77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.sjaalumindo.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 25, 2026
Valid Until
January 23, 2027 88 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
76:8A:DA:C8:D8:2D:0E:0B:D3:3A:5C:FC:4B:6E:5B:BF:E9:1C:F6:A0:D3:68:06:D0:CB:37:82:86:AC:77:4A:23
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
www.technostar-solutions.com

Other domains in certificate

www.akagi-nature.com
akepb.com
www.albahub.es
axnrelay.com
bahaydevelopments.co.uk
mzdy.bcwizards.cz
www.bdbhukuk.com
boltconsultancy.io
borderpaid.com www.borderpaid.com
bugrahizal.com
buki.com.ng www.buki.com.ng
cabcab.in
www.cockroachapp.in
app.consix.it
auth.costafirmacollection.com
csidypcet.in
danumaindra.my.id
datameans.com.br
daywalker.top
admin-portal.staging.hasselt.delcom.nl
dilimba.com www.dilimba.com
drbajajorthoclinic.com
dreystudio.ng
www.dungeon-mobile.com
erfolgberaters.in
www.feelioo.me
flaudio.online
vps-reboot.flyer.tel
www.greenenergysolarsystem.com
grooming-mimos.de
hylidi.id
c69.intermarina.org
www.ipricer.it
juliette.click
conowegowchirurgii.kaliware.io
www.karukulab.com
kingjayylordd.com
knwldg.info
koltepatildeveloper.co.in
cardcore.korevra.com
kutuphaneyonetim.com
lacomo.lol
landman.store www.landman.store
learnwhole.in
levincouleaflo.com
mercury-booking.com www.mercury-booking.com
michelinipericias.com.br
mineralogyskin.com www.mineralogyskin.com
moerstrinkttee.de
moorki.ch
mp3pro.site
beta.mvpex.io
my.nemosa.app
nopeak.co.jp
nyaypath-forensic-science.in
oooclub.sk
www.oreedo.sa
alpha.pandaintel.app
parimargin.com
prep.pataki.tech
perseverisys.buzz
phintel.partners
www.potfactory.kr
invoiceanalyzer.productstory.dev
reconilyas.net
rezoa.net
www.rntengenharia.com.br
www.robertoperez.es
roeikisous.com
admin.serenityknots.com
seyvinholidays.com www.seyvinholidays.com
shatachandrashield.xyz
www.sjaalumindo.com
cocinabarcelona.socoda.com.co
sportlaan.in
takoh.co.kr
auth.tchadgpt.com
manager.check.teachme.jp operator.check.teachme.jp
trungkienlogistics.vn
tryproposalpro.com
typetab.dev
v-taxflow.cloud
vicktaar.com
weisse-elfen-badhonnef.de www.weisse-elfen-badhonnef.de
swagui.wemade.dev
pharmawize.wize.health
www.xbook.com.au xbook.com.au
www.yunamind.net
zenapp.org