Open
Cached
·
just now
80/100
SECURITY SCORE
Certificate Information
Subject
CN=www.christianviglianisi.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 25, 2025
Valid Until
March 25, 2026
63 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
2E:9A:CA:F9:0E:5A:CE:C1:3B:8A:BA:AC:ED:7E:77:E5:61:AC:63:84:16:0F:B4:5A:6E:FD:E9:77:57:DD:12:48
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
Wildcard CAs
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • You have authorized 6 CAs - consider limiting to only the CAs you actively use
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
Subject Alternative Names
100 domains
tibetankeys.com
hgjb.abosolutions.nl
admissions.kusip.ac.th
app.acessocriativo.com.br
adammichelin.dev
aidara.app
www.animalzing.org
auth.askcenter.com
www.azizaismail.com
onmyleague.belloin.fr
bigmach.in
www.blretroracing.fr
staging.bluerobot.com
bonbazou.ca
panel.botsedge.com
www.bracelit.es
buyzocart.shop
blog.byteqube.com
calfropingdaily.com
links.canvidapp.com
backpack.ccpcs.org
www.christianviglianisi.com
www.codeworks.bg
www.fungear.com.hk
complere.se
fairtree.dataviewfund.com
staging.diaplatform.app
ecare.diastecnologia.com.br
www.dmonesi.it
app.docmorris.de
app.eccodove.it
mok.eps.mx
www.ervanrenault.com
extradimension.games
admin.foreverware.org
www.geoladak.hu
reseller-demo.geoservice24.com
www.gets.cloud
robert.glaz.dev
glomo.no
cementerio.cdg.gob.ar
develop.gobertha.com
www.gooseclip.com
demo-intranet.goyazi.com
pztw.haohows.com
blog.hotcocoasoftware.com
byttapet-staging.web.innotactsoftware.com
www.investorlink.co.za
www.kobratransport.dk
www.kommentai.ru
www.lenormandapp.com
lexicount.in
form.litta.co
mariadelrosariogarcia.com
www.mdotnews.com
www.menuqr.uz
www.minervia.ai
pilot-galaxy.mosaicapp.com
caetano.mottamilord.com.br
www.nevagim.com
auth.iem.next-audit.de
www.nudgegram.com
test.dev.nyle.ai
www.oakay.com
odaiwa.com
connect-va.olympesat.fr
url.oroscopodelgiorno.cloud
packtrack.io
pharrellphone.com
plataformaproativos.com.br
realityworkshop.design
redoxdesignx.com
cps-dev.refactory.digital
ardac.rflex.io
app.romanvillagechapter.it
www.rx7method.com
whereis.samverlaan.nl
ll.sctindia.in
seasonstaff.de
www.senchao.xyz
www.shortshorts.run
snapmentor.no
taka1156.site
tapedin.net
tcgnotify.net
tec-craft.com
theroastlog.com
ticsocialsas.com
trapmafiaoficial.com
trycoup.com
dhp.check-in.thrive.uk.com
umair.dev
unitcas-th.com
mybikes.vielo.cc
www.vizulr.com
house.webmodell.no
whiteout-climbing.com
yvrshufflers.com
sim.zapay.link
zenithengine.xyz
Other domains in certificate