Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=mariachitapatrio.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 04, 2025
Valid Until
March 04, 2026
89 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
35:8F:F0:65:4F:11:1F:47:10:98:B9:AF:15:5A:26:4F:7D:F3:F4:72:B5:40:B0:84:1D:99:B0:5C:D2:8F:55:61
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
sergiorodriguezruiz.com
2017.puneagileunconference.com
360.cockraco.com
www.rodrigueslaw.adv.br
anthonyshannon.io
www.anybodies.com
autolyz.com
www.axelrasmussen.com
gamesadmin-slots3-qa.bagelcode.com
commcards.com
concordiabank.net
connvision.com
consulux.it
www.convocode.com
www.coronachile.com
www.culturedkidscuisine.com
danielgalindo.dev
admin.datulab.com
browser-webcam.denolk.dev
pokedex.dforder.com
prozesse.digitalwert.net
diversit.eu
www.easwares.com
www.effusius.com
www.epi-help.com
www.epicmusicquiz.com
fahrstein.com
admin.fiatleads.com.br
www.freshblends.cloud
fuckyoulogan.com
studio.game7.in
shout.getviral.me
www.golddong.com
hellocard.app
www.highondata.com
historyapp.one
hmsmechanical.net
www.immobl.com
www.jorre.me
joshuamaza.com
www.kanjiapocalypse.com
dlink.keyring.net
khandren.com
rounds.koromia.com
kurrent.dev
demo.estates.leasera.com
app.manowpoint.com
mariachitapatrio.com
www.mister-events.com
ui.morphyish.com
mycarmunity.com
mypaidbills.com
ndriqa.com
staging.nextlevelresume.co
www.nicoagostini.com
noticefly.com
onflowsolutions.com
l.onroadlivetrack.com
widget.connect.optimusride.com
resumereview.padhakku.com
panaderiacroute.com
plannable-notebook.com
playspades-online.com
trackerapp.produvar.com
programming101.dev
www.programming101.dev
qa-shell.prompt-pitang.com
qrkingai.com
www.quotingcentral.com
rafaelesposito.com
rentalaires.com
representative-action.com
hue.rooferintel.com
www.roygevers.nl
rsvp.express
aprespermis.seg.solutions
setfreenutrition.com
www.skyhaven.app
snacksnacksnacksnacksnack.com
socialdrinkapp.com
peru.solomonschariot.com
soundremedy.com
stephenfmann.com
laoszechuanevanston.studiossolution.com
supremesportsguk.com
sustrata.com
szentpeterimez.hu
solar-app.terrifiedofheights.com
custom.thewavroom.com
solitaire.thndr.gg
tobynboudreaux.com
tokendonuts.com
map.toko-tane.net
torneosdebate.com
vehicore.ng
www.vrmmo.cafe
vsdlc.com
for.your.vet
yourdataisart.com
zalboa.com
Other domains in certificate