Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=terreno.uno
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 21, 2026
Valid Until
October 20, 2026
72 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
EF:93:34:C0:97:A0:13:74:50:C9:5C:45:41:25:5F:1C:7E:76:70:E6:44:56:48:FA:0C:4E:CF:70:D9:C5:85:FE
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.stepbystepcare.qa
a2bwestmids.com
actors.pt
staging.aila.earth
www.alhayathbh.com
andi.coach
anglesoftheglobe.com
data.apap.pl
iwishyouwas.apoop.ooo
dms.aquariusit.com
beautylink.ro
beerfestbuzz.com
docs.hcs.bespokesy.dev
link.billytacos.it
demoretail.bmarken.com
photo.borne-candela.fr
www.brainbytellc.com
www.calendar.studio
callbacks.carto.com
fichajes.cetem.es
www.creambyul.com
nz.creatoradar.com
crispcleansolutions.com
www.cuinuo.icu
www.dirtyskullgames.com
reservation.easoft.pro
edyant.com
learn.examsdaily.in
devapp.finvari.com
www.fkowalski.com
nrep.fossilfree.com
www.gabrielefabbri.dev
gdrinker.com
growtovchani.com
app.gyomy.com
www.handballapp.io
cumin-lapislazuli.harecord-dev.com
acceptance.harecord.com
jonathan.solar
admin.jsmobiledev.com
bo.jug.im
kentinboisson.fr
www.kiokuzan.app
kiratravel.ch
kitemiru.jp
www.kunalbattery.com
landonmiller.dev
leonbeckmann.de
ltw-prod.da.letsdive.io
littlecottagemedicalspa.com
longhornlhltd.com
lsidentalbilling.com
maderasblancaestela.cl
mjdoyle.link
www.mjdoyle.link
data.daq.morgansolar.xyz
www.mumedu.fi
www.muslimbusinesscentral.com
myruma.it
noel.myworkportal.ie
fishfood.onearq.com
auth.pishgoo.show
www.principles.jp
professionalservicesgp.com
presence.pyrite.one
www.rapelseguro.ong.br
www.relative-ci.com
relaymedia.io
rgp-it.com
www.rivivconsulting.com
link.saraya-totalhealth.com
www.schmittding.com
settleup.app
www.shealynhindenlang.com
app-staging.sherlok.fr
app.smartvue.ch
kkos.solerabank.com
quest-ira.solerabank.com
srjjph.com
staging.stoq.shop
admin.t1.stx.world
maps.tepgroup.net
terreno.uno
vagrant.thatcherfamily.org
theaccusations.com
thefuudapp.com
theunitedurban.com
www.threefourteenholdings.com
www.tiotomate.com.br
torewin.com
grey89emenu.triggersplus.com
app.turbosbir.com
do.tutadoo.com
payroll.uripgumulya.com
www.usedautoparts.app
www.vstkonsultacijos.lt
decode.wintu.dev
withaureus.org
yemisijones.com
www.yorgatravel.com
Other domains in certificate