Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.secaria.ph
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 08, 2026
Valid Until
November 06, 2026
76 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
8A:48:B3:B3:CA:14:3A:8D:7F:74:E5:5B:8F:32:AD:A8:6C:71:F9:A3:34:EA:DD:0B:2E:37:64:CA:F8:BE:49:62
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
send-golf.com
facilities.5de.ai
genesis.5de.ai
aabcom.com
www.aerodmedia.com
www.agimexsulama.com
action.aiducation.org
allcaps.coffee
alliedaluconc.co.in
install.allknit.org
alonzehavi.com
www.aoalabs.io
bestellen.baguetteindi.de
financeiro.bamassessoria.com
bitcalc.org
bocatherapy.nl
cardiffinternationalchurch.org
www.carmagic.hair
myplan.chaurasiaaditya.in
chown.org.uk
cjautos.rent
www.communitytrustcafe.ca
eastgate.curbsideprovisions.com
observatory.cyneai.com
www.daylan.com.br
www.depotech.tn
crm.domoplate.com
xq2e4wc7.easyapp.co
demo-launch.elxa.io
app.rogueland.eventup.ro
exceed.uy
exlser.com
exlser.it
www.exlser.it
hues.forgeforward.in
www.frogo-ad.com
greenbricklabs.in
www.greenbricklabs.in
greg.coffee
dl.stg.gwp-phl.com
wallet.heysalad.app
heart.jannis-matthies.dev
www.john-desrosiers.com
www.justdrive.app
kinaltech.com
www.kylekurz.com
kylekurz.dev
laudisup.co.uk
bestellen.lavera-pizza.de
www.mahiltechnology.com
www.matepub.hu
stich-ansagen.md-softwaredev.com
residentprecinct.melbookings.com
mensagemwhats.com.br
www.metistherapy.co.uk
apoteksforum.mmevent.no
painel-dev.mobilizei.com.br
mondaymouse.com
www.mowforyourmoneylawn.com
mycyber.app
admin.netlinkgh.com
web.netlinkgh.com
newasia.surf
www.newasia.surf
nguembausa.org
www.onlysmarts.ro
osiah.uk
www.overstockguys.ca
dynasty.partnerhub.co.za
www.prazskabojovka.cz
www.productionvideo.tech
www.propitour360.cl
psiquiatraintegral.cl
roi.remaxvista.com.uy
app.rkookr.com
rosenthal-bnia.co.il
www.rude-audio.com
investors.saja.com
www.investors.saja.com
schimmer.tech
app.scrima.com.br
secaria.ph
www.secaria.ph
shot.is
siliconwat.org
singleview.com.au
saai.smashingadvantage.com
palette-generator.tallang.no
app.theraflow-crm.ch
sandbox.verification.thndr.io
dev-aff.tripster.live
trustedfixers.tech
tsogn.com
tuyu.app
www.aadhum.umd.edu
vinotas.wine
auth.profyl.voryn.xyz
willdevo.com
www.yental.co.uk
yuzuautomation.com
Other domains in certificate