Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=software-craftsmen.io
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 29, 2026
Valid Until
October 27, 2026
83 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D4:43:CC:1B:E0:17:6C:97:3F:E6:58:0C:CC:95:E5:12:D4:8B:FC:4D:E6:20:B0:46:D1:D4:1D:63:81:71:DB:8E
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
makeen.org.sa
jobbox.4xpress.com
74-8.com
control.actadigital.com.ar
adsorium.com
www.adsorium.com
catalog.feather.aioncw.com
akhawat.com
www.alanaribeiropersonal.com
alexperryartist.it
dashboard.lunch.alteogroup.net
www.arzucoder.uz
www.sandbox.portal.axesse.co
www.ballin3leagues.it
bambooducktape.com
stage-poc.beepoints.net
auth.bettingonthewedding.com
www.bromptonmafia.com
auth.caposkallpa.com
www.catapulthq.com
cavylabs.com
contaflex.colellasoft.cl
dankland.shop
dexler.com
www.dexler.com
ebeltec.com.br
edunet-dz.me
www.efwebtech.com
eilik.com
www.eilik.com
team.eldersy.com
elorastudio.com.br
www.enfetec.com.br
evanddes.com
faripostbac.net
free-editor-pdf.com
ghsinvest.shop
www.grcaut.shop
qa.growwithspark.com
sandbox.growwithspark.com
malaew.haatum.com
hamingja.xyz
staff.heycya.com
prayer.hillsongconference.com
auth.historialauto.com
quiniela.iconbpo.com
netcabs-hub-staging.ingogodev.net
inwebservices.eu
cdn.islacozumel.gob.mx
robin.itsmyfolio.com
jengo.co.za
jewelverona.com
jlevydesign.dev
api.kaon-r.jp
www.kemi-tornioairport.fi
kidebouchetou.com
kotlin-tree-viewer.kohdepitcher.com
www.laptoptassen.nl
www.livoltek.co.za
www.lobosminiexcavadoras.cl
marly.locallyia.city
makasdev.com
www.mechca.com
minderva.io
www.minkey.io
www.mktechfix.com
www.mspyratos.com
neoays.com
admin.neuraleye.space
neuraleye.space
admin.nitschkeutvikling.no
noianoiacokelat.com
www.oliverbeautyparlour.com
onesixtyone.org
paulroch.com
pawrche.com
www.petronexenergy.com
billing.plaintechlab.com
www.primehotelpontapora.com.br
www.qurotech.com
www.repair.me
auth.restflags.com
www.selectopropiedades.cl
showcore.app
www.canberradriveec.singaporeec.sg
software-craftsmen.io
www.steel.com.uy
steinxr.com
studiom33.com
tamsinlewis.co.uk
erp.techfajar.com
tfginnovations.co.za
toksinavi.com
app.traitte.store
traveldreamzzz.com
dashboard-preprod.uniqode.com
app.vital.chat
firebase.weblative.dev
www.whatsdat.lol
www.zukisanlabs.com
Other domains in certificate