77/100 SECURITY SCORE

Certificate Information

Subject
CN=app.ojp4danube.eu
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 27, 2025
Valid Until
January 25, 2026 49 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
8F:36:8B:4E:D1:A6:B5:EB:73:9C:21:7E:82:49:BC:A9:8C:3E:31:EE:D4:95:D1:D9:25:89:3A:9E:20:3D:3B:4F
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
www.ivanalexander.com.mx

Other domains in certificate

www.14p9.com
mural-embedded.42nd.co
www.aaautoinsurancecfl.com
prod.console.adae.app
www.adamaintenanceservicesltd.ca
als.ie
www.alsservicestation.com
alta-velocidad.com
gcp.amoralez.com
app.arcapharma.com
autoselmolino.com
handstargame.deeplinks.bfansports.com
studio.bitgroovy.com
market3.bonusgroups.ru
app.breyta.io
gcp-us-east1-06.dev.app.carto.com
link.monfood.co.kr
oneexam-dev.oneclass.com.tw
www.containcorpgame.com
www.cyberjournal.app
www.dalhousiekennels.ca
web.app.darulfatwa.se
www.del-rosal.com
uds.dev-ltl-xpo.com
ezdata.devcoreapps.com
app.eardleyco.com
eb-construction.com
stag.invite.ecoe.vn
eldecoproperty.com
erikbue.com
www.ethereumba.com
devlive-innovation.everest.io
with.fanmily.jp
finhay-dev.finhay.vn
makingof.aeonofstrife.florisschippers.nl
vademecum.ftapps.com
functory.co.jp
genaiworldassociation.com
www.gvav-utilities.com
appointment.dev.hairtect.jp
jecwidget.headstart.biz
www.iachara.com
saigonsportsclubhrm1.impactwrap.com
app.imsooks.com
glg.in.ua
serhii-yana.invito.link
links.istegelsin.com
jegytix.com
joelriley.com
johannarode.com
kindalizard.com
korean-typing.com
korean.im
legalaidhelpline.org
nhs.limbic.ai
looksmaxaipro.com
lululiu.xyz
www.manuel-schmidt.biz
mattcrain.com
staging.mmrecycling.com
morzetech.com
moonspay.mymoons.cl
preprod.nextsong.live
nouramusic.com
app.ojp4danube.eu
testing.oliveplus.cl
omoexplore.com
patiofarm.me
pcvillarrica.cl
phoncex.com
auth.pimpedia.nl
repdemo.processshop.com
profile-maker.com
projectzomer.nl
shapiro-builder.pyxal.io
api-docs.quoteninja.com
www.qwesto.nl
repeteai.com
rethinkworkflow.com
selfsurvey.roadzen.ai
rufneksalumni.com
schocke.ch
bot.sciencecafe.cz
screenshotflow.com
shellyinterchem.com
privacy.shintaisousa.com
www.skiclick.com
software-engineering-books.com
something-delicious.com
sphverse.com
mushroom.tallyfor.com
www.tarotdoautoconhecimento.com
www.thepowercourses.com
tickar.com.ar
timporter.tech
tinalackner.at
auth.umbi.co
www.wonnyapps.co
awesome.youngcapital.nl