77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.bokerialab.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 12, 2026
Valid Until
October 10, 2026 65 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
31:B3:F8:FC:EC:44:F0:40:4E:41:AE:F8:C9:23:3A:02:19:D7:FC:39:DF:5A:1F:20:42:75:2F:45:84:94:F4:B2
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
nitinf.calabresitech.com

Other domains in certificate

alphoenixdesign.com
www.amsel-integpro.com
apotheekverdonckverpoort.be
aquafiltrationgroup.com
ativaflow.com
ilsan.becrf.co.kr
kenty.belongness.one
biggiesphones.com
ichahboun.bixat.dev
blueoceantradelog.com
www.bokerialab.com
brainzo.fun
www.brewerstage.com
bylne.com
www.carspa.app
beta.cebuhomepages.com
colorisdata.com
pages-stg.dadan.me
dagconsultingservices.com
danielobima.com
dictamed.net
m-dev.digiqc.com
dreidelbingo.com
drsuchanek.cz
durianzapp.com
emmenove.com
www.ernanicecon.com
esinefable.com
ethereumpostalservice.com
soon.evolve-pm.com
www.fcsolucoesmodulares.com.br
www.fiction.uz
finetunefootball.com
firstnationstech.com
widget.fix4.com
catalog.francegourmet.kr
www.fuzzybearsoftware.com
mira.geia-app.com
www.gericlinic.com.br
www.getkrater.com
mesh.goga.jp
app-rakrai.goods-order.com
www.gotrybuy.com
www.henrygale.com.au
hiko.ar
hpsalvage.com
irctc-tatkal-magic-autofill-form.com
affix.portalcliente.izii.app.br bencorp.hml.portalcliente.izii.app.br interrisk.dev.portalcliente.izii.app.br interrisk.hml.portalcliente.izii.app.br
jpely.eu
promotion.kingzoneexpress.com
admin.layco.co.kr
statiktool.litefront.com
lumiere-ads.com
many-wholesome.co.uk
minhainflacao.com
www.app.motornest.in
mountaintortoise.com
www.nestedstacks.com
test.nordbud.nu
nurtureslowmedicine.com
link.nuzzera.com
okhouse.in
www.omnilog.app
omrinuri.com
otushr.com
perspectivamori.com.br
auth.play.ht
pocketgita.app
demo.sbc.poderegularizar.com.br
tools.primeassetsource.com
qriotix.link
ssas.retirement.capital
uat.condo.ricmasoft.com
rowsie.app
www.salihaydin.dev
sauravcloud.online
sh-tsandwiches.blog
www.shipverse.co
www.silo.uz
slozt.com
www.snaparoo.com.au
link.spotistats.app
stayonguard.app
studiounduck.com
www.thaihoa06.id.vn
app.thakihome.com
theclinicshankarapuram.com
therapynomads.com
www.tkingenuity.co
valvur.gg www.valvur.gg
www.resultat.vastervikjunioropen.se
blog.vibestudioia.com.br
vrcenter-003.vrplus.info
www.wimcert.com
wqiu.net