Open Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=idealsst.com.br
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 07, 2025
Valid Until
January 05, 2026 56 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
32:3A:30:7E:99:6B:91:D4:3A:B0:D4:EF:AE:C2:71:DB:65:F8:30:52:14:9B:43:A0:38:54:F9:9B:7A:5E:62:F6
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
marllonbarizao.com

Other domains in certificate

1123eleven.com
11521688.peerly.app
anime.new
www.apolloconnect.com
arteries.blue
asc789.com
avaconfranquias.com.br
intunetech.beetek.com.au
clube-fluminense.bepass.com.br
order.bossburgerco.com.au
panel.bpmcenter.pro
www.breakout.army
clozzy.link
headache-diary.codeandglory.be
titanwaste.com.my
concordiabank.biz
covidcijfers.nl
www.cribster.biz
www.dev.cypherpunkstudio.com
www.danyaltairoski.com
dennisuk.com
www.digiblocks.eu
capteur-sf2ifr.digit.nc
www.drrevanthhairclinic.com
mobilelinks.ethiopianairlines.com
eurektickets.com
console.stg.faans.jp
www.fakejiujitsu.com
fallacy.io
fluid-pro.net
gigmoney.com
www.gopher10.com
gotdibbs.net
www.grahamemurray.com
www.greenhillcapital.be
harmonicmarkets.com
hiwave.network
register.hurryapp.com.au
idealsst.com.br
at.joom.com
juliett.au
corps.keep.network
www.lasercow.net
lotusmudgames.com
auth.macrosd.app
coinage.maui.at
taxipontiac.megataxi.com
meralipharmacy.co.uk
merilifeline.com
www.mladicro.com
clap.musica.ar
audits-michael.nucor.report
nutriaive.com
www.nuverax.com
tesseract.paroxity.net
peopletransformtheworld.com
docs.pixelcreator.io
pnyo.jp
link.poolwater.app
test.portfolioanalyser.com.au
vsl01.premierfc.app
pulsar.es
vr.puresalmonkaldnes.com
reallygreatad.network
riskey.io
cdn.sankhuyenmai.net
sapphireclinics.net
www.seawoodsventures.com
www.severine-jasper.be
exp.shadowfax.in
opex-app.stg.shippio.jp
smartpad.network www.smartpad.network
l.snapcash.ng
console.snowrise.net
www.sodatab.net
demo.sportmatch.com.au
app.spotguru.net
sandbox.stevenbenisek.be
strikeitgroup.com
system.stzaiacathedral.org.au
app.suitejar.com
www.thebaycoco.com
admin-staging.thebrighttutors.com.au
admin.thecliq.app
www.topnotchtraining.com.au
www.treewoman.net
tribu.network
uptech.com.au
api.urakatatei.net
venxly.com
visufact.com
coupons.whereshouldwetravel.net
studio.willow-labs.co
wenwennoodle.wxoa.net www.wxoa.net
www.yupistudios.com
www.zachstgeorge.com
www.zeropad.net