Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=poc.ezsun.co
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
February 01, 2026
Valid Until
May 02, 2026 82 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E4:CC:8F:59:7C:9C:A1:B7:C6:E6:D7:E9:83:E6:21:25:4D:2B:BC:B5:99:5C:E1:F4:6B:C5:14:D2:AA:02:24:AE
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
sof10.net

Other domains in certificate

scp-product-config-cert.3dcloud.io
www.actionguitars.co.uk
activedata.info
araxasa.com
digitaal.assetrail.nl
axislab.it
cervantestrescruces.uy
venue.chowin.co.za
www.eazytap.co.in
memperor-tech.com.ng
niko-intendente.capiata.com.py
dev.ar.consensus-labs.com
www.countryroadapp.net
cybintcentre.com.br
www.dtanguy.fr
dunets.xyz
shukobuild.guide.payment.energy-gateway.co.jp
www.eshi.io
poc.ezsun.co
budget.fcsia.com
www.festilo.nl
www.fictforum.com
fijo.co.uk
florissant.dev
foodchow.net
www.foodrestos.de
www.funwari.dev
link.gigpro.com
gpsafaris.com
test.jreader.greycastle.se
dev-subscription.growlight.cloud
suite.hasanuzun.de
helitaxii.com
rmmlatam.holcim.com
development.homegrowngardener.io
www.howmanyisit.com
southamerica.ihhsfair.com
a0sza.podc.incentable.com
thesource.onsite.invue-live.com
jackmaurer.com
www.jfhtech.com.br
carepro.joinhonor.com
k-kiswahili-words.com
kalaestudio.com www.kalaestudio.com
coba.kipa.id
kiwiui.kiwibot.com
komisslubnyplussize.pl
personal.lante.com.co
leontec.fi
www.likeligood.com
www.linksround.com
lifecu.lunaconnect.app
mathumathiv.com
cariboutaxi.megataxi.com
www.mobilogical.com
links.cardiacsolutions.mycareally.health
www.neurekalab.es
pathfinder.nextit.be
assess.dev.nside.io
www.o2xygen.be
app.onyxprivate.com
rateiotelefonia.cesar.org.br
pieterjanderidder.be
pixelbots.io
cloudcity.pokrzyk.com
patidev.prakazh.com
www.prakriyadesign.in
private-media-lounge.com
raizvivaestudio.com
www.redballoon.it
www.refuellabz.com
ridelevel.com
www.rkblawcollege.com
app.roundz.jp
sarahbiffle.com
evault.sensa.solutions
join.sleepcycle.com
solovoice.eu
www.sparkengineer.in
statbrio.com
mpfamily.straybirds.in
gore.stsz.de
synea.io
dc.tcargo.vn
thefaithgap.com www.thefaithgap.com
angular-recipe.thewordisbird.dev
www.thriwin.com
app.tkcare.fr
www.tripledesign.se
invite.vodo.app
www.wamaku.com
www.wealthcertification.com
activate.webstollen.de
wekicards.com
app.wifimap.io
staging.worky.mx
demo.zlipp.in