Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=aire-barcelona.lobelia.earth
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 04, 2026
Valid Until
December 03, 2026
86 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
2B:8A:FC:14:5F:65:98:B6:6D:D6:56:F9:95:D5:31:FA:7D:86:7B:69:21:C3:B4:03:15:F8:AC:72:D5:97:61:C0
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.jackcolley.com
365locksmithllc.com
azek-international-cert.3dcloud.io
laz-sectional-test.3dcloud.io
abraservicos.com.br
adendev.tech
auth.aidify.ca
aix.sc
aliontechstudio.com
www.apogya.fr
production.gustav.appculture.com
www.aspireconsultancyservice.com
beeprivacy.com.br
www.bella-surfaces.com
betterlivingquest.com
www.test.builder.bloksapps.com
breezidesign.com
bulljang.com
caneriverroyalties.com
console.cannlytics.com
celinecelines.com
hakushika-classics.cfs-japan.com
cheorse.com
classifyme.co.ke
www.cleareyetest.io
www.colwyn.info
quote.coveredbysage.com
names.creativeusernames.com
www.crickgd.live
app.daveschmitz.org
web-sporter-frontend.production.pa-pime.delcom.nl
googleoauth.dentmatch.co
www.devemg.com
2018.devfest.ch
digital.email
dinoadvisor.com
drdiegobailonpediatra.com
www.drimgar.com
ecodinenw.com
connector.egp.vn
eiffelguide.com
tailorone.elementarycreative.com
dev1.excipient.io
test-app.flusk.ai
www.foxar.xyz
spin.frenziefries.com.np
www.funerariasantacecilia.com
gbhinsurance.buzz
www.genaxai.com
cerebro.global-businesss.com
www.hubryse.com
www.initcorp.co.kr
jenscookhouse.com
karthikkondri.com
demo.kasoft.vn
kaylir.in
tms.kltennisclub.com
aire-barcelona.lobelia.earth
qa.mindyourtax.in
morona-service.com
www.multipathresearch.com
nexoratechh.in
ninjacows.net
ontask.co
www.onursert.com
paperwork360.com
www.paperwork360.com
www.peaklearning.ai
peoplix.eu
perfectzero168.com
admin.popuppush.com
premiercricketacademy.com
preptimeapp.com
backoffice.avvero.qitech.digital
store-front.r222dev.com
renegocieonline.com.br
rgntravel.surf
crm.rightyon.com
www.ritthify.com
roedertravels.com
anexo5clusters.rudigualter.com
app.samuelclinic.com
dev.seanmcquaide.com
seatpsychology.com
seduni.org
sergioolmeda.com
www.menu.shot.ae
www.singithipreschool.lk
www.ssbuffingworks.com
app.structuredpracticejournal.com
studnerd.ai
stage.svar.as
tajiribe.zone
www.thecraftedin.com
www.thrivetec.com
www.trasladodisneylandparis.com
olympics.villadekslet.nl
www.vndts.co.in
www.xskillency.com
www.yksnethesaplama.com.tr
Other domains in certificate