Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=key.krinza.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 05, 2025
Valid Until
March 05, 2026
55 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
44:6F:90:3E:F0:24:55:00:79:6C:55:90:40:21:DC:A9:62:A1:5C:36:6F:16:01:42:E8:4F:21:1E:EC:72:4B:2D
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.tarcisioaraujotransportes.com.br
portal.akrivisteam.com
portfolio.alexisgommet.com
share.antennemv.de
ivng.apptget.com
aquaroseirrigation.com
arabianmarineexports.com
qa.arbitral.app
ref.artworxx.hu
rank.avaliei.app
www.bastet-app.com
besideapp.com
bimross.com
bimseas.com
binalbruno.com
www.blessed.by
cms.dev.blushco.io
sonar-analytics.broox.io
www.bugzero.io
www.buzity.com
www.bytesfantastic.com
admin.qa1.castiron.me
www.chonks.nl
comandosvigia.com
adobe-cloud-store.comline.app
business-app.composelector.eu
auth.tp4.cyberhaven.io
dentalreach.app
dercocenterx.cl
digitalnomads.ky
disseminate-foundation.org
fivetribes.duelist.app
www.casacerrada.pucp.edu.pe
www.elcovia.com
webstories.eldiario.es
link.esrwitgoed.nl
intro.estations.vn
fab946.info
indt.fcdev.link
www.backoffice.filtroo.co
flexapp.pl
forreal.dk
www.ifrequencies.com
demo.faculty.inpulse.education
order.instadiner.app
inststoalanko.fi
www.intalko.id
www.jaymeeneedsattention.com
key.krinza.com
welldex-performance.lernit.app
lindwall.info
locotrade.app
www.lotteryno.one
www.lovemoney.com.br
www.luther.ch
www.lvl99.io
lotushighschool.macademy.in
managudi.org
www.mecanizado.com.mx
hi.meow.mov
quark.nishkal.in
noryan.com.mx
forms-dash.staging.nside.io
admin.odiho.com
www.oneiric.fr
aider.paroledevie-orleans.fr
kycupload.payglobal.me
a.phoneduo.app
www.primefitphysio.com
www.bhs.procad.pl
yogurtfactorypolygone.order.pulp.eu
merge.dashboard.qvin.com
rbcschicago.org
www.resende.app
www.retricdreams.com
link-dev.rupiyo.app
www.sangnguyen.net
app.semplicementecomunita.it
www.shareablefarms.com
admin.shipskart.com
skysub.skylar.ai
roubler.smartwage.co.za
call.srvpls.com
recipes.steellabs.io
www.sufera.org
www.svvglobal.com
www.syujinko-lens.com
tigg.app
appschool.tokapp.com
cl.toryburch.com
buddy.trustablee.com
app.uavplus.nl
upwardstudios.com.au
pay.useflash.app
vietmap.live
www.webassembly.ninja
aichat.wooeen.com
analytics.wumbox.com
www.zakariamarref.com
ceat.zolnoi.app
Other domains in certificate