Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=www.gjorchestra.it
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 10, 2025
Valid Until
March 10, 2026
73 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
8C:E2:87:6F:C0:4E:98:93:DF:F4:81:1B:DA:6D:93:B0:40:02:CF:36:06:8F:E4:2F:61:23:99:BB:8F:61:E5:CB
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
marvinyan.com
www.alexander-ilg.de
flora.algoritmo.lat
loom.app.aplika.jp
staging.business.appjection.com
aptfi-edu.com
www.autohaus-eble.de
automotrizmontoya.cl
bbwswingers.party
bearssoft.com
beninfotech.com
bezpiecznystart.online
member.bijin-club.jp
app.bisonoverificacion.com
bluefish.blseclub.com
www.bluefishfoundry.com
auth.breakcold.com
brianlee.org
www.burhaninatural.com
staging.cavin.flowers
ccc.demo.chance-store.jp
chennaibookingmamalla.com
tsugoi.clau.io
fieldforce.cloudparker.com
hopon.azrielimalls.co.il
www.compucon.com
cosecapital.com
beachin-orders.crispnow.com
digitaltidemedia.co.za
ericpreston.xyz
link.eselfserve.com
poc.financialnexus.ca
fire-edit.com
app-prp.floa.com
workshop.fognet.world
jobs4neets.formprof.ro
www.getmepop.com
www.gjorchestra.it
sub.guessko.net
www.heartenoakvineyard.co.uk
www.heartstrings.xyz
zasss.hyred.my
app-dev.iacedcalculus.com
islandmoonstudios.com
isometric-ui.com
atlantics.itstrending.in
jpnotes.jatinp.com
www.jhlincoln.com.br
johnnydevv.com
ar.kfchem.dev
pay-dev.kravia.ai
line.lbluxebrilliance.com
influencer-app.lifo.ai
courses.liltriangle.com
localiz4you.fr
routecaster.lsattachiris.com
beta.pulsar.lunarworks.co.uk
www.madprivacyalliance.org
staging.admin.race.mas.run
www.mijnpcwens.nl
npd-magma.app.moltinhq.com
portal.mysquads.co.nz
docs.archway.io.nodeops.xyz
www.nourcharaf.com
members.opensourceclub-univ-alger1.dz
vapiano-koenigsallee.menu.operate-app.com
sponsor.opexawards.com
dev.opun.page
iims.fidauganda.or.ug
partyaigame.com
www.perform-all.com
pickpackcar.eu
platformcontent.net
invite.portme.app
paiksbbqmel.posnet.com.au
raihan.dev
smart-process-alper-webapp-develop.redfox.dev
belgium.api.ridedott.com
sgtransportation.com
www.sitandorder.mt
www.skystars.tw
auth-dev.smartify.org
www.solidsoft.ir
userportal.spadeservices.com
admin.stafftraveler.com
staytrue.cl
studioionique.com
sunrisementor.com
auth.box.sweeep.ai
tacops.nl
card.tamata.com
www.theauraspaces.in
tidbit.is
www.tonkain.com
trgtpool.com
hq.vanstartupweek.ca
visitthetravelagency.com
www.webxtutor.com
zdolnejperspektywy.com
customer.zonatic.cat
Other domains in certificate