Open
Cached
·
just now
80/100
SECURITY SCORE
Certificate Information
Subject
CN=www.sushikoasturias.pedidomovil.es
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 27, 2025
Valid Until
February 25, 2026
82 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B9:73:30:B3:59:C7:31:4A:AC:F0:10:12:06:37:6E:6C:D4:97:AE:E9:D4:7A:14:D7:E9:9E:ED:D1:06:90:1B:71
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
Wildcard CAs
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • You have authorized 6 CAs - consider limiting to only the CAs you actively use
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
Subject Alternative Names
100 domains
microdens.shop
aafpets.org
activme.org
www.activme.org
auth.aiheadshots.us
www.alexest.net
website.anagraph.io
baisar.in
auth.bdalil.com
app-clinicas.belaatende.com.br
www.boeconsulting.no
test.boginni.net
feedback.braverangels.org
www.carlswerk-victoria.de
carrerarailings.com
cashengbung.org
archive.cenatus.org
retiro.ceudecapella.com.br
churchtranslation.de
courtify.io
ea.cryptoethic.com
cyberdad.io
www.dilebon.be
dnieln7.xyz
dscdelft.nl
ecoabc.com.mx
www.ecothinkers.net
app-dev.emotions-diary.ru
app.emotions-diary.ru
credenciado.essilorconecta.com.br
auth.finlayfitnessservices.uk
www.fitedgefitness.com
genitorionline.it
dev.getevoapp.com
events.gowrishankar.info
www.gqamisasolutions.co.za
digital.haden.dev
homeradar.co.uk
dominikk.impactwrap.dev
bunbunapp.impossible-labs.io
inquiry.online
reg.iol2019.com
jordy-hertogs.nl
www.knowvic.in
koenigseder.me
demo-feriavirtual.lapieza.io
lasuite-spa.com
fd-test.le-dev.com
app.lettershop.fr
newtab.liao.dev
clientes.lifesource.es
loli.tokyo
marketfind.net
marketfind.org
www.markgoodwin.dev
miku.shop
mobilpay.app
app.nikugen.jp
www.nonlinear-vegan.io
noul.fr
www.noul.fr
oben.global
sudoku-fighter.offroadlabs.com
app2.one-group.se
ozgunozdemir.com
www.pagosescuinapa.com.mx
www.sushikoasturias.pedidomovil.es
pixelwavemedia.io
www.rapron.com
booking.samasportshub.in
stg.register.satella.shop
app.senergypower.com
www.siware.dev
soultechcenter.com
sqctechs.top
www.sqctechs.top
www.su-pay.jp
www.sugarnroses.com
juan.suitefeedback.com
www.tagnool.com
tanveejobs.com
www.taxquarter.com
www.teamcollect.net
tente.app
screenbox.terron.me
thera-automacoes.com.br
refer.timeoutiq.com
todayhenry.co
developers.beta.trexity.com
www.vbender.co.uk
web.viewdigicard.com
livetrack.vionixasia.com
www.livetrack.vionixasia.com
bestel.speeltuin.watdrinkje.be
www.xtradr.app
yakyim.net
portfolio.yoojongwoo.com
www.yssolutions.org
yuliasv.com
zauscher.net
Other domains in certificate