Open Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=t-zero.ro
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 25, 2025
Valid Until
December 24, 2025 39 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
27:D7:D4:89:C8:76:C2:AA:33:23:CF:2D:C7:1B:68:B4:36:CC:1B:24:66:92:64:E0:3E:84:7D:98:E3:65:9D:EF
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
www.mork.pm

Other domains in certificate

ayt.aboutyou.com
accessibilityedge.com
app-v2.aiii.ai keynote.aiii.ai msdtaiwan.aiii.ai sakura-water.aiii.ai
t.alz.life
lclp-sokol.arianee.net
www.atadtakaritas.hu
activate.beetek.net
www.bekbakes.com.au
bepublic.online
bit-k.com
boostpreschool.com
partner-development.boxnow.bg
buildthemountain.com
web-test.chippercash.com
safety-uat.chatbot.cic.hk
pos.acceptance.ecr.cm.com
web.matsang.co.kr
cavusbobinaj.com.tr
changelog.coophi.com future.coophi.com
costcopharmacy.ca
city-parking.cox2m.com staging-hydra.cox2m.com staging-smart-security.cox2m.com
craigbrogle.xyz
rafvertizing.crazygames.com
link.creyou.com
about.dev-crazygames.be
app.digitopayoficial.com.br hml-admin.digitopayoficial.com.br hml-app.digitopayoficial.com.br
portfolio.dopee.io
www.easycrypto.ai
ecoinscan.ecoe.vn
moviedb.ekal.se
ereservas.com.ar
www.evgsistema.com.br
facilisimo.rs
design.fastwork.co
university.fetch.ai
food2seat.com
forkcast.enterprises
gamesheet.app webhooks.gamesheet.app
geniusimg.com www.geniusimg.com
nicmar1.headstart.biz
helveticascenario.dev
meeting.danghoangthanh.id.vn
lifeplus.in.net
instaresume.io
boka.jarvaveckan.se
www.jimhalewijn.com
demo-parking.junkielabs.in
koshka.app
www.kreaplace.dk
vsg.kro.kr
legislaturacongresonacionalhn.com
campaigns.lemon.casino
admin.listingloop.com.au advertise.listingloop.com.au
firecamp.loreal.io
www.madmaxatl.com
dl.myfatoorah.com
mvmobile-staging.myvenue.com mvmobile.myvenue.com
courtside.gleague.nba.com
peace.net.ua
preview.newledger.io
nexl.ink
klaver.nsbp.dk
newprofiling.penhaligons.com
www.pointfood.com.br
proclaimomega.org
www.registeratggssc.com
beta.robertvandenborn.nl
robwilliamsxd.com
www.roguesupplyco.com
schessa.com
calculator.senhasegura.com
widget12.shiftboolean.com widget13.shiftboolean.com
showchampions.com
www.spacedevice.io
bodasegoviagalvez.swanmoments.lat
synexit.com
t-zero.ro
www.tatviv.com
thefab.co
thekindlyapp.com
trinch.ca
chat.tychron.app
tykks.com
benwoman.vetrina.com.br
www.winners-ai.com
www.yunfei.li