Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=tlgyo.org
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 17, 2025
Valid Until
March 17, 2026
70 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
62:3E:3D:96:3D:BD:D3:73:62:14:3D:B3:32:62:73:70:D6:06:5B:8F:16:74:EA:94:AE:69:A6:0D:B3:1B:38:3A
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.piratemods.com
ablakszerviz-gyor.hu
www.ablakszerviz-gyor.hu
resume.daniel.alvarado.pro
www.apaitsolutions.de
arvadev.com
dashboard.auto-planeta.pl
app.banyan.eco
bgcatalog.app
manager.blumswear.ro
www.caribematch.com
www.changanmazatlan.com.mx
relatorio.chappy.com.br
status.clerkhound.com
star-lifelong.co.kr
camlicalilarturnuva.com.tr
www.masterkuafor.com.tr
www.concuror.com
einvoice.cortiqa.in
rfq.csdtenders.co.za
www.currykababindianbistro.com
cybersecurity-ai.eu
www.cybersecurity-ai.eu
modules.davidsepulveda.xyz
www.deminsy.com
www.dikshavalah.in
anniversaire.lucie.dufleit.fr
www.emfocofotografia.com.br
tienda.erodistribuciones.com
farzadcheshk.com
featprint.com
foprex.com
rferreira.freeddns.org
frontend-specialisten.dk
app.fxnotes.com
ruota.gd.si
gotravelshow.online
www.growthsutra.in
admin.hatalabo.cloud
i-told-you-so.dk
app.immigration-check.de
interaktiven-angliyski.bg
www.isomorphx.com
www.jollyfamilyfoundation.org
junkai.rest
www.junkai.rest
www.kantasoft.co.jp
kentcottagenuwaraeliya.com
www.kingdom.watch
labotechnica.cz
dive-apps.da.letsdive.io
lgaraje.ma
lingtime.pl
painel-dev.mobilizei.com.br
bookingsystem.modulealpha.com
mirar.informacion.my.id
mymishn.app
www.mymishn.app
logistics.nanoguntechnology.com
www.logistics.nanoguntechnology.com
www.neppri.com
www.nubina.ro
formularz.onesies.pl
www.peruzza.si
pettipettimirissa.com
ll-trainer.pirotech.fr
www.plasticulture-project.com
qupiu.com
qushxonaa.uz
salem.rainbowsdroptaxi.com
www.realitky.online
www.restinpg.com
app.savart.com
www.sawag.net
app.shiftpilot.co.uk
staging.insightly-archive.shuttersup.co.uk
simpfo.com
portal.soilslytics.com
weddingbells.sourishmukherjee.com
www.speakingathome.pt
waterbodies-dashboard.spo.show
dev.spot-sentry.com
stichtingnoworries.nl
dev.straggle.me
dashboard.tailorai.tw
terhivanska.fi
www.terhivanska.fi
bloom.thamescatalyst.com
thesbtools.com
tlgyo.org
admin.tophuntertech.io
sys.u90min.com
vyno.onl
webstudioexpress.xyz
w300.whazonk.com
www.qa.wisdomschema.com
worklyst.ee
staging-portal.yurtle.co.uk
santiago.z01.be
zegaaneindelijktrouwen.nl
Other domains in certificate