Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=agenda.fincoe.com.br
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 16, 2026
Valid Until
October 14, 2026
49 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
0C:44:03:CE:8A:91:30:CF:85:ED:54:70:5E:7B:4E:AC:6D:7C:2A:62:09:27:C7:D3:53:4A:AC:71:42:F0:77:5E
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
oliver-devs.de
rh360.preprod.1st.com
firebase.345969.xyz
www.abelix.fi
abigaillo.com
www.adilson.sh
adrianmilandscaping.com
www.adrianmilandscaping.com
agipro.life
almogem.com
aquafilters.com.mx
www.areuglobe.com
www.ashiqmuhammed.com
askpetbutler.com
anime-trend.autoarticles.net
awstransport.mom
www.awstransport.mom
digital-signage-api-staging.axiossoft.com
digital-signage-console-staging.axiossoft.com
digital-signage-fleet-staging.axiossoft.com
digital-signage-staging.axiossoft.com
www.azrasoft.com
www.barmaid.io
baseddept.com
www.baseddept.com
bruceandsonslandscaping.com
www.bruceandsonslandscaping.com
api.buscuu.com
dev.partners.careerbase.co
carreranocturnaisar.es
www.cnmluxury.com
www.dakshinfoods.ca
dashboardbeta.com
app.deductify.com
esteban.delamonja.com
jpf.envisageworldwide.com
fahadziakhan.com
agenda.fincoe.com.br
fletego.cl
www.fubu.autos
geo-boss.de
goldenbiriyanihouse.com
www.hadejslova.cz
www.helitaxii.com
alt.homeagenius.sg
app.ihracatkampus.com
www.institutoultra.com
kalaa.app
www.kalaa.app
www.lawfly.in
lemeur-psychologue.fr
lex-prevention.fr
epacta.liturgyapps.org
www.makhlink.com
stg-referal.me-group-application.com
resource.mines.me.uk
monneural.dev
muolaconsulting.com
pic-fourwinds.mentor-na.neccton.com
pic-fourwinds.mentor-stage.neccton.com
pic-gimo.mentor.neccton.com
nihlahtech.com
obliviondh.com
ohhappyday.cz
shop.ojisan.io
www.okitech.com.au
oliverdll.lat
sapheq.parceltracer.app
pereklasty.pp.ua
advertiser.playcred.ae
app.playcred.ae
www.app.playcred.ae
auth.pomophoria.com
vaguinha.quitaboletos.com.br
corporatedisplay.raywhite.com
rockiefrancis.com
ruangrestu.com
sangamampa.org
go.seshtag.com
sidekerp.com
siterapidohoje.com.br
app.skoolmanage.com
snowdroptherapymn.com
starhometutors.com
www.theaangan.in
thebuelows.com
thelifestyle4us.com
admin.tiffin-time.com
editor.beta.trakto.io
www.twinhertz.com
txtbypl.com
viajesyturismocostarica.com
www.virtualstardust.com
www.visitdalbu.no
yahheard.co.uk
www.yesno.lat
yesno.lat
www.yon.lat
yon.lat
admin.zerogravitygrub.com
Other domains in certificate