89/100 SECURITY SCORE

Certificate Information

Subject
CN=www.marketing.cytech.com.br
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 11, 2026
Valid Until
December 10, 2026 86 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
70:2B:41:A2:85:5F:96:64:08:7B:43:4F:E0:20:0C:95:90:27:FD:BF:06:2B:A7:BC:6F:99:00:26:24:82:22:F8
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Basic
default-src; script-src; style-src; +5 more Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
www.sharpieiq.com

Other domains in certificate

www.abnermarcelocorretor.com.br
tremulo.alexconstantino.com
altonpetcare.co.uk
www.arrie.me
www.ascona.cr
store.ashyaat.com
auth.bksta.com
delete-account.bozoraka.com
www.browsenodes.com
app.cognizance.vision
links.costao.com.br
csfrequency.com
www.marketing.cytech.com.br
dansplab.com
www.sppl.decoderesolvency.com
defneangin.design
www.derwandi.ae
dlorders.com.br
www.dobra-nabidka.cz
experience-fashion.com
www.famteam.app
fewnessofthesaved.com
www.ff-frotzersricht.de
fietskluis-app.nl
funfitoasis.lat
gestu.dev
goexploring.xyz www.goexploring.xyz
www.gracemeet.com
salasanat.gse.fi
www.guevarafam.net
d-meter-tudela-de-duero.hidroconta.com
www.hopaxi.com
www.hotdogempire.com
www.imagekitchen.app
app.imobiliarialink.com.br
editor.inboxious.com
www.inciprocal.com
app.inlearn.co.za
itcaba.com
j-vogt.com
dashboard.jlrspace.com
dev.johnshortland.com
www.adventcalendar.joshid.co.uk
dino.kanavbhowmick.com
katlehomotloung.com
kumkumstudio.com
aisearch.kwlifestylehomes.com
pay.leex.com.br
www.lesliepan.com
app.librumarcanum.com
valentine.mewtru.com
marathon-challenge.mherren.ch
www.mobility-consulting.net
www.multinow-games.com
www.murraywlee.com
pic-eeag.mentor-stage.neccton.com
foda.nextbyn.com
www.novamarbleandgranite.com.au
www.observantmusic.com
okie.au
link.ownuapp.com
reception.parklandssportsclub.org
www.pesantrenibis.com
trace.purejoyhoney.com
pvgplumbing.com
quienganoeldebate.com
renasnce.com
rippleandroll.com
www.robochimp.in
satlm.dev
shreemotorscompany.com
www.shubhambutle.com
simuly.it
siterapidohoje.com.br
beam-qa.skykit.com
legos.smbcircus.com
api.splitit-fs.com
stapto.com
www.stareintothevoid.com
tct.ebot.stedu.vn
www.admin.echo.strategicinsights.co.za
swipe-up-to-play.com
auth.tabnine.com
thepeachyplanner.com
thesoundofai.com
tlb-college.com
beta.tripkindle.com
www.underdogmobilewelding.com
unnamed.ai
useheartbeat.com
vfdesir.com
vicoustic.uk
voxzilla.live
www.jobable.winresponse.io
www.xlsandblasting.com
yatradroptaxi.com
www.yidahaguirre.co.uk
apoiador.yupistudios.com