77/100 SECURITY SCORE

Certificate Information

Subject
CN=vote.cujdalvin.it
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 23, 2025
Valid Until
March 23, 2026 74 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
29:A1:0B:00:5A:C2:96:16:BE:07:BD:C1:45:C6:ED:64:23:B7:BA:7F:36:E5:A9:CC:B7:65:62:3B:49:6A:79:33
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
subidalibre.musik.digital

Other domains in certificate

2048.errorcamp.com
30.ksug.ai
www.adariq.com
algebradamen.no
amicidellanaturaonline.it
v14.angular.io
dlinks-lba.apps42.fr
aramonstream.in
atindiapackersmovers.com www.atindiapackersmovers.com
www.axyojp-test-ads-simple-web.com
crm.aydens-garage.com
kas.babantu.com
bluejay.studio
app.brokker.com.br
celenkmetal.com
www.class.me
cmcorp.clau.io
conskaptan.in
admin.contemplate.life
vote.cujdalvin.it
cultioo.com
vibe2.daraerang.com
dennynolan.dev
www.deviconstructions.org
wildcard.dpschool.io
drraashikhatripanjabi.com
casa505.edsys.com.br
stud.diit.edu.ua
elektrolibera.jp
www.fabian-gronert.de
facebananas.com
www.fasteque.ch
demo.fishfacts.fo
asmali-konak-deluxe.flanigo.com
vv18.gallerypradarshak.com
gaststaette-bolivar.com
gettryon.app
www.gohantv.com
sgl.goliveconsultoria.com.br
golverde.com
www.gsthse.com
live.guldbech.dk
heliora10oilandgas.com
hometask.com.mx
artwork.hosetee.com
chat.hosting.id
ido4.dev
ifile.mn
itto-web-testing.imperia.solutions
volodymyr-tatiana.invito.link
jardimblauth.com.br
jenesystech.com
control.kabibot.com kabibot.com
kimlo.eu
kimoto.eu
kumulcloud.com
chess-dev.da.letsdive.io
lidstvobylachyba.cz
www.liftbro.ca
app.dev.marketizador.com.br
dashboard.mempoolnode.com
www.milktarot.com
google-cse.plugins.mindtraffic.de
escaner.myrealfood.app
neesh.art
www.nussport.com
changeloggy.onlinepartner.se
pandemy.info
www.pdcgroupconsulting.com
tjobs.percentage.net
www.pilestredet29.no
sansuu.pochitime.com
ratemymeal.co.uk
rcare4u.in
sadotech.mx
samvab.org
conference.ui.sceenic.co
video.demo.set.live
care-new.sidekickhealth.com
www.skillsmasterpro.co.uk
sokolovski.lt
solba.io
squelch.dev
www.supermind.lk
tech-yz.co.jp
inservice.terracat.co.nz
www.theupperbasement.com
links.tifo.eu
session.tutoviva.com
www.tylt.mx
www.typebeer.com
demo.uprisecg.com
www.vinshu.com
www.vrl.me
auth.whistlehub.com
wobblypaint.com
xlminisports.co.uk