77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.asociacionsilbogomero.org
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 01, 2025
Valid Until
January 30, 2026 66 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
8F:C1:5E:C8:1B:1E:77:1F:9E:28:35:CD:81:D3:13:A0:7D:C1:9C:8E:E3:BF:C7:BC:30:AC:5B:9C:FA:69:D5:F4
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
test.moya.ascentic.se

Other domains in certificate

link.4shared.com
adboost-network.de
amelhorpizzadacidade.com.br
www.apm2.studio
app.arborlearn.com
www.asociacionsilbogomero.org
cube.atlasbus.ru
articles.autoformsai.com
next-in-show.b-reel.com
barrio.systems
chats.bizbiz.fun
block-games.fun www.block-games.fun
www.chukutaradio.com
cllp.se
appadmin.mayka.co.in
postular.colsan.cl
partner.monie.com.mt
www.consciouscrops.us
cloud-staging.corebodytemp.com
crosshotelandresort.com
csubcamps.com www.csubcamps.com
clientportal.diamondequity.com
crud.dobler.studio
auth.dogonews.com
go.dugoutmugs.com
www.energysolutionsbr.com
experimentalfab.com
esbtc.exsat.network
test-f298hf2.fanmio.com
finavia.fi
findadoctor.ae
www.fridaydd.com
gallowaydigital.com
garvithindustan.com
admin.geninj.com
www.gettoskatepark.pl
gmail.ghiveci.com
giverodabuck.com
goatfitness.com
app.goldieshipping.com
sharetp.goodapp.in
hannessonadmin.com
www.hendryzheng.com
hkpca.org
hydrofrolics.com
hypernovadev.space
hungndp1609.id.vn
www.hims.ida-org.com
whatif.ilmsg.in.th
innovaintec.com
kiosk.insyncapp.io
agenda.judel.nl
ploutos.lapprand.pro
staging1566.lavish.green
ttol-prod.da.letsdive.io
losthobbies.com
www.maalauslevander.fi
www.mc-ceramics.co.uk
app.merch.ooo
mlpropertyholdings.com
mybridge.center
app.nazara.si
test.onlinegames-info.com
share-dev.pace.fitness
paninipizzasdelivery.com.br
m.parkera.app
www.pastelpreprimary.com
emoboard.playful.ist
kift.portfolioview.co.za nexus.portfolioview.co.za
stagingchatengine.proxtera.app
www.qubitdna.net
rapidgateway.pk
reap.studio
app.reefguardians.org
rethinka.com
www.sahdoindustries.com
sandanski-optic.com
sellingify.com
app.simplynomad.co
xt9huxfvyzri7mwzsos4.smartimob.io
dashboard.sputanikwealth.com
info.sviamiprimonraj.in
swiftcloudtools.com
be.testla.nl
staging.texel-arts.com
meals.tleifj.com
www.tokenalerts.app
dev.tsinghua-alumni.de
auth.tutorfinity.com
neil.uuum.jp
if.vmay.com
warpknight.com
tz2.wewonder.com.au
testlink.wisdom.audio
scheduler.wjaa.org
app.worklog.ai