Open Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=worklyst.ee
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 21, 2025
Valid Until
January 19, 2026 58 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
08:D6:90:4D:A2:B5:33:3F:41:13:0A:73:11:09:68:F3:6B:E0:61:C0:15:19:9E:85:F8:DB:83:27:F8:61:E1:22
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
koneta.click

Other domains in certificate

www.1hpgames.com
demo.3past7.de
4kgroup.org
a-dev.dev
www.acquiregame.io
active-generation.org
afcmonline.org
www.akhuwatloanscheme.net
algometatech.com
s.alo-tech.com
alquilerchaletchiclana.es
epl.andrej-homann.de
business.artsbyjp.com
atstake.app
dashboard.auto-planeta.pl
stadefrancais.deeplinks.bfansports.com
bhata.in
www.bluz.app
wirheiraten.bnck.de
www.changanmazatlan.com.mx
publicity.chromo.jp
www.nerdshub.co.in
arton.com.ng
app.creme.com
modules.davidsepulveda.xyz
d1-myreports.dpdlocal.co.uk
drneuhold.de
auth.dsaforge.com
screenshot.easysignin.com
edwincaspers.nl
evenvehicle.com
fix-claims.de
frag-jogi.de
account.fupa.rocks
ruota.gd.si
dev.giftsa.in
gridcore.com.co
madhankumar-poornima.gysite.in
hannahspetportraits.co.uk
scratch.hareketlen.com
heartbeat.com.mx
helpino.ch
intelligence.hypergro.ai
fitqm.ibts.org
www.indiatemps.in
preview.ivyukraine.com
snowball.jaceyi.com
events.jaysquared.com
americana.jeeblynow.com
jeremiahfisher.net
www.jollyfamilyfoundation.org
blackboard-demo.klarway.com
unews.livebusinessupdate.com
mconnect.malin1.com
auth.marketowl.eu
app.missseller.com
www.mushroomtales.in
mymodelink25.com
www.navotkarshaitsolutions.com
www.nubina.ro
flick.nunkware.digital
obliquo.co
odafy.com
optimacc.com
www.palavreio.app
parkwhisperer.net
www.peruzza.si
quick-services.phari-tech.co
piercetechnology.co.uk
authuser.praktika.de
prettyboy.app
www.qrbring.com
krishnagiri.rainbowsdroptaxi.com
reachme.ai
resultnotification.me
be-staging.seen.io
auth.shipvault.com
shopnimo.online
www.slashbox.co
service.spadeservices.com
sparkup.uk
www.speakingathome.pt
stickmanleague.vip
dev.straggle.me
studiodeneb.com
reservalafechabeatrizysebastian.swanmoments.lat
www.sylvainepierre.com
ah-staging.synctalk.us
teddyphoto.com
tiengpali.com
tlgyo.org
www.trswag.com
umanitinyhomes.com
info.unfoldingstories.app
pre-alpha.volorca.com
webboard.app
workflowytemplates.com
worklyst.ee
zegaaneindelijktrouwen.nl