Open Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.nyhetsmaskinen.se
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 23, 2025
Valid Until
December 23, 2025 44 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C0:A2:CC:BC:E4:85:D2:8A:4E:BE:EA:C9:4D:50:7F:E8:C5:EB:70:B8:74:6A:52:13:34:5C:FE:85:2D:51:FB:D4
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
shadyclub.org

Other domains in certificate

agenticbizops.com
manage-panel.agrid.io
aileadhunters.com
alyv.dev
appwabisabi.com
www.barbersspot.com
lettersoundsapp.betareader.io
bodabarriospadilla.com
www.cartfuly.com.mx
www.chilegram.cl
www.club-volta.com
norarey.com.uy
www.consulux.it
dearmediainc.com
devcoreapps.com
diegosanchez.rocks
admin.digme.dk
docuzone.com.au
earlybirdva.org
eastbound.media
imagenes.escuelard.com
www.ethicality.com.au
eventureapp.app
app.explorease.tech
oauth.ezrah.co
app.fabheart.net
fezmaster.com
finpowergloballimited.com
www.firren.org
app.firstroundgm.com www.firstroundgm.com
forkandgoexpress.com www.forkandgoexpress.com
gauravshetty.com
getcontainiq.com
grand-sixteen-solutions.com
admin.hanamaco.com
app.impulsofitness.com.mx
ixa.tokyo
izakhomeservices.com
jainabasey.com
jetsonsrobotics.com
www.jibhui.com
kaiflow.gy
beta.kennys.nl
dev-content.keynate.com
app.lagniappexp.com
lcasebenefits.com
localpresencenow.com
auth.mailmeteor.com
mangabox.ink
milestores.com
montereygrainfestival.com
nexviora.com
nourishthesaints.com
www.novoda.tv
www.nyhetsmaskinen.se
onmyown.ch
optimoo.se
paoxmio.com
partnear.app
mix.pathway.vn
perubi.com
petrolmedia-stationsfinder.de
www.pnp-utils.de
3d-mayo.popshap.net
www.propatchandseal.com
app.quranquiz.net
plataforma.rastrotec.com.br
sakura-timecard.com
samzudell.com
sarahsurrette.com
www.satyambits.in
www.securityandgrc.com
app.skilltech.vip
www.sodoservices.com
training.sogafit.net
campingchecklistdev.stellarjaysoftware.com
www.stoicmind.fr
stuconnect.in
systemevieaugmenter.com
t-do.co.za
www.talapady.com
www.tallerlaroca.com
teamskillevolution.com
www.thiagoafonso.com
tecore-admin-cdn.timeedit.io
calculadora.tomasgoncalves.me
trender24.com
jogo.turkowloko.com jornada.turkowloko.com
fitstack.voostack.com
westoakscondos.org
wingspanstructures.com
www.wolkube.com
xploit.games
yudiodesign.com
zubeen.live
www.zynalytics.co.nz