Open
Cached
·
just now
86/100
SECURITY SCORE
Certificate Information
Subject
CN=app.sabreality.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
January 07, 2026
Valid Until
April 07, 2026
76 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
AB:C6:1B:10:F0:76:6A:A4:AD:A2:98:08:B0:B3:E8:97:98:BD:10:2D:4B:83:90:7F:C6:65:D6:30:F9:5A:4D:3C
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=64072000; includeSubDomains; preload
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
79 domains
professional.stanleyprep.com
demo.360web.us
partners.americancareersearch.com
projetos.ativore.com
portal.ativoreasset.com
brca.baltimorerentcourtagents.com
cityofsanmateoprohealth.briotix.works
cityofsanmateoprosystem.briotix.works
costcoja.briotix.works
ejgalloprohealth.briotix.works
firstrepublic.briotix.works
ocwen.briotix.works
prosystem-papajohns.briotix.works
www.cgt-watch.com
contractorportal.chowderfinancial.com
customerportal.chowderfinancial.com
herzogwinery.cloacina.com
app.closedloopsolution.com
order.ffm.com.sa
biofinance.contabio.com.br
saudeservice.contabio.com.br
app.dailymanagementsystem.com
tmsv3.enrichapps.com
tmsv3sales.enrichapps.com
tracker.epinc.ca
nivea.eptgl.com
tesoroviejo.frm-ops.com
demo.gkdatalink.com
www.goldsgymprocurement.online
app.graciecb.com
teaming.hyperionportal.com
chsd.kliktikhub.com
www.knowsys.io
healthservice.lifely.world
go.lmsparking-app.com
client.loanofficerdashboard.com
arc.mci-it.co.za
qms.mci-it.co.za
portal.my-motor.claims
gold-crown.myanalystpro.app
trusthouse.gosh.net.nz
admin.niec.so
hrm.niec.so
legal.niec.so
operation.niec.so
outreach.niec.so
cns.novvai.systems
idealtech.nudgsystems.com
www.onguardpropertyhistoryreport.com
kaiser.openkeydb.com
imgsales.operal.ca
instaprix.operal.ca
mst.operal.ca
vaudreuilmp.operal.ca
bombeiro.parauapebas.app
portal.predicto.systems
projects.rajhomes.co
content.recyclist.co
pg.reelanalytics.net
logistic.rivaplus.com
app.sabreality.com
19972.softpme.cl
demo.softpme.cl
helper.solarmedix.com
hodaka.storagebloc.com
ih.storagebloc.com
kz.storagebloc.com
agent.studyportalturkey.com
tcs.succeedwithfusion.com
retirement.t.bank
sbaportal.t.bank
oracle.teameverest.ngo
www.theeduserve.in
crm.theplantpeople.co.nz
member.tie.org
vendors.uacrestaurants.com
e-block.vencu.es
hotelbarroso.yahconsultoria.com.br
kiva.zitus.mx
Other domains in certificate