Open Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=event.pixito.cz
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 15, 2025
Valid Until
January 13, 2026 58 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
95:ED:A0:49:04:33:3C:82:0A:52:05:20:8C:11:E6:7B:FF:AC:90:9A:82:70:85:A2:DF:B3:B8:1E:DD:7F:8F:5F
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
wrappedreviews.com

Other domains in certificate

www.10xsoftware.com
www.3sheavenhomes.com
a-invest-i.com
api.aihomeshopping.com
stage-umsjon.alfred.is
proapp.angieslist.com
auth.annview.com
anycitytime.com
www.arik.sydney
app.basma.live
volleyballbundesligatest.deeplinks.bfansports.com
biocomunidad-avicola.com.ar
search.blur.live
www.booket.co
www.cairorose.co.uk
dev.open.cardiosignal.com
carinhoanimalpetshop.com.br
concierge.chargerslux.com
www.chennaibookingmamalla.com
www.chillwithbomchi.com
surya-manage.classet.in
savviro.co.in
pneumoniadetection.roshanaryal.com.np
conalyz.com
culeus.se
www.demmel.be
events.destinyliferc.org
api.dev.tube
concursoinfantil.developia.info
www.difcsstar.my
erp.digitriatech.com
mdm.dotworld.tech
d.dth4.com
eceinceoglu.com
escoladefoto.com.br
ethos.city
experiencias.vip
nda.fairshare.tech
faviator.xyz
www.fetch-ai.network
file83.xyz
www.hart-ltd.com
crossfit.hdavila.ca
hoivomedical.com
howbetech.com
iasim.xyz
app.intuitiverse.ai
blog.jfarrow.co.za
www.jmrehabclinic.ca
mm.jono-rams.work proj-mgmt.jono-rams.work
kevinstoner.me
life-story-vault.com
lojacasanatal.com.br
recipes.makbox.co.uk
www.marketinsightai.com
mattpull.me
evaluer.mazdademagog.com
medprime.medihelp.co.za
play.staging.numberhive.mightybyte.us
musicboxplus.com
admin.nextorder.us
www.nhadat.win
www.nikanikopourfoundation.org
app.noterightnow.com
teknohama.or.tz
app.pangu.win
www.perdue.me
www.pflegebildungsinstitut.com
event.pixito.cz
pushstack.io
www.reconstruyendoxochimilco.org
routeroute.org
saigon-unicorns.com
www.samanthonymcgrail.com
sayandas.com
external.scalenda.com
app.schedfolio.com
slay.semanticlayer.io specs.semanticlayer.io
www.serminca.com.ar
colniza.bioponto.sistemasnemesis.com.br
courier.spreeloop.com
stateis.xyz
strive.company
amberleaf.studiossolution.com
www.tapflare.com
app.thenewsintwos.com
thinbase.com
uhtcrypto.com
beta.recollection.ukon.dev
admin.vaboo.co.uk
www.vrize.io
www.watchnews.org
billing.wonderschool.dev
xebridge.com
yog-dev.yds.org
mjdb.yosi.work
youtubesummary.pro