77/100 SECURITY SCORE

Certificate Information

Subject
CN=trutalent.io
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 30, 2025
Valid Until
February 28, 2026 65 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
09:49:A5:EE:7A:4C:59:60:87:96:B4:7D:50:95:BA:24:73:60:6A:D7:A0:C2:9A:5A:D2:B6:1F:F3:6E:5B:45:38
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
staging.proinvoice.co

Other domains in certificate

asteroids.115room.com
www.airobotics.im
me.allmembers.org
d.alp.cr
alyssajgonzalez.com
artkom.dev
backoffice.audaxdigital.com.br
links.azeoo.com
resume.billinger.me
dev-l4m.bms.vision
calebaguirreleon.com
cardoter.com
auth.cardreo.work
yair.choacha.pro
co-in.uk
medyum.baglamabuyu.com.tr
www.mastertrain.com.tw
www.communitycattle.org
www.csemoguel.com
login.cybernetex.ai
blog.datacompass.com.br
discoverhimalayatours.com
prod.vg-static.s.doran.app
phr.easymrs.com
editmp3.pro
www.elitepersonaltrainersnyc.com
www.entireacademy.com
www.app.excelrecon.com
gdji.foodle.su
test.gemsotec.com
arduino.havenga.ie
www.herancaeterna.com.br
tracking.adapt.studios.i40.de
links.preprod.ilewatt.fr
tec.orion.ind.br
iottec.network
jbaa.club
www.jeftours.com
security.johnfowler.co.uk
bo.jug.im
karateshitoryu.com
www.kassenweb.ru
ftp.kerp.net
dats-games.kro.kr
laniakea.laniakea.tv
liam-watson.com
loopfinance.com
store.medicingenterprises.com
michalkukla.pl
www.miigsolution.so
survey.momofingo.com
jbjb.n-e.kr
lotto.naepo.xyz
nhonewaycabs.in
oddityparadox.com
openfooty.org
www.openplaysoft.com
anapa.orthocare.kr
www.otowa.io
oyunistan.xyz www.oyunistan.xyz
www.payproxy.io
physiobalance.fit
app.physofia.com
www.piatmetal.hu
pinet.website
auth.pishgoo.show
prstroy.eu
futubot.pukloo.fun
visor.quattrocrm.com
www.quest.mn
onlyoneof.re2fe.com
v1.ricardosandez.com
ideas.richardscollin.com
www.roberto-pantoja.com
www.sanmichelemilano.it
saswatlife.com
serume.org
blog.shoplystr.com
apptalentosdocampo.sistemafaeg.com.br
www.smartfinance360.com
ul.soha.vn
solutionsfptb.com
sumitsir.in
swiftdoc.com
wall.nominator.synapps.hu
www.systemaid.cz
admin-staging.teradev-app.be admin.teradev-app.be
trutalent.io
www.uniconyx.com
www.vehicules.net
www.vijaysharma.tech
vocalvolt.xyz
wallofpositivity.com
wecycle.io
welcome.wegow.com
www.worlddevelopmentfoundation.net
www.2021.procadexpo.pl