Open
Cached
·
just now
80/100
SECURITY SCORE
Certificate Information
Subject
CN=milunacciaroli.it
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 19, 2025
Valid Until
February 17, 2026
37 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A5:07:42:3F:8E:A8:13:60:A9:66:D4:91:9A:9D:34:6A:05:7A:B4:1B:4D:F1:CE:F2:50:4E:EE:44:88:D0:6E:3E
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
Wildcard CAs
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • You have authorized 6 CAs - consider limiting to only the CAs you actively use
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
Subject Alternative Names
100 domains
nodeshifthq.com
www.nodeshifthq.com
www.3er.sg
app-eu.ai-receptionist.com
eu.ai-receptionist.com
alejandraydiego.es
app.amplifyevents.io
www.app-fenix.com
www.arpithaexports.com
arxxcc.online
ayaos.work
aidex.azizgiorgi.com
beithamikdash.dev
auth.blazeclick.com
www.brightside.pro
www.buildit.team
www.bukauskas.dk
cangroup.gmbh
carreterrasopdeamstel.nl
www.caseyblueprint.com
charteronesolutions.com
pilotdocs.charteronesolutions.com
www.civora.it
averis.co.in
dortyolhizliokuma.com.tr
dev.dealcircle.ai
eduloanzm.com
www.eprukaz.eu
erepa.co
www.unknownvps.eu.org
fbaselinks.eventish.net
expertease.au
familyclock.app
uatadmin.fidypay.com
fosylabs.com
fullerhorizons.net
www.geependigital.com
www.gon.org.au
www.gpxtracker.es
lp.haken-mikata.com
meetme.halfway.online
hintario.com
crm.hypergro.ai
igdfoundation.org
support.opsta.in.th
testadmin.indivue.in
app.itinexa.com
www.jeffsheffieldart.com
pkplzen.jiricech2059.com
joinrally.social
josemauroadvogado.com.br
julianadunzinger.com.br
www.julianadunzinger.com.br
dev.juniorche.com
kattyclassproject.ir
keficiente.com
aec1.kinfri.online
www.koyya.in
watch.linistitul.ro
lunarcreations.tech
app.mapx.se
afk-tools.menencia.com
michaelabraun.de
www.michaelabraun.de
milunacciaroli.it
mmbbttii.com
track.mobile2000.com
oogvooronderwijs.nl
verify.pamador.xyz
lp.pbscred.com.br
www.processing-app.org
www.qrena.de
app.rhyno.ch
roamguide.live
www.ryanterrazzo.ie
alkhobar.satahalfaraj.com
www.smart-mushroom-020-025.com
www.smartbabypad.shop
corp.solplace.in
studyfast.asia
info.svs.ong
apidocs.tcat.app
www.theblendsmiths.com
www.thecache.co.za
therudraheritage.in
thinktheday.org
www.tixa.live
trackiteasy.net
ems.tranzita.com
tripdata.co.za
tryangly.com
eartiaan.vacantvectors.com
solutionchallenge2025.vacantvectors.com
vvcoder.vacantvectors.com
zennvita-app.vacantvectors.com
zennvita.vacantvectors.com
aportal.xiotch.com
you-r-here.com
truecrm.zrm.vn
uatextension.zynix.ai
Other domains in certificate