77/100 SECURITY SCORE

Certificate Information

Subject
CN=alejandro.reinoza.net
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 18, 2026
Valid Until
October 16, 2026 52 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
7D:26:D2:D1:8C:CB:0F:8C:EF:83:08:74:CE:AE:F5:58:4B:84:9D:42:FA:22:BE:C4:95:BA:8E:2B:44:7D:91:70
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
www.appozitive.com

Other domains in certificate

auth.1architectexam.com
3d-map.ru
domos.4bytes.in
vyaparahita.acornnest.com
www.agate.lv
aghabogados.es
dev.agucare.cl
ameforge.tech
ameyshindegroup.com
staging.aryadesigns.co.in
www.atailoredlife.org
www.bitsinmotion.de
www.blueheronstays.com
borsetti.cn
bramsinke.nl
v5.broxel.com
caladongroup.com
caloriedeficitcalculator.co
capfence.dev
catpat.fr
www.croesusworks.com
internal.prep.deliversense.com
share.deltaradio.de
desde-la-raiz.com www.desde-la-raiz.com
eggvenabyggtjanst.se
ai.empoweredacademy.in
fitiroom.com
www.fmahub.com
us-link.gipl.io
rudark.gptt.my
www.hudsonrha.com
review.informacion.my.id
inimatic.com
inva.com.br
islesage.buzz www.islesage.buzz
jarm.ph
judithpiano.co.uk
admin.justforhearts.org
keeb.info
kindredcousins.com
www.kkqueen.com
creatorkit.kreativevilla.in
www.leivaycia.com
www.linfieldinternational.com
littleplanet.studio
www.maakbib.be
minzaar.in
www.muwarehouse.com
portfolio.njaped.no
www.novastep.ai
optikk.in
degania.oz-tms.com
www.packraftmongolia.com
pahal.net
www.peace.net.ua
link.perpranzo.it
www.pl4za.com
www.polipay.io
plus-portrait.potore.photo
admin.poultrybaba.com
www.primepubservice.in
readherstory.com
alejandro.reinoza.net
losleones.rflex.io
ricettiamoci.it
robosparks.in
rside.app
fullscreen.satoutesla.tech
login.schoolvolunteers.online
shuistyle.co.uk
console.skillrhino.com
dyn.splitsies.net
ssgasset.co.kr
www.stackology.com
steddie.nl
stickercon.in
toolkit.supertone.ai
game.sushilapublicschool.com
www.tasidou.com
techempresa.com
techempresa.com.br
www.thecryptomasters.com
thrifteddrip.in
admin.tisanz.com
www.tomas-lesniak.de
twoweeks.club
vastscent.lol www.vastscent.lol
vastsource.autos www.vastsource.autos
demo.velocitytalent.com
vinedev.io
dev.wemove4uandstorage.co.uk
go.wing.co
connection.wowtalk.jp
www.zhouyuyun.com
zouwu.hair