Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=invoices.fatorak.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 06, 2025
Valid Until
January 04, 2026
52 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
15:35:81:17:5E:2B:B8:7C:E2:E3:C7:41:FA:A8:64:4A:D8:BC:B0:F6:3D:F9:C0:6C:08:13:52:91:87:30:F2:A3
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.selyna.gr
feasibility.reflex.28east.co.za
shipfromstore.test.console.ameroservices.dk
centrodeeventos.appsiste.co
text.avatel.us
bambook.app
beta.big-bro.org
www.booleanstate.com
www.briquedosomautomotivo.com.br
www.bubble-buy.com
www.byzzer.ai
catsitters.nyc
test.ceosconnect.com.br
cfprint.app
chinarestaurant-asien.at
www.chochewees.com
subscriptions.cloutlayer.com
co-pak.cz
www.service.acacia.co.th
crawdaddys.co.za
www.daneplusplus.com
www.diemm.com
stg.drelle.org
saudeid.drtis.com.br
beta.earthmap.org
my.edusystem.co.za
stage-wrh-admin.exitest.com
factfilter.biz
test.portal.farmote.com
invoices.fatorak.com
api.staging.fitbykaty.com
fitenment.com
flockletter.com
admin.frec.app
www.furnitise.nl
tntbomb.games235.com
www.gellit.net
growve.tools
bk.harmonicmarkets.com
www.horyca.com
www.humanfactored.com
i2cweb.com
www.imalabc.es
9j5tm.podc.incentable.com
wallet.inin.vn
intellicubix.com
ithubkhammam.com
www.jobmed.co.za
millatravel-sdk.joinsherpa.io
beta.jointherefolution.com
snaps.k3l.io
ketketi.com
kevinbuhmann.dev
survey.koco19-muenchen.de
www.konwencik.pl
lerlang.online
admin.loxamformation.com
transfer.lyraplace.dental
maloha-chinese.nl
matchem.app
mind-engage.mcntech.com
paneel.staging.medapp.nl
dev.app.mindysimagination.com
gb.myraceday.io
nakoleh.com
www.neoncomet.com
niconico.llc
chakra-ui.nitin.world
ohiocaregiving.org
ommbe.com
www.onalapartmani.com
portal-de-vagas.isac.org.br
dev.oslojazz.no
www.physics.land
www.poomchak.com
staging.app.quickview.nz
rfcargenteuil.fr
vidaintegra.rflex.io
rollcallrva.com
samrothfarb.com
frbs.sbermobile.ru
kitchen.scenariocaffe.com
sergioromero.dev
shambhugyawali.com
www.signalfa.com
parent.dev12.skool.sg
www.smartlitic.com
link.stadiumliveapp.com
third-ray.com
sbp.tripwardrobe.com
turkeytimes.org
www.twinsters.me
www.tylercutler.com
uniquekaranjit.com
www.veviam.com
voxzogo-friends.jp
wishworlds.us
admin.mediasite.wowdesk.jp
yashanand.dev
www.yazool.se
Other domains in certificate