Open
Cached
·
just now
80/100
SECURITY SCORE
Certificate Information
Subject
CN=www.maloobjemovekontejnery.cz
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 16, 2025
Valid Until
February 14, 2026
88 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
22:63:0C:04:A4:4F:94:B5:E5:2C:B5:9B:83:1E:86:D1:EB:E9:6C:05:9E:49:F8:29:26:5F:DD:A1:C4:6F:04:BE
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
Wildcard CAs
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • You have authorized 6 CAs - consider limiting to only the CAs you actively use
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
Subject Alternative Names
100 domains
nanlixiang.com
invite.1timesports.com
www.aberdeenlewis.com
www.all-appp.com
festival.alquimiafest.com
antilimit.com
paperzero.app.br
www.paperzero.app.br
www.apptranslator.io
www.artaviaconstructora.com
artly.world
audisam.com
aukaatpeaaja.com
autolayout.co
s.autoverify.com
faucet.autx.net
pruebacovid19.aviatur.com
makler.bankari.sk
barnettecpa.com
belaartisan.com
bionicbytes.com
bluebathgallery.com
atlantis.bookmarkspanish.com
bsanju.com
joe.bugiada.com
builtbyalan.com
www.burmeauroom.com
castlepointinnovations.com
www.cenap.org
cicksi.com
clumsychitrakaar.com
www.codehard.co.th
test.colegiofenix.cl
compasstaxiusa.com
www.cosap.bio
datboylive.com
decorationvv.com
staging.delta-futures.com
www.digitload.com
displayflex.dev
doorbadge.com
certificates.dpschool.io
dsapptech.com
portal.eazymoola.io
test.eglise-boissiere.fr
empolkametal.com
www.ercutveckling.se
exploreapps.co
www.fandomchart.com
fantasy-keepers.com
gateau-mania.com
www.gehrmann.org
ar.giantinteractivemaps.com
hub.go2nft.io
admin.gofloaters.com
pay.sandbox.wikimedia.gr4vy.app
www.greygarcomic.com
data.harlemnext.com
harounianmd.com
www.helsinkidigitalhub.fi
instacarousel.com
jadenyang.com
www.jmjsistemas.com.br
kencritesphotography.com
www.keter.cloud
lambda-web.com
lannaproducts.com
lessonhere.com
sites.ligor.cloud
logandesmet.com
breathe.loona.app
www.maloobjemovekontejnery.cz
michaelolich.com
personeel-test.neerlandia.com
advisor.nutrien.app
auth.observarium.app
parentreport.ca
tax.paulrichter.org
pianetabimbi.it
policymarts.com
www.poovarboatride.com
qchero.com
foodroom.rinnolab.cl
s3imageuploader.com
sanaakbani.com
sh0e1.com
sheisbianca.com
supahost.ai
www.thriftella.dev
www.tinalackner.at
www.trytelos.com
twerske.dev
unitarytechglobal.com
unitarytechglobal.in
emiratespalace.orderly.upswing.global
vealperen.com
veremyeyev.com
tec.virtualnibehy.cz
vitaminpilot.com
vendor-ethdenver.zksync.io
Other domains in certificate