Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=wreggo.net
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 07, 2025
Valid Until
January 05, 2026
58 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
89:B3:1D:6D:F3:60:66:B5:0F:27:D3:59:1F:3B:09:13:4F:A1:D8:3D:29:B6:C3:1B:6A:F3:49:11:82:31:47:45
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
spcouverture.com
app.1112one.com
www.afa-ngo.ch
agucare.cl
www.airpix.io
arith.app
armacard.ru
www.avniupskillventures.com
dev.baasi.app
owner.baroon.io
app.beautyspace.ch
www.bogal.ca
bombayplay.com
brainticklerband.com
gdomo.breard.org
www.buttonsdyes.com
order.byhorse.com
propuesta-tramo.cajalosandes.cl
talihalli.cintoia.com
clausefacilit.com
clay10.co.uk
x.cloutflow.com
www.brinkinnovation.co.ke
ode.cloudlabs.com.tr
google-home.thomi.com.vn
dev.curiouspark.games
www.cwlog.com.br
cydratech.com
designpatternsgame.com
www.easypledge.co
advancetechnology.easysignage.app
aulavirtual.proyectotriunfo.edu.pe
electroindadapters.com
evy.dev
examrv.com
pass.flyflair.com
footballbastards.com
freestuffgrabber.com
www.futureresearchinvestment.com
www.globatalent.com
gojex.ai
hailstmarys.com
www.helgo.today
www.hennabyharishmi.com
holidaysportsmanshow.com
homereferhq.com
abest-osu.s.hotekan.com
sample-h.b.hotekan.com
huahlabs.com
chat-app-sample.i-takehiro.com
hust-cv-202416202.id.vn
collect-customer-test.digitalse.ikea.com
aluno.imaginakids.com.br
kizuner-app.inapps.technology
iterum.nz
link.jadibumn.id
jamesbish.dev
jefntungila.com
gift.kakaotalk.app
kazmon.nl
www.kindnoise.com
app.lfmusikindo.com
longwayhomegames.com
www.makrosistemas.com.br
maybgames.com
www.mdln.pro
me-ben.com
mgkexpress.com
mintnguyen.com
ractdev.moff-bear.com
mpishi.co
myfiis.com.br
preview.mymealplanner.app
www.myomnes.fr
onboarding.naluri.net
staging.admin.nyby.no
link.ogram.ae
akillitahta.ogretimsayfam.com
www.padel-ranking.com
palabreas.com
paradoxmgmt.com
penguinpeople.io
sameetkeshav.com
www.scaccosrl.it
d.yoko-app.dev.shippio.jp
shrivedmatarashtriyajyotishsansthan.com
emil-frey.simrace-control.ch
vk-fortune.sjt.hu
sksis.ca
admin.splurge.art
ndscratch.sqwadhq.com
stupid.ir
swipelab.com
www.tonhozi.com.br
www.tripletise.nl
try-me.jp
www.usv.jetzt
vascsolar.com.br
iscout.wielewaalgroep.nl
wreggo.net
Other domains in certificate