Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=auth.terraqia.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 30, 2026
Valid Until
November 28, 2026
89 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
7A:60:C8:66:1F:AD:AC:E4:10:C8:52:23:0D:AC:29:30:20:84:31:92:08:63:1B:C0:0E:46:8E:8D:5D:81:09:B3
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
soundchecksite.com
adori.ro
avora.travel
www.basavbamrah.me
www.bemie.nl
www.bookscribe.de
www.buildingdoctor.org
www.bussinescapitalservices.com.mx
www.bytemy.tech
carzonevip.com
casamavi.es
cegapp.autos
classroom.centrulminerva.ro
choisirlavie-isere.fr
mcc.clau.io
rewards.clubmarevabeirut.com
livemap.codeweek.it
ensayo.colegiolosleones.cl
privacidade.connectgrid.app.br
cooperintelligence.com
link.cre-sydney.org
www.cricketskills.in
dbconnect.org
digigurus.net
earnestportfolio.com
eeecccooo.co.uk
usemobile.empuls.io
powerbank-rental-test.energic.sa
equestrian.digital
www.estudioboceto.com
analytics.excellent.com.pl
fak10.app
www.fokus-news.org
gm.gocad.de
stg-app.grantweave.com
grindingiron.top
groupgrubblr.com
dev.zenlife.grzegorzmika.com
www.gyaanai.ai
www.hadioyna.net
www.hatkon.de
hustiuliucaria.ro
prod.ogh.iamasoft.fr
identityconverse.com
integramind.ch
ednevnik.usce.ios.edu.rs
ittae.com
www.jenniferkajda.com
empresa.jobecam.com
justguess.it.com
kbtrans.eu
www.kerols.me
app.keyboardhe.ro
kruvedinfotech.com
id.staging.layers.digital
www.legalcounsel.mx
lily-labs.net
www.lipunet.rest
minmaxxing.com
www.mskn.online
mytwinhome.com
auth-action-stg.omnisaude.app
patysims.online
pciaibanyumas.online
playunfairmario.net
backoffice.antaressec.qitech.digital
www.rada-aludwan.online
reshma.tech
retirepontohub.com.br
www.rimo-trogen.com
www.rzidiomas.com.br
sajjadwedsirfana.com
apt.samsamsam.org
millssgr.sgroneclick.com
www.shan.in.net
shuttlez.org
sitcomnet.co.il
sjaalumindo.com
stackbeans.com
start341.com
bayesscale.stephenro.se
api.stickers.network
sysdevsolutions.com.br
www.taliowisko.pl
www.tangzhou.rest
compliance.targetmultimidia.com.br
tellellis.com
auth.terraqia.com
www.turbineduca.com
www.tuttovintage.com
uniaodiscreta.com.br
apps.unipiazza.it
unitvpainel.com.br
vertigofilms.fr
vie.earth
www.vscentrixdesign.com
www.widadpatisserie.com
www.workout-maker.com
z-pos.de
flume.zajno.com
Other domains in certificate