Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.kinder.graubuenden.ch
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 01, 2026
Valid Until
November 30, 2026
88 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C9:12:1E:70:F9:EE:7E:BC:6B:4A:F5:0F:52:A5:1E:92:EB:61:47:B5:B2:DC:DA:53:B5:D1:C8:A0:63:A7:98:ED
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
shrievent.in
1medicine.in
1security.in
www.1security.in
www.8b8.in
8p8.in
9x9.in
acab-capp.site
ankeshsuryan.in
anttrail.app
arputer.com
www.arputer.com
www.asdirector.co
www.az-llc.com
www.baselayer.coach
biotechsurgical.com
www.biotechsurgical.com
www.bouckova.cz
app.canerbuyukkaya.com
www.centosys.in
app.dev.classveew.com
cntnt.social
www.cntnt.social
admin.cointabil.com
dashboard.commerce-os.app
cybernet.click
www.danwei.shop
devmansion.in
app.diestoor.co.za
www.escueladetenisctc.com
estigma.org
www.eveezi.com
www.fratellibarretta.it
www.gadelbaz.com
ghaithlabs.com
www.ghosttechnology.ae
www.kinder.graubuenden.ch
www.hadisyai.com
auth.hireonme.com
www.hotelaltamar.com
www.icashconversapro.com.br
imoveistrindade.com
japantravelexpert.com
k-lei.org
cdn.keke-dev.net
www.kellydiabagate.com
kiplist.kipbook.com
www.leipziginternationaltennis.com
levelupsecurity.be
www.lexsigma.co
app.logibud.com
lostbikes.se
www.mages-edits.com
masqrade.net
leafmark.mixnews.jp
auth.nontara.mka.my.id
auth.movim.ai
legacy.theartistsuite.musictechlab.io
staging.business.mygig.com.au
www.neerthanal.com
www.ontoegankelijk.nl
picklewt.com
pixelonmobilestudio.com
pixelweb.click
plasticrodsheet.com
plyvite.com
podmaxs.com
postiapp.es
principiacapital.ie
admin.pspkdevtest.net.au
quickconnectls.com
chris.raynor.tech
remilt.ro
www.riddlefield.lol
rizkidentallab.com
rocket326.com
www.runpace.pro
www.saldoofin.com.br
schulverein-gsn.de
www.sebastianmoreno.se
www.singel51.com
staging.admin.skmdsports.com
smindiastore.com
dashboards.solfus.com.br
www.stedamaps.com
sunisup-studios.com
tenacitydevgroup.com
www.tenacitydevgroup.com
trivia-giant.com
app.tuavita.com.br
www.uffdelicius.com
ugether.one
villafamilyclinic.com
vjdsignstudio.com
weaviture.com
choom.wehive.global
portal.windoware.com.au
dev.worky.mx
wouldurather.me
www.yanxiu.lol
Other domains in certificate