Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=www.supgrup.nl
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
January 13, 2026
Valid Until
April 13, 2026
84 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
60:C5:C1:79:A6:62:62:AF:ED:EE:39:84:2E:0A:A9:3A:93:1A:12:37:58:93:EF:03:65:75:7F:19:19:B0:5C:3B
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
twinar.app
teatr21.180hb.com
alecng.ca
almdata.com
hireeasy.apxor.com
www.arvada.io
testflow.atomsai.net
smarttools.avanichavan.com
www.bantumart.com
beta.bestinvoicing.com
botterman.me
capa-aquascaping.fr
app.casted.us
chakrasoftware.net
upload.chrm.fi
www.ciskodisco.com
www.cloutch.com
www.cpost.io
app.customyour.shoes
www.danieleciceri.com
deal-reel.com
promos.definedcleaning.com
dhanvam.com
app.dilemmainsights.com
doradolist.com
link.doublecheck.kr
earbutarediocese.org
resetpassword.ecopharm.nc
lifekinnex.ekinnex.com
www.elosantosmakeup.com.br
esfindia.org
feremcare.com
flux.finarkein.in
www.fredericferrando.com
www.friendcasts.net
gamedez.com
buydev3-links.gojabu.com
pay.sandbox.pairpoint.gr4vy.app
app.greenkeeper.se
gsvrisk.info
gttecnology.com
hanialhaddad.com
app.harristhomas.com
www.huddlein.co
www.impact-and-values.com
www.interdatax.com
jaromirkalas.cz
kangastore.net
kelvinsight.uk
www.klas.tools
konect.to
admin.kotaberbagi.com
invest.landex.ai
letsmeet.today
luka.now
www.luxe360la.com
www.lynkestimating.com
magadhmission.com
margav.ca
mariehamnsflygplats.fi
masterwithmahi.com
mkmasalas.shop
www.smart-cloud-ide-lp.moff-bear.com
mobile.myfii.io
neubau.net
ecms-michael.nucor.report
oilreminder.app
www.oohvisionpro.com
graficos-develop.libcom.org.br
www.palmtreeclub.finance
piplosai.com
planningpokerpro.de
www.prosupplydirect.com
dentons.redacted.ai
manage.hunt.redsols.com
riyominternational.com
www.rootdigital.com.br
www.ryryryan.com
seacoast.partners
dev.sloteng.com
www.smartmathkids.com
lnt.smartmobilityyellow.com
essential-group.smudge.dev
www.sol-power.co.za
specdrums-admin-staging.platform.sphero.com
insurance.d1.stx.world
www.supgrup.nl
tatkhalsa.org
tellmebriefly.ai
todoparaelviaje.com.ar
www.triestefamily.com
tuwebhoy.cl
app-sandbox.visitown.live
vmog.net
workflow.vsight.io
www.vyinsp.com
wifisight.school
splitspaces.yodelit.co
zetailetisim.net
student.dev.zlipp.in
Other domains in certificate