Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=admin.yachtcms.pl
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
June 13, 2026
Valid Until
September 11, 2026
30 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
65:8C:76:4B:AF:C2:82:17:D7:7D:26:17:EC:8A:B0:50:E7:CB:8E:28:EB:13:99:5D:5D:2C:0F:AC:3D:66:61:13
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
postacilaryapi.com
keeper-admin-test.11c.kr
studio.2mes4.com
app-staging.abhikalp.org
www.akhilad.com
www.antiusura.it
arconecta.com
askmobileapp.com
app.asosen.jp
companyos.belscar.com
www.berkeakturk.com
solicitar.boxdesk.com.br
finance.btracfoods.com
tree-searcher.cgfix.com
app.championpro.com.tw
comitty.eu
cha.companinho.com.br
julkalendern-test.consid.nu
www.construvic.com.br
www.dadjoke.games
dangkhanh.id.vn
www.dddeurope.academy
www.devekranizle.com
xl88gi.easyapp.co
englishplaytime.com.tr
change.enpeolearning.com
eolsnap.com
fieldkeep.app
flightarc.ai
www.flightarc.ai
makingof.aeonofstrife.florisschippers.nl
paudalho.g2canal.com.br
admin.glowlivepro.com
romans.golpc.org
hallaemallae.com
www.hayanconsulting.com
herndonmathservices.com
ibetbtc.com
adm.idnsolo.com
visuals.ipatbali.com
iqm.io.vn
www.itdatax.kr
health.itlearn360.com
www.itoz.jp
admin.k-9virtualagent.com
kayenworks.com
enlogi-dev.kazemachi.org
kdekubicki.com
lpkelly.com
lumotheapp.kz
mantaform.com
www.mantaform.com
www.mariotodorov.com
imageviewer.matthewgraham.me
medicoestetico.com.ar
www.memoryosreviews.com
www.mimocupido.com.br
miogpsupdate.com
mygmk.me
www.mylittlekitty.co.kr
neng.vn
auth-unemployment.labor.ny.gov
event.oishiisake.jp
www.omnigon.com.ua
oulcaid.com
visitor.parismiki.ph
i360.parkalot.io
animetracker.peterkajokole.com
www.ploggingrussia.ru
www.pressjstudios.co.za
app.procuflow.com
www.procuflow.com
pucceria.it
staging.qsasupport.com
calculadorajc.queminveste.com.br
simpplegames.r-e.kr
blog.rulesthegame.com
shevatech.com
shinehubsolutions.com
shreegovindnursery.com
www.shreegovindnursery.com
www.sketsj.no
skjanmotsav.org
sociedat.com
www.sprogstimulering.dk
assets.stellarpiece.com
syngr.am
www.tccleaning.co.za
deuce.tckatteberg.be
thinkpass.thought-up.com
get.track-app.io
www.tumblex.in
vagharbox.com
m.vosws.com
wiedzmazpodlasia.pl
www.wiedzmazpodlasia.pl
yaadhumoore.com
admin.yachtcms.pl
tritri.zenselect.jp
www.zensparaymore.com
Other domains in certificate