Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=asw-office.at
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 11, 2026
Valid Until
November 09, 2026
89 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
62:08:22:A1:E8:7A:04:29:9F:F3:07:C8:51:B1:7E:CA:65:86:E8:76:96:98:47:5A:C7:4C:65:C1:0F:71:70:2D
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
staging.positrack.app
referral.ahazou.com
www.ai-jihye.com
werewolf.alpha-orionis.xyz
amanahub.com
anchor.com.ua
apprythm.com
www.arkidisenos.com
choir.armenian.ca
www.artpull.net
ascendantroadholdings.com
asw-office.at
badassnegroni.com
www.bravesprout.mom
brendonelite.com
butterfly.com.hk
carolinawheelwerkz.com
castc95.org
www.castc95.org
resto.cloudas.com.co
tienda.cloudas.com.co
www.contattovolo24.it
corvustid.com
costruzionimdb.it
covra.com.au
admin.creditoperola.digital
glomb.cubiq.com.br
portfolio.denprog.xyz
ag.devent.no
ekkamdesign.com
www.entreprise-enveo.fr
experilink.com
eyelashshop.top
www.feedback.place
skyeischihuahua.fluv.me
menu.foodmine.ca
fortuneinfra.dev
fritemos.com.co
app.getclide.com
getherbody.com
www.goodgiving.com.au
heal-app.live
hellotoad.com
hendersonweb.dev
www.link.hicity.world
highperplexity.com
www.hippo.cool
www.holibonny.com
infinityli.live
inocuject.com
gh-de-ify.input4you.be
instantar.tech
www.islauriemetcalfonbroadway.com
jimhortons.com
go.jordancoeyman.com
aa-g40.k2m.ca
kalkale.org
www.kellyseniorconsulting.com
console.kitsy.ai
www.knowlium.io
lafiny.com
www.lamalauredaye-sophrologue.com
lasnovenas.com
www.llynfiholidaypark.co.uk
aidrawingbook.manideep.info
mihaibold.dev
www.ministudio.cl
nectarfarm.in
nerds.sh
newgate.de
nostalgianinja.com
webflow-cdn.nutrisense.io
ocantherapy.in
r.onuraycicek.com.tr
outloudwithrosy.com
parareefgroup.com
dl.planto.hk
www.postacilaryapi.com
www.proknit.com.tw
iot-system-design-tool.protonest.co
www.proviene.com
ramoveis.com.br
samandagemlak.com
www.sander-lunchbox.com
www.scarlettvox.com
gib.parking.smartsys.io
rbastage.softtouchpos.co
ai.solutionsforgood.ca
steadycompass.lat
dev-brazino365.iframe.survive.bet
taihao.rest
www.teunspithoven.nl
ventanaspro.cl
veritic.ai
vethelper.com.tr
voguatecnica.com
curator.by.wow-dev.org
sensors.wwla.kiwi
zezula.co
www.zoodlebug.com
Other domains in certificate