccion.cl
www.setoi.kr
qr.shindev.eu
skbsami.ru
softpuma.web.id
hub.sospop.com.br
beta.specbook.online
supernutrition.mom
www.supernutrition.mom
sweekarcloudtech.com
sydneytokyoacademy.com
auth.taskcoastal.com
nexus-admin.techfloater.com
the4gstore.com
www.thebiryanistory.com
catering.tropirollz.com
smorgasburg.tropirollz.com
udris.design
sdcat2023.utc2.edu.vn
options.vendasta-internal.com
app.vindistro.com
www.vindistro.com
www.vso371.com
wao.mx
www.werkdok.com
admin.erp.whybeforehow.in
eklavya.erp.whybeforehow.in
erp.whybeforehow.in
www.whybeforehow.in
special.with-marke.com
zamanatexchange.online
Other domains in certificate