Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=clube.agroskills.com.br
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 26, 2025
Valid Until
February 24, 2026
84 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
3A:3D:23:D5:46:18:21:E2:02:20:4F:6C:D5:A4:96:6D:18:7D:90:8B:CA:7A:06:64:6B:91:A6:D5:E0:0D:B4:1A
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
pakskont.hu
613nailhub.ca
adalcance.com
administratu.uy
clube.agroskills.com.br
www.alertavilla.pe
www.all-things.be
quote.allstarcleaning.com.au
www.beaconfounders.com
www.berlin-bites.co
berlinbites.co
bigsurf.fit
www.bimobi.app
canelospropiedades.cl
www.canelospropiedades.cl
auth-staging.carbon.music
auth.carbon.music
catnip-love.com
cerrajeriamundial.online
admin.cherishqr.com
dev.cherishqr.com
cleverfuchs.io
www.gaboosemedicalcentre.co.ke
codebardandco.com
collmind.com
bikisharma.com.np
customclouds.net
damevalencia.com
daomaew.com
dapobespoke.com
garage.digipurk.ee
www.doll.fashion
www.drluiscobo.com
elmedgastro.com
etudemax.com
www.fahrschule-ruegg.ch
participants.futuracloud.com
gadvisorygroup.be
goatbusters4h.com
gymtracker.pro
habitly.tech
heyrosi.com
hingfinancial.com
hktennispassion.com
www.homemdesperto.com
innnerception.com.br
jdnlotto.com
kadenbielenberg.com
kemakmurancod.xyz
www.korisogle.lv
kyspropiedades.cl
lifebalancesl.com
luminastringensemble.com
melou.app
business-attributes.mesbro.in
metcoconsulting.com
www.mirarer.com
novainsurancesc.com
okoi.org
ollierobins.co.uk
oneassembly.church
pactodelloto.es
parentingbymama.com
pcctuae.com
photoism-interactive.com
pickmisv.com
prayerly.app
app.prepa.io
prodlings.app
pxptools.com
quervaler.com
respicarebd.com
www.retro.llc
jb.reveriebits.dev
rjenergypro.com
www.robinvandenbosch.nl
rylesystems.dev
www.signaturehelper.com
compras-pmdavinopolis.silconp.com.br
sirajmitam.com
solarpricecomparison.com
vny.solubtp.com
www.spherafisioterapia.com.br
dashboard.toekomst.strass-app.com
encuesta.superbidcolombia.com
tabros.co
binhvalinh.tattyhouse.com
terrifx.net
uncs.sn
vanja.ai
www.versesfortheday.com
www.resultaat.verwijderkalk.be
viggu.in
www.viggu.in
cdn.viishal.de
www.wayn.me
windowcleaningsolution.com
wyspyr.app
xanderglobalscholars.com
xeghepduyhanoithaibinh.online
Other domains in certificate