Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.mikeprocopio.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 16, 2026
Valid Until
October 14, 2026
57 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
2E:79:2D:15:BE:3D:B9:D9:46:FD:2A:D9:1A:79:5D:AB:7A:EA:9F:DE:13:55:98:80:70:36:05:8F:7B:2B:1E:9C
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
dev-share.bmatch.app
share.bmatch.app
www.1670ce.com
www.aeengenharia.com.br
ah.gs
student.almajeedgroup.in
alusiz.com.br
roost.appsinventor.com
demo.arzucad.uz
pebble.aurame.ca
axelradio.com
azionoverseas.com
baothebarber.autos
www.baothebarber.autos
www.bharathingo.org
www.chiaraanesthesia.mom
www.clearing-snow.com
authenticate.cloudstock.net
daegurang.com
www.daegurang.com
drhschouhanpilescare.com
bastararts.admin.fabsoft.in
bastararts.billing.fabsoft.in
ios-support.facesapp.pro
findeck.eu
portal.floracadvocates.co.ke
www.gosafecabs.com
cdn.greenvillagesrl.it
imgtopdf.gurusarthi.in
vip.hayyak.sa
www.helpher.co.in
www.holybully.ru
hourstominute.com
huaiquimilla.buzz
www.huaiquimilla.buzz
ibots.live
jinbaolingrentals.mom
www.jinbaolingrentals.mom
kafaboost.my
www.breakblock.kro.kr
kuroushi.fun
kwikmemories.com
sklep.laboratorium.wroclaw.pl
eat.laspenasmexicangrilltogo.com
order.laspenasmexicangrilltogo.com
resto.laspenasmexicangrilltogo.com
ridey.lazydoglab.com
www.lex-prevention.fr
www.logicaljupiter.eu
www.mahirbelek.com
update.makamify.com
baby.maxoline.fr
app.mcelroytx.com
www.mikeprocopio.com
syncgyg.mimenu.lat
mobile-brain.com
pisa.molii.my
mrnovemberxo.com
nodai-tokiwamatsu.jp
nudgeapp.org
apps.numorotech.com
app.onground.co
optin.no
auth.orbitscores.com
shopnotfound.pagenotfound.in
pcdoctor-developer.com
perguntas.pertalks.com.br
www.petartify.com
app.leparc.photofied.tech
admin.playfamouspeople.com
app.qanary.net
bonus.redhauspizza.com
food.redhauspizza.com
menu.redhauspizza.com
resto.redhauspizza.com
cardapio2.restauranteitumbiara.com.br
www.rishta-pak.com
www.rocketllama.games
ebf.saindev.com.br
shibconsulting.hair
www.sitecommand.biz
smartcare-services.in
www.smartcare-services.in
partner.southxtech.com
strikeablock.com
www.strikeablock.com
succulentworlds.com
data.taphub.asia
tetherkeep.com
auth.themorrowyears.com
survei.uinsyahada.ac.id
www.umnis.com
www.vbucks.co.za
drop2048.vectech.co
veenus9.com
voicenotesai.in
wanproperties.buzz
www.wanproperties.buzz
diabeticjourney.ypsomed.com
www.zyzauniversoautoral.com.br
Other domains in certificate