Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=idealsst.com.br
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 07, 2025
Valid Until
January 05, 2026
56 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
32:3A:30:7E:99:6B:91:D4:3A:B0:D4:EF:AE:C2:71:DB:65:F8:30:52:14:9B:43:A0:38:54:F9:9B:7A:5E:62:F6
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
marllonbarizao.com
1123eleven.com
11521688.peerly.app
anime.new
www.apolloconnect.com
arteries.blue
asc789.com
avaconfranquias.com.br
intunetech.beetek.com.au
clube-fluminense.bepass.com.br
order.bossburgerco.com.au
panel.bpmcenter.pro
www.breakout.army
clozzy.link
headache-diary.codeandglory.be
titanwaste.com.my
concordiabank.biz
covidcijfers.nl
www.cribster.biz
www.dev.cypherpunkstudio.com
www.danyaltairoski.com
dennisuk.com
www.digiblocks.eu
capteur-sf2ifr.digit.nc
www.drrevanthhairclinic.com
mobilelinks.ethiopianairlines.com
eurektickets.com
console.stg.faans.jp
www.fakejiujitsu.com
fallacy.io
fluid-pro.net
gigmoney.com
www.gopher10.com
gotdibbs.net
www.grahamemurray.com
www.greenhillcapital.be
harmonicmarkets.com
hiwave.network
register.hurryapp.com.au
idealsst.com.br
at.joom.com
juliett.au
corps.keep.network
www.lasercow.net
lotusmudgames.com
auth.macrosd.app
coinage.maui.at
taxipontiac.megataxi.com
meralipharmacy.co.uk
merilifeline.com
www.mladicro.com
clap.musica.ar
audits-michael.nucor.report
nutriaive.com
www.nuverax.com
tesseract.paroxity.net
peopletransformtheworld.com
docs.pixelcreator.io
pnyo.jp
link.poolwater.app
test.portfolioanalyser.com.au
vsl01.premierfc.app
pulsar.es
vr.puresalmonkaldnes.com
reallygreatad.network
riskey.io
cdn.sankhuyenmai.net
sapphireclinics.net
www.seawoodsventures.com
www.severine-jasper.be
exp.shadowfax.in
opex-app.stg.shippio.jp
smartpad.network
www.smartpad.network
l.snapcash.ng
console.snowrise.net
www.sodatab.net
demo.sportmatch.com.au
app.spotguru.net
sandbox.stevenbenisek.be
strikeitgroup.com
system.stzaiacathedral.org.au
app.suitejar.com
www.thebaycoco.com
admin-staging.thebrighttutors.com.au
admin.thecliq.app
www.topnotchtraining.com.au
www.treewoman.net
tribu.network
uptech.com.au
api.urakatatei.net
venxly.com
visufact.com
coupons.whereshouldwetravel.net
studio.willow-labs.co
wenwennoodle.wxoa.net
www.wxoa.net
www.yupistudios.com
www.zachstgeorge.com
www.zeropad.net
Other domains in certificate