Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=www.sooho.info
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
January 16, 2026
Valid Until
April 16, 2026
87 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B9:4A:32:39:A8:9E:D0:E0:97:A8:C2:8C:C4:CC:B7:A6:4C:01:38:15:AF:60:F6:B5:FA:6B:05:4B:14:3B:1E:46
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
juliansweatt.com
3amwave.tech
www.910martel.com
cdn.aarnuk.com
contingencia.agucare.cl
aiangels.art
aktis-consulting.com
alinasokolova.ru
antoinetteastro.fr
api4ai.com
appscatolicas.com
casaplanta.asap2go.com
ashmall.com
asoleads.com
nft-checkout.babka.com
www.barrysmaleltd.com
www.beerfestbuzz.com
www.betatreecorp.com
www.bigtimegraphicss.com
biodiversidadyculturaambiental.org
bosleyneighbourhood.com
www.buy-like.com
blog.callumdownie.com
campushire.me
celeb2fan.com
chatelo.net
cjpodcastpro.com
ingrid.co.in
sudesh.co.in
www.tutorbee.co.in
colectspot.com
www.cabaret.com.tr
componentcollection.com
compuexpertosicod.com
datahive.kr
dghandicap.com
digiscuolaitalia.it
dashboard.tmb.dol.it
drtitikshagoyal.in
eeepmanoelmano.com.br
exoai.pro
auth.fevir.net
app.fortworthpickleball.org
crf.futureway.in
firevault.gacha.net
getgrants.in
www.getgrants.in
getonboard.work
wiki.graid.io
ihac-app.site
www.irisertc.org
cloud.jotnot.com
www.kiozko.com
kismetapp.co
kitzo.in
www.liath-laverne-hawke.com
londonukrainiancentre.ca
lorenzodelfini.it
dlinks.dailychex.meazureup.com
mechantloup.co
www.mozsa.org
musicaltilings.com
www.my-camino.app
www.pleaseintroduceyourself.xyz
pluralcode.com
projectionlab.io
www.qrcurbs.com
app.quantyf.com
www.renatachaves.com.br
www.repropathways.org
clinicaalemanaosorno.rflex.io
www.rivervalleyirregulars.com
saveforfree.com
www.selvainfotech.com
dev-v2.sipldev.com
www.sooho.info
www.stryvin.com
blog.svip.dev
tetra.games
thehistoryofweb.design
thepingads.com
app.toyowado-archive.com
trzanko.art
tuneapp.co
umanity.app
usamafarhat.com
utopia-hongkong.io
vaastu.life
link-px.dev.vetster.com
www.vfinstudio.com
www.vstguru.com
directed-attested-weblib.live.websheet.io
directed-attested-webui.live.websheet.io
unicurl-v2.live.websheet.io
wern.space
westbranchdpc.com
world-surf.com
wsolucaoweb.com.br
zalvax.com
zanmy.com
Other domains in certificate