Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=app.airalo.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 14, 2025
Valid Until
February 12, 2026
74 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
6B:C8:85:AA:95:BD:F2:BA:CC:AB:DA:99:67:31:C6:66:5E:2E:B1:A4:B3:47:5A:B0:63:57:47:5D:AD:C2:91:B4
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
shopimob-dev.webuters.com
aeopengym.com
app.airalo.com
andreupifarre.com
multicasa.appshare.com.br
balllab.es
barrencreekit.com
www.barrencreekit.com
boulderseries.com
quiz2.brunner.app
budit.ai
bulljang.com
caneriverroyalties.com
www.capitolleaf.com
cexbit.cz
hakushika-classics.cfs-japan.com
la-cazuela-roja-umekita-floor.cfs-japan.com
www.childent.clinic
clonetrip.com
cl.xukzhao.cloudns.org
www.copyseo.ai
www.crudecatz.com
daedal.app
www.darrenspurgeon.com
kreate.dataknobs.com
www.digigoods.io
digipropy.com
earntompesa.com
eduardonp.com
www.edubond.co
efloorball.asia
paylens.eparas.com
falconrideshare.com
www.farmtoplatemarketplace.com
fisoundstudio.com
flairswap.com
flowflowflowflow.com
firebase.g-asiapac.com
gemsystem.app
gensocial.co
staging-silverhand.getgalatea.com
gitarray.com
globalapps.co
graei.com
share.grapevine.in
grupo-mavasa.com
demo.gs1it.org
www.hrita.xyz
wait.ideoplaylab.com
www.imind.live
inertiaestimating.com
sgm-app.insideapp.dev
ittae.com
jackbiltdesigns.com
jazzyguo.com
jlprivero.com
joshuamuster.com
krakelabsinida.com
comp.lewisjohnson.co.uk
web.liist.com
linkerfinder.com
locketyearbook.com
www.luisesbooks.com
maproadtrip.com
marcussam.com
margensdoprogresso.com.br
masoudsistani.com
www.menendezlaw.ca
staging.parts.mobiful.jp
www.moonvalleylauria.com
www.moviegoer.io
www.msabbott.co.uk
msrepairfridge.com
myeliteapp.co
naturalcarsjapan.com
www.natursynsspillet.dk
www.nbzpeiwan.com
dev-hc.neumobot.com
ontask.co
owlpaca.dev
www.plazaserrano.pro
admin.staging.prek.com
samasama.art
www.sciencewithkids.com
app-dev.setutrade.com
skate.ge
sorbelo.nl
taiyouflare.com
talkful.org
tallang.no
tenlivesfoods.com
pages.thelastrockstars-goods.com
thepeopleleadersite.com
ultra-unity.com
mfly.engin.umich.edu
urano-online.com
www.widnes.dev
zhuanshengyongzheshisemo.games.yuzhan.store
zakpay.io
zepuzzle.com
Other domains in certificate