Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.origenstudiomadrid.es
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 23, 2026
Valid Until
October 21, 2026
59 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D7:D9:B3:EB:D3:6D:CC:46:87:EC:28:14:03:EB:47:7A:D7:12:6B:EB:B4:67:4B:BF:40:AF:8F:C1:5B:F7:05:15
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
nodus-app.com
2ndigitalsolutions.com
www.aadyasnonvegkitchen.com
aissy.app
fixsauber.alltagsapps.de
alphaintelligencesolution.in
anubandh.in
appplethecakeshop.com
ascendsoul.org
atfirstsite.app
portal.atingtagpuan.com
leaderboard.avancir.app
sign.avustajaklinikka.fi
card.bonk321.com
labz.broccolirecords.com
auth.dev.bubbletap.com
c-e.app
www.cardguru.io
wandel.cateringportal.io
www.caveo.ch
www.celestececchi.com
www.cocoyokareformrealestate.com
www.creadoc-classroom.com
www.cryotop-evolution.org
dashbohrd.app
deepdesign.dev
appstaging.desidime.com
training-sql.dev-master.ninja
dilo.cc
discoversparq.com
sales.dotarcs.co.jp
dualines.com
www.e-lite.lv
eleaapp.com
school.ericodarmawan.com
freighttech.id
futuresoftcompany.com
gelique.in
whiteboard.grouphaulage.co.uk
www.hash2cash.app
historycarto.com
ibuildproduct.com
www.iniciativaeleve.com.br
instacollage.app
links.jakob7.com
www.janevedhavet.com
captable.jcurve.app
portal.justaccountants.in
tool.labertsl.com
auth.lacoope.net
cakelife.livinglifeinfull.com
app.logisnow.app
loyca.app
test.make-up.io
massol.ind.br
mictools.masterinfinitycorporation.com
mentrixlab.com
www.mgproducts.app
news.mooney.agency
app.myautozen.it
www.myrentokil.com
pic-casumo.mentor-stage.neccton.com
pic-comeon.mentor.neccton.com
pic-sazka.mentor-stage.neccton.com
www.newwaygroupcompanies.ae
auth.oakljen.com
www.origenstudiomadrid.es
www.pielaco.com
premiosobando.com
www.reten.ai
robloxdevcamp.com
www.robloxdevcamp.com
www.rspartners.es
ns2.rusticcitrus.com
sablecrm.io
saferhomesbc.app
samlebrik.de
dev-hotels.samyush.com.np
sellpoint.app
stokita.semakode.com
www.shgconstruction.lat
signalcall.app
www.siwasthan.com
invites.smashapp.com.au
speech.ooo
mta-sts.squpic.de
glimpse.syncraflow.com
www.taporty.it
storigamiclock.timetobite.com
toaster.app
www.toolfork.com
tosatur.com
trackingto.app
corpo360.turnosweb.app
nordicus.turnosweb.app
blooming-gifts.xtaticstyle.live
studio.yepic.ai
yni.app
zethontech.in
zonetalent.net
Other domains in certificate