Open Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.angel.uy
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 16, 2025
Valid Until
February 14, 2026 85 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
60:54:64:A6:BE:2C:F4:BC:95:C1:F2:C3:8D:50:0F:B2:21:57:C2:94:F0:E4:DD:EF:BB:FE:FA:D2:08:CC:DE:CC
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
tipica.app

Other domains in certificate

achilleasein.dev
www.aiaibank.com
aifilmlists.com
akshayphotography.eu
alyss.me
www.angel.uy
prod.ashwija.com
asteeno.dev
www.aureca.pl
binday.bot
ui.bizbiz.fun
www.brooksidefarm.biz
www.cloudssound.com
haim-asaf.co.il
agreenecttechnologies.co.zm
i-ching.codeserk.es
livemap.codeweek.it
crewrun.com
crisydiego.com
www.dantasservcontabeis.com.br
dstrickland.dev
www.dungeon-stories.com
escolinhajosedelbeltrao.com.br www.escolinhajosedelbeltrao.com.br
feedback-vlf.euanriggans.dev
fanset.com.br
www.fintechegypt.org
fylmoda.com.ar
sonic.fyneplaykids.com
gallax.it
creditcard.genzautomates.com
getamplifi.app
location.gets.cloud
www.goldenminds.org
guivus.com
huntingtonatallah.wedding
impetum.mx
link.involved.city
jobbot.biz
draft.kodex-ai.com
krugerperformanceaviation.com
labflick.com
tools.larkin.studio
lemlems.com
bingo-prod.da.letsdive.io
livnium.com
mavibulutlar.com
meshtastic.co.nz
www.mintiejamie.com
hylo.dev.mk.mw
mleduc.xyz
msfmotor.net
nahraynarabia.com www.nahraynarabia.com
nepalcivicos.org
nerd.tools
npfppm.netflixstudios.com
projetos.newrizon.com.br
www.onspaceship.dev
one.tcsa.or.th
www.originfilms.pro
www.parentsinclusionnetwork.org.uk
vertu.partnerhub.co.za
pressure.cooking
productcatalyst.space
prompto.today
queerityapp.com
sanrei.link
scoryo.io
sense3g.org
senwellexports.com
shyrianatv.com
dipeshmakvana.skycoderz.com
kasir.smartapotek.app smartapotek.app
abeille-assurances-souscription.speakylink.com
www.sports-it-works.jp
web.stayflock.com
steamcleaned.be
www.sushuptidreams.com
www.tantei.lol
tech-of-light.net
tennai.app
terranovas-alaskanmalamute.com
www.thaiscorato.com
www.thebardailongs.com
thecampuscrimson.com
todamoon.live
transformadoratierranorte.com
app.truckdesk.com
turingform.com
amicidelfiume.turna.it
undefinedbehavior.dev
urbanabodenashville.com
vr1coin.com
customerservice.walletpayment.net
x98.dev
xipitech.com
zempoaladestilado.com