Open
Cached
·
just now
80/100
SECURITY SCORE
Certificate Information
Subject
CN=dashform.fabiorodriguesdesign.com.br
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 11, 2025
Valid Until
January 09, 2026
54 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
1B:9D:0D:15:1D:A1:FB:20:CF:92:88:0F:4D:53:6A:E1:BA:3A:A4:67:58:70:EE:98:96:94:A1:BE:EF:A9:6E:0D
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
Wildcard CAs
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • You have authorized 6 CAs - consider limiting to only the CAs you actively use
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
Subject Alternative Names
100 domains
www.jdtpoly.com
stage.web.5f.app
www.a2tradingworks.com
school.acceede.com
www.adogan.nl
aiplatmarket.com
cyberpapa.alerti.pro
www.alexandrasmau.com
www.alidado.com
amazon.anhonestobserver.com
www.ankur.pro
apollo-trifo.com
builder.applow.com
archangelministeringhealthandfitness.com
www.archangelministeringhealthandfitness.com
www.armon.ai
template.azekkani.com
baomove.com
bearandharecrafts.co.uk
www.becasdeportivasusa.com
go.boltzpro.com
www.bonnaud-estates.com
www.bootspruefung.online
api.borneoapp.com
bazaar-dweb.bukalapak.design
calligraphy.org
oz.campbelldancers.com
cardji.com
www.catalizalab.com
cetofresh.com
classboat.com
loadmanager.clearpathtms.com
clienttrackyr.ca
short.cloudbit.in
t.ganapp.co.il
crbrvsraphive.com
assets.cybertrolls.online
dannymonroy.com
digital-dance.club
dmdstudio.org
admin.dreamedconsulting.com
driveclear.app
dyecopperpipeclassaction.com
app.e-bon.md
smartretail.easysignage.app
epicproportionstour.com
www.eregisterexpress.com
dashform.fabiorodriguesdesign.com.br
app.fasterforward.se
fattoura.com
app.fillthatwallet.com
www.foon.club
fores814.com
hooks-prod.freetrade.io
fuerteventurabio.com
admin-v2.funeats.app
funframesbooth.com
mobile.global66.com
godeso.com
gogem.art
www.gratereaux.net
gratereaux.org
grwth.io
hightusk.com
www.phanminhvuong.id.vn
fb.iopen.co.za
lifetrails.ai
dev.limeboard.link
www.luistrigo.com.ar
staging-race.mas.run
metzcode.dev
miracl.co.uk
morganville.org
www.namer.ai
neighborless.io
live.nside.io
viewer.nuagedx.com
misaa.org.in
timetable.rohan.org.in
paxpush.com
www.pixel9protraining.de
revolgy.co.uk
sajgroup.co.za
app.saleswidget.ru
seconddynamics.net
prodtveyes.service-unicepta.de
stemgevoel.nl
admin.swasthafarm.com
dashboard.techqueto.com
scanner.dev.testevisual.com.br
cms.thiagoshoes.nl
tonhozi.com.br
admin.tulpie.app
corp.vanglar.com
www.enterprise.velauto.com.br
www.vestico.co
suchasniy-dvir.vn.ua
www.wordzleextreme.com
app.yoloedu.ai
www.zamnademy.com
Other domains in certificate