Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=links.masmovilenergia.es
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
January 01, 2026
Valid Until
April 01, 2026
78 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
3C:8F:28:F3:E5:97:41:EE:A5:48:F1:32:AE:9C:E3:B3:6D:3A:EB:DA:13:64:B9:61:56:DA:FC:D1:5C:1F:20:CA
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
versaoalpha.com.br
ironward.12traits.com
vroom.africar.ng
pragma.albaniforex.ro
admin.allaboutliving.co
qtd.dat.animoca.space
appna.io
armenannawedding.party
www.armenannawedding.party
painel.beholdit.pt
staging-dashboard.beid.io
big12refs.com
bijaypaudel.ca
ast.bluecheckfin.com
firebase.bmfn.us
bournetechnicals.com
buk.gg
www.calendoo.net
www.canelahd.com
www.catchthinkdo.com
circuloabogadosdefamilia.com
app.clout.art
exercise.crisiscompass.com.au
cvpth.com
daniel-choi.ca
www.dobbrick.de
linktree.e-learn.live
emitirfacil.com.br
www.ethextract.com
exlpl.com
fit7days.com
flunum.com
app-dev.flutr.io
fournisseurinternetmontreal.com
www.gamefinder365.com
dev.gearupservice.com
preview.greco.fit
hoi.services
estatecrate.hoodooware.com
inflo.me
sms.itlpros.com
jlaengine.com
kalicrackers.in
konhenkon.site
do-bit.kro.kr
kukuk.me
firebase-c3.manobook.net
crochet.marionwares.com
links.masmovilenergia.es
www.metolegal.com
miaozhi.pro
michaelsezen.com
moirarte.com.br
mznm-studio.ru
nanuinteractive.com
www.netzachtechsolution.com
www.neural-works.com
www.newhopeorphans.org
nll.pw
www.novarahr.com
test.oktorocket.com
www.operationsavelives.org
www.papersboxgt.com
permian.capital
pioneercodershiringhub.com
ossia.pochittoo.com
www.pokyciai.eu
api.pagamento.portosegurofaz.com.br
qenaniaccounting.al
www.quarcadvisory.com
portal.quranbook.co.za
www.reduts.fr
dealer-dev.sadhrasya.in
www.sailtothecop.com
dev.samyama.ai
www.shoudian.hk
e2e-school.simflo.in
auth.social-marketing.io
speakez.cloud
spin-vibe.com
splendo.nl
admin.tekken.staq.dev
studiocstsas.it
www.teaddict.net
tgfionline.com.br
tranphu20nam.online
niwa.ttdyce.com
testchat.untangl.com
veierlandhelse.no
www.verifact.co.za
vitthalgroup.in
www.voxbulgar.com
engage.dupagetownship.voyagernetz.us
engage.viauzhpjcccedutaecpy.voyagernetz.us
app.waterflai.ai
www.weslley.dev
demo1.weup.city
portal.whitecoats.com
www.wrander.com
www.zachandmichele.com
Other domains in certificate