Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=studioalfa.flocca.dev
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 29, 2025
Valid Until
March 29, 2026
76 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B6:1F:41:B0:79:9C:0B:B7:E9:D6:77:F0:7F:17:E1:C9:AF:22:D2:E9:8F:77:22:20:C9:39:E3:9C:0F:3B:8E:19
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
jfdr.dev
slip.828.tokyo
dev.dashboard.abasto.app
www.aidenarun.com
sl.al-hiwar.com
alexdoumas.dev
www.allthingsschool.co.za
dash.antipy.com
buchung.asccranz-estebruegge.de
ashkherad.com
aventureholdings.com
kalender.belisiasv.be
bringspothome.com
brokenimmortals.com
dev.buscontrol.app
www.calendarioautoescuela.es
carefularoundtheeyes.com
cjrakaczky.com
outsource.stulzindia.co.in
chunyangtea.com.hk
almaisoon.com.ly
www.comingclock.com
constant-rotation.app
app.contabnet.com.br
creekfieldstudios.com
api.crowds.app
devanshkaria.dev
devmanshoud.com
app.dgeimoveis.com.br
www.dgfolio.com
gov-mapper.dialogueframework.com
www.ecoshilp.com
pekebosque.edu.ec
suite.emento.dk
eminlabs.xyz
admin.entid.ca
www.epicpandagames.com
trco.eventtravel.app
expresiongraff.com.ar
www.fetra.com.br
www.flexfiteurope.org
studioalfa.flocca.dev
a0b1.foodle.su
www.sebastian.ghiveci.com
questify.gretxp.com
groupementdelille.fr
www.hammerfields.com
checkin.hotelmeister.io
leads.i2-sys.com
www.internum.swiss
notflix.jamesnowecki.com
kalpavrukshalandscapes.com
karandeniya-temple.com
cashout.kise.money
www.lifeofanelf.com
adm.locktill.com
www.ltb-media.com
masterplanner.app
www.mathquizily.it
www.michaelwells.dev
app.mindfulsms.com
cloud.mycloudvip.com
mydigisigner.com
pic-goldennuggetontario.mentor.neccton.com
www.neuronica.co
v1.tax.niceloop.com
play.odiho.com
draws.ontariokayakbassmasters.com
admin.pibs.cz
dev.pinoymarketplace.com.au
www.pizzeria-amiri.de
www.polygoncast.com
postprobe.com
marafon.printslon.com
manage.rentadvisor.com
shopping.rsptest.xyz
scientificas.com
dev-portal.shopthrilling.com
silverblades-wu.com
sitch.ca
preview.slyck.app
odontodemo.smartin-hclinicos.com
travello.srgweb.site
www.swapnasheela.com
help.swirvle.com
talentmapper.io
alpha.doc.tartansoft.com
verify.taskmenigeria.com
tdsw-solutions.com
spraakgeneratorstudio4.0.teameindhoven.nl
maujjarestobar.thediners.in
getricht.thesmartmelon.com
thinhknowscode.com
docs.tokenate.dev
tc.tools4commercetools.com
www.tylerperin.com
vahe.urartusoftware.com
www.weerasak.dev
www.xwardpay.io
y-queue.com
Other domains in certificate