Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=aineu.org
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
January 13, 2026
Valid Until
April 13, 2026
89 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F6:CC:C9:00:BB:45:79:13:DA:79:48:03:8C:33:95:6C:71:2C:89:AA:72:42:EA:54:EA:F1:E6:6A:B9:C8:3A:C4
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
sustainabilitygroups.org
cdn.aerosentech.com
aineu.org
aisymposium.in
sns.applika.jp
beta.manage.appmaker.xyz
www.athreyamr.dev
pupil.bialystok.pl
fundamento-bodentechnik.bodenrechner.de
brive.earth
www.burnian.com
www.chewstar.de
chilliwebs.com
luxurysocks.co.in
www.collagemaker.uk
crockerinnovationfellows.com
crypnet.net
www.customlinkgue.online
beta.deliveries.ph
jtms.drillingllc.com
chennai.dropmeoneway.com
krishnagiri.dropmeoneway.com
namakkal.dropmeoneway.com
salem.dropmeoneway.com
tenkasi.dropmeoneway.com
tirunelveli.dropmeoneway.com
tirupathur.dropmeoneway.com
faf3-sb-old.sachso.edu.vn
estmodel.app
fogpad.app
www.freshandshine.co.za
www.fundxup.co.jp
garuzo.com
www.getsetio.com
www.gift-marukiya.com
pay.futurhealth.gr4vy.app
www.gregore-bikes.de
hakyu.com
www.hcoesonepat.org
henrique-silverio.com
www.immogay.fr
www.inaayadesigns.com
www.infoaccion.cl
jayjootar.com
johannesjacob.com
www.juzbox.com
kanaramportfolio.info
explore.keelung-for-a-walk.com
www.kinsey.info
knowhere.social
kryptonai.in
lappso.com
legra.app
www.lempi.net
www.lifeoverflow.com
linktown.co
research.madwire.net
www.mahakalisolar.com
www.marually.com
mayankahuja.in
mental-bike-motion.de
minesweeperonline.space
mmmumbai.com
mve.to
pic-nlo.mentor.neccton.com
neurhythm.in
nvrforever.com
opendesigntools.com
test.owlair.org
app.parthean.com
assinar-hml.presencabank.com.br
ivy.raiso.org
rhyno.in
rosversity.com
rovellotherapy.com
app.saviamercado.cl
www.scalartechhub.com
sensr.net
invite.shopeebee.com
sitmopanel.com
www.skilluniversity.org
product.skycart.com
archerpoint.softsphere.io
fairfieldtrivia.sqwadhq.com
www.swirlcontrols.com
admin.targetube.com
teroson-workshop-survey.com
tgveneziaedizioni.it
thenewforestexperience.net
www.thesciencecapital.org
www.todoparaelviaje.com.ar
www.tolivesober.com
www.triviadj.com
www.twirry.com
ubsgroupllc.com
eccobapidev.unicomer.com
waniskawfoundation.ca
www.weddingstoriess.com
wservicew.com
700871ae033c4796827deccc8d949676.yotepya.com
Other domains in certificate