77/100 SECURITY SCORE

Certificate Information

Subject
CN=rating-g.dev-ltl-xpo.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 04, 2025
Valid Until
March 04, 2026 88 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F1:EB:F3:85:03:63:70:FE:4C:AB:44:55:7D:E7:F7:30:CD:F7:39:57:3A:82:75:C9:9D:78:1E:44:7A:15:75:3C
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
www.teamkronos.io

Other domains in certificate

drivesim.604robotics.com
xeroc.7tam.net
ie.foresight.adgile.media
www.audit.af-belgium.be
app.alalamifs.com
app.amphamo.com
antoinemistico.com
www.apme.io
www.appareleasesolutions.com
www.arnisdale.org
askalora.ai
dev.awa.re
bisqr.babysleep.com
www.bravo6.io
brucefalcocarpentry.com www.brucefalcocarpentry.com
celestelu.com
www.ceremonybells.in
chamera.pl
fw.chervo.com
www.clickitpoker.com
confidentalcare.co.in
www.spacefarm.co.kr
cohenin.com
dash-kyc-staging.globalbridgeconnections.com.py
referral.fastpay.com.tw
www.constructioneye.com.au
www.cxucoaching.com
data-depth.com
deutschtrustbank.com
rating-g.dev-ltl-xpo.com
www.die-information.eu
dinosaurcoasttrackguide.com.au
dodagarcia.com
web.dunati.com
demo.edventures.xyz
energiatehokkuussopimukset2008-2016.fi
www.fahrrad-zehdenick.de
cat-animations.fraffrog.it
freshprojects.net
garantwork.com
wifis.getroost.com
www.gosvay.com
greatpretender.jp
www.guestgenie.com
www.haryanabottling.com
app.ibsdays.com
org.inspiresight.com
refer.iwarranty.co
ul.kenh14.vn
kikashi.online
www.korahbabuvarghese.in
www.lifecircles.hu
share.lightplay.app
maimu.online
www.mallia.salon
www.maquicorp.com.br
www.marketingpuebla.com
mindscript.ai
www.mjinno.com
test.modellr.io
devdashboard.movingshortly.com
open.mozaik-app.com
neuroplay.fi
poo.npiapps.com
nutimi.com
oink.gg
museumrvio.orpheo.cloud
my.ouicard.co
adequo.paescasanova.com.br
coaster.pearpartner.com
primarydoctormedjournal.org
api.docs.qchero.com
www.rambirtech.com
dsar.redacted.ai
rhudetel.rhude.com
referral.ridebelay.com
www.rsti.eu
tours.sancochero.com
merchant.setoko-test.com
admin.skillspace.uk
smilesavenuedental.ca
go.solidgroup.ru
sondadrenqueretaro.com
steffis-hueddn.de
www.studentsvoice.co
wruaccess.swapp.work
tavernx.com
links.thahab.com
theglowup.app
theosiscoin.com
links.thevellaapp.com
www.truckersbuddy.net
ey-familiestatuut.trustedaccountant.nl
tyinlab.com
www.venleycapital.co
auth.wanderprime.com
wingsof-hope.com
app.yeddabook.com