Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=app.lawcorp.com.mx
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 03, 2025
Valid Until
January 01, 2026
51 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
2E:5D:8D:57:C6:E9:DF:8A:09:34:56:0C:0F:18:6B:CF:7B:FD:CD:51:8A:E8:2B:2D:F4:D2:75:E7:C0:78:B7:68
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
theinnatoceangrove.com
2048ss.cc
admin.adalong.dev
www.adamcodes.dev
qa.agilityvisual.ai
alxinteriordesign.pl
ampacumed.com
www.as3dlabs.com
www.atlasdiver.com
portail.avancix.com
www.avatabox.com
www.bagbahceyatirim.com
bagbahceyatirim.xyz
bellybeasts.com
bradfordcollegept.com
brekkyeatbetter.in
byaman.online
cancees.com
qot.co.in
www.qot.co.in
auth.coden.io
cremawork.com
auth.danger.education
darktrojanmusic.com
davidputney.design
dentalskillscentre.com
dogrigpt.com
emilymcpike.com
flugames.com
www.frenchngo.com
fuschia-hive.co.uk
www.gnilron.com
golfin.id
handbook.gr
heypkv.com
www.hino.dev
alper-atestados.hrbot.com.br
hummingbirdsolutions.tech
tachyon.hypernote.io
ishetaltijdvoorcupasoup.nl
www.justhome.com.br
www.kaelumcoffee.com
noppa.kahv.io
kronara.com.br
app.lawcorp.com.mx
koshiro.lfv.jp
vlens2.logilabo.dev
www.medeappe.com
minfinit.com
monkeykingandfriends.com
tours.moveskyward.com
mpeoples.in
www.mpeoples.in
noveract.com
www.obin.ai
vapiano-koenigsallee.kitchen.operate-app.com
operionis.com
ifft.org.in
oyifa.com
rickandmorty.pablosolana.dev
petersalomonsen.com
www.phorcus.com
profile.plasito.com
www.pos-itivo.com
psyquence.com
www.pushtable.com
quattrol365.com
ratemyflightinstructor.ca
www.restoreflow3000.com
revive.me
app.riskshield.com.co
www.saultreefelling.co.za
showalgo.com
app.silockbd.com
www.app.simepr.com
id.smplabs.com
snehitha.in
app.sodientu.com
app2.studyrocks.in
www.tannerslist.com
alpha2.tartansoft.com
teandradavis.com
screen4.test4.life
textchest.com
thetintdoc.com
findmycar-dev.towpro.io
www.trapnlos.com
travishodge.com
accounts.xtarnet.us.to
dev-app.vcheck24.com
qa.widgets.vezham.com
apptri-homolog.vidatrilegal.com.br
portal.vitalxchange.com
vtgsoftware.com
www.welkominvenray.nl
wildwestironworx.com
word-count-tool.com
alnair.admin.yondemy.com
yugantar.live
www.zeffi.dev
Other domains in certificate