77/100 SECURITY SCORE

Certificate Information

Subject
CN=adagostino.ca
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 08, 2025
Valid Until
January 07, 2026 42 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C4:C8:F5:93:5A:41:B5:58:10:95:71:C6:09:90:8F:A5:15:89:79:C9:8E:EE:1F:73:77:5A:B0:63:E2:54:A6:28
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
www.master-strike.com

Other domains in certificate

www.sign.1nightrent.com.au
adagostino.ca
www.add.vc
alex.maresefonseca.adv.br
benjamin.aghaeipour.co.uk
plst.alweiz.info
appslytic.com
baraxis.net
beachquartersdaytona.com
coin.bizanalyst.in
www.blaginki.bg
score.bluewhale.team
www.brunswicker.com
bzcm.nl
www.carson.lol
download.cat4school.de
e.chocopython.org
cloono.io
cloudarchitect.id
compact.components-usa.com
www.danielherbert.ca
datejacob.com
wms.digitalrocketship.net
mobile.doct.online
app.fathomocean.com
www.fgasesoresdeempresas.com.ar
wlfd-admin.firepermit.online
gdkz.foodle.su
fttbsa.co.za
weldpro.funkyfresh.no
admin-dashboard.futuralabs.io
auth.ipm.geopointer.com.br
getcheckly.com
decrignis.gocad.de
www.godspeed-studios.com
golfpad.events
guardianssmc.com.br
www.gurutu.in
www.en.frame.hallobon.nl
www.harsharora.in
heladerialachicharra.uy
hippiesarentreal.com
app.hirescholars.com
ignitechannel.org
ilker-h.com
community.infrasmart.co.za
kaistreeter.net
www.kataah.online
www.kevinzaki.com
youpose.ktrips.net
lateralley.com
lboap.com
loihitech.com
ben.marquetteadventure.com
office.mavenwave.com
app.mdzeyara.com
enrolment.mmcdevops.com
mohitkumar.net
munsonwatersolutions.com
tek-test-1-link.mytemple.in
form.nativeforms.com
naveenyanamadala.com
neverland.finance
nglcila.com
zestec.nocoenergy.co.uk
clients.optimal-ascenseurs.fr
www.ozarkglade.com
www.pandoralive.jp
parts-are-us.eu
www.paygohealthcare.com
hrm.playgame.ae
landing-staging588.podkite.com
www.poolscorer.com
postmaker.io
findingourway.prolongedgrief.com
bariz.order.pulp.eu
www.qudo.me
t.rideplus.in
oficial-develop.rogeriossantos.com.br
www.ronniestours.com
sanctuarystore.co.nz
watch.dev1.screencastify.com
sigaba.io
recommendation.sizey.ai
strapassonpilates.com.br
swipeeapp.com
www.tehran.de
www.tellthepet.com
www.tensogramming.com
trakefy.in
link.triphop.com
tripsplit.in
org.trynexa.com
admin.exchange.uniqgift.com
viancom.net
www.weebsitestudio.com
admin.zenithsolutions.tech
ziofoods.co.za
ecosystem.zksync.io