77/100 SECURITY SCORE

Certificate Information

Subject
CN=prehr.sk-global.biz
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 20, 2025
Valid Until
February 18, 2026 80 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D3:57:60:EE:BD:FC:4E:11:BC:A5:26:C2:75:F0:F7:19:FD:A8:C2:4D:99:60:2F:EE:CE:65:8E:75:BF:9B:A0:3F
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
thaibasil-denver.com

Other domains in certificate

2011.bloggi.es
217.jp
aarteriafilms.com
carpool.abp.in
seafarer.abracontrols.com
catalogo.adamafashion.com.br
www.adamsolomon.co.uk
login.apphotspot.io
calidad.appsiste.co
www.rgb.arcuilo.com
ashwinmahesh.com
web.astage.org
avikglobalnetworks.com
banxpayment.com
beacons.beacons.life
betaods.com
system.boroughmedical.com
www.boucherie-barneoud.fr
cloudtext.cadybt.com
dash.clau.io
offers.suprol.co.in
codess.cafe
extranet-qa.cofaral.com.ar
hernandosun.column.us
www.crescentdreamapps.com
www.deathbringers.cz
www.dewerkvoorbereider.nl
discoverwithbea.com
dudley-codes.com
energyball.dev
www.engagedbpo.com
www.enviaunarosa.cat
www.eoshsolutions.com
eulab.cloud
ezodtech.com
smartag.farmvr.com
afo.fastsigns2067.com
gameolive.com
ads.ganaholdings.com
gaohowa.com
getreadygame.com
www.globalvertexsolutions.com
gokturx.com
guavatepan.com
happyhighlightsapp.com
hellomustache.com
happybirthday.hotarek-ribel.com
events.iapvapi.com
ifclik.com
ignitechannel.com
inky.dev
app.interviewglow.com
stgdl.ireadarabic.com
isaaclyne.com
www.jlowasa.com
admin-dev.jointriage.net
joshuaphwang.com
kenworthe.com
kidsornot.com
link.kyrioscloud.com
api.labangmore.com
lalomadelosreyes.com
lanceotimo.com
app.letsdogoodzambia.com
www.lucasgois.uk
ludorlr.com
machite.com
methodsdesign.com
meyse.co
sprints.microservicios.co
monus.cl
naqdify.com
natvasstudio.com
neatifyhq.com
nextstep.dev
app.nfj.com.br
analytics.ooca.dev
berg-betong.ordreplan.no
rshaal-app.oz-tms.com
www.peterdavidson.dev
app.rumble.studio
issian-kyoto.safarigroup.info
congress21.siagr.it
silverlobo.org
prehr.sk-global.biz
sleeptyme.ca
sentral.styreportalen.no
sushantmahajan.in
suvaance.dev
teslacode.ca
toolcentermexico.com
trust8.ai www.trust8.ai
app.usehaste.io
easyemi.vipulasri.com
scan.speeltuin.watdrinkje.be
wifey.finance
www.wsn.pw
xpressarchitect.com