SSL Verification Bypassed
The server's SSL certificate could not be verified. The analysis was completed using insecure mode. Data may be less reliable.
Reason:
Expired Certificate - the server's certificate has expired
Open
Cached
·
just now
62/100
SECURITY SCORE
Certificate Information
Subject
CN=securesign.fi
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 17, 2025
Valid Until
October 15, 2025
Expired
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
39:6B:EC:D0:D3:43:1D:3D:A3:05:AA:2E:F1:7A:76:A8:62:80:8E:7E:29:78:DD:ED:5A:3D:F8:51:E5:C3:FB:3A
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.all-city.co
27studio.com.ar
gasometer.agrimind.com.br
alexandergaribello.com
squareshades-docs.algojaxon.com
www.all-city.app
www.all-city.art
planos.ress.app.br
updatepwd.randstad.ausy.be
azarcchiropractic.com
www.bilindgame.com
tribuds.bindebank.com
coba.soexma.biz.id
www.blackstarlegal.org
www.blackstarlegalservices.com
www.burcak.dev
www.ceromulta.com
www.claria.cloud
srikanthvoonna.co.in
www.anjanaadhikari.com.np
enesans4925.com.tr
transigo.com.tr
www.enesans4925.com.tr
www.connectartist.in
www.cricbolt.com
cyrilformapro.fr
earthstory.app
app.eumplus.kr
app.fairytel.se
gemmer.us
gospodarstwo-rodzinne.pl
admin.staging.auction.holmasto.fi
iabrmv.com
www.iabrmv.com
welcome.igo.football
app.vendor.inf.br
uiic-natcat.inrisk.insure
joincortex.xyz
jomin.ca
kiddolearn.app
www.laconic.kr
www.landruatherapies.com
auth.lifechangersteam.fr
gamers-graphics.lloydborres.com
lucassvahn.se
a.lyppo.click
link.maxi-retail.ru
test.admin.mayais.co.za
memorialetter.com
fb.mokesu.top
mps-services.fr
multiaibot.com
auth.lazackorganisation.my.id
sherly.rizkanur.my.id
naijahustleplug.com
nessasolutions.co.za
swordfish.obrelahellas.gr
a.official-store.in
mindstack.override.com.mx
pdcgsolutions.com
pdqtech.co.za
topblockchaincompanies.stage.pixelplexlabs.com
plancknetwork.com
www.plancknetwork.com
point-speedlogistics.cloud
polaris-k.com
predika.pro
admin.propxplorer.com
www.propxplorer.com
qimora-agency.com
letschat.shequ.qzz.io
renouelement-canva.site
docs.rosepetal.ai
www.scfinance.it
securesign.fi
www.shamstailors.in
silvermed.ch
www.silvermed.ch
smarttracker.online
sstcolombia.com
www.stagiidepractica.ro
structurerealm.com
quiz.talentmath.vn
www.tasmeel.ae
taymo.ma
prates.tec.br
tenpastone.com
terilastech.com
thammuucaqn.cloud
thecloudhosters.com
www.toindonomercado.com.br
turtlewithcrocs.com
verbaloom.com
www.versus-studios.com
gc-02.vibbyfs.web.id
kalkulatorusahatani.web.id
weeshyhima.com
wingcruit.com
www.wingcruit.com
old-ma-rue-yang.youngrean.com
Other domains in certificate