Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=opac.smbtecampus.org
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 05, 2025
Valid Until
February 03, 2026
81 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
82:09:3C:BF:27:17:EF:C9:07:BE:02:F2:71:FC:1A:D4:D5:D5:A0:47:2D:D6:EC:F2:01:48:E3:40:38:05:CF:73
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
voicetyping.xyz
adwokat-wagiel.pl
www.aplog.tech
attasec.com
passageiro.ayoapp.com.br
beamsacademy.online
auth.briskula.si
www.bronova.no
buyable.us
beta.parents.c360.org
cahane.co.uk
www.cambridgeschool.in
cemariahelena.com.br
www.cemariahelena.com.br
glvcd.com.clian.net
www.torogarden.com.ng
www.creativetherapy.app
staging.dashrecon.com
dataobs.dataauchan.fr
dhaakadcinema.com
eastgatehotel.rw
easthavenjohnscreek.org
www.easthavenjohnscreek.org
ebano.ch
ekomatik.edu.pl
familyunityhub.com
lnk.flickin.app
vendors.galerisenibrunei.org
siteengg.te.gogpsgo.com
greensleevesproject.uk
hykiralama.guzelbahcecicek.com
pwa.harris-world.kr
app.healthyswimmer.app
nguyetphambaohiem.id.vn
wlz-dev.intellicare.nl
link-leung-king.jec-digital.com
kaicars.com
mangaph.com
www.mavroupasonline.com.br
www.maximalsoftware.com
melzamazingcakes.com
miketysonjakepaulfight.com
oven.mindkitchen.co
www.mobilewareinc.com
app.moe.team
auth.mplsart.com
musicofgoldmine.com
cgb.myeasyfarm.com
portal.myteacherdan.com
invite.nayan.co
mog.nempos.delivery
newgenlearning.co.uk
www.nsawinski.ru
vehicles.oakwoodfriends.org
olallipuff.com
skedsmo-betong.ordreplan.no
historian.organizemed.com
www.partytimepics.com
pascalis.app
dispersa.polipay.mx
ads-player.pontuax.com.br
pristinemaintenance.us
www.proofolio.com
qloudworx.com
ionicerp.quicksave2u.com
quodly.com
www.rajaganesan.com
ranger.remy.mx
www.revoltronx.com
batman.rocola.es
www.safetycape.com
sagis.my
www.saivatikadaman.com
www.samasalon.com
www.santoempresario.com
app.scoreholio.com
sentencearchitect.com
www.sentencearchitect.com
admin.shemesh.info
www.moje-master.siepomaga.pl
ebusiness.smbtecampus.org
opac.smbtecampus.org
smym1.com
www.sqoffs.com
stature-ai.com
www.stockmarketpredictorai.com
www.suredocs.ie
lanzamientospaceplus.swan.lat
demo.swappro.io
www.technity.dev
tempo.systems
www.theriversouth.com
www.treebear.tech
uscasolutions.com
www.vale-rosa.com
wallenex.ltd
wellnesscafe.net
app.whocame.in
yusufsiregar.com
zembaba.com
Other domains in certificate