Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=boky.si
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
April 24, 2026
Valid Until
July 23, 2026 78 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
5D:7D:53:F2:22:F1:74:C0:47:16:1B:62:20:B9:2C:7A:23:78:3A:10:B2:20:55:68:B7:7E:63:3A:70:6F:E6:F4
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
www.stilligo.com

Other domains in certificate

www.adarshrai.com.np
vts.adroitiot.in
ailentis.com www.ailentis.com
www.ajarnjobs.com
artisanai.space
asdriving.ie
www.autodilypm.cz
avant-skincare.co.uk
split.benfaniz.com.br
boky.si
prototyper.bolmgren.com
www.casadecarnesbertotti.com.br
www.cenkayyigit.com
centralservices.com.au
unido.clau.io
weather.codyfactory.eu
link.collegepass.org
company.moscow
platform.corekees.com
www.crownstore.in
did.daekyo.com
www.dailynoteapp.com
pokesync.danielpayet.dev
tirestorage.devinvest.se
camnangspdt.digiinvest.vn
www.djsedrik.de
jueces.ecuestre.digital
sonya.elmizan.com
www.enalink.sa
estherbalboa.com
factorseis.com
fastfoodvigia.site
feple.co.kr
demonstration.brugge.pwa.app.fore-sight.eu
staging.forthrightaccess.com
whoapp.gamalasker.com
giotechshop.online
redirect.glafie.com
www.gsquadverse.com
hadaia.shop
qc.hbmediacloud.tv
hellofish.net
resol-nagoya.b.hotekan.com
lunch.hs-shell.site
hutuch.shop
www.hypermap.co
auth.igo-api.com
auth.imagineproducts.com
www.inentrep.no
innovapharma.com.ar
uiic.inrisk.insure
t2s.insai.tw
jobbot.au
julianwoo.com
keluargasmart.kaffahmedia.web.id
drives.letsgive.org
m.levelupatlife.com
portal.lindio.se
www.lumispower.cl
lunei.se
makemathseasier.com
mcpassport.am
prakritikendra.mitraadi.com
mylodgebuddy.com
mytrucx.com
newagingplatform.co.kr
nookaspace.com
www.nouslegal.com.br
courier.novomercato.ru
www.parama.in
perishtothemuse.com
pixeo.ca
mobile.posify.in
rando-animu.club
www.random-videochat.info
app.reciclonfu.uy
rpaindia.org
runwayrewards.shop
scaniver.se
link-particuliers.par.sg.fr
dubappsignatures.simonherlin.fr
siadik.simpelblg.id
spawn.me
sustainability.work
www.tanktactics.net
webhooks.techguys.io
traffseo.com
ubezpieczenia-krasnik.pl
www.veiyon.com
www.vfx-artisan.com
test.vmay.com
championships.vovinam.digital
vulpesflow.com
www.weedlink.de
staging.weeknotes.app
www.weightlosstrackingbuddy.com
www.withguideboat.com
app.zeekdoc.com