Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=sorobany.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 24, 2026
Valid Until
November 22, 2026 82 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
DA:81:D2:D5:61:7E:E0:DC:2E:88:D6:27:A9:6A:F0:A1:6A:28:6B:5F:1C:6D:5E:A9:28:E4:1C:0E:15:83:46:40
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
xunduan.rest

Other domains in certificate

0wl.io
919app.net
admin.adventuremap.com.au
dev.links.aestheticsmap.com
andesagua.cl
ariansabaghi.com
ascenttg.in
rugby.athlete-era.com
attendancebuddy.in
avrsolutions.dev
app.belote.ayoubsbai.com
www.azartylab.com
mint.babyskulls.io
badarchin.com
balgroup.com.br
blackjackstrategytrainer.com
blld.dev
app.boom-delivery.com
app.bracelitpruebas.es
braidwaterplatform.com
platform.byteed.com
marketing-page-a.staging.cantaio.co.il
www.centralsp.tv.br
design-cert.cityfurniture.com
clinicaidee.com.br
www.codigo369.com
www.colinfrankel.com
corocorogames.com
cosap.bio
www.definitearticlecreative.com
neighborhood.degencoinflip.com
degoudenschaarvilvoorde.be
www.dengti.hair
fasttextil-link.donodoapp.com
dramaterapievavra.cz
ducpdm2400038.id.vn
contract-per-ufficio.duranteufficio.com
textworks.edwardmills.art
www.electricfun.io
www.elevenproducts.com
estatesgo.com
link.feildmaster.com
www.gabin-laigle.com
gepiter.com
ghkeyla.mom
www.gjggreen.buzz
koto.experimental.goodctzn.com
gp-florijani.com
grupozelman.com
habitprompt.com
www.hackslovakia.com
hccoba.com
headlicegame.com
hushlisamiller.com
api-dev.incendi.io
incleon.com
www.innovi.shop
www.iotdeterrent.com
jceventssupplier.com
jhengservices.com
kidiwheelstv.com
kittystore228.com
kmmpalety.pl
libertadorhotel.com.ar
luxphone.hu
mach5-validators.com
www.mammactive.com
manikfernando.com
marker-ink.com
martinruskov.com
www.mohsenizadi.com
novellusventures.com
okanaganwellandpump.com
peedeeef.com
fvv.portfolioview.co.za
qawith.com
rajasalmon.com
realver.com
rondeibert.net
runzey.com
frederickgunn.dashi.sasaki.com
lp-discord.shinsekai-technologies.co.jp
www.sitaiqian.lol
sorobany.com
www.ssrgroup.net.au
stolarstwo-kuczkowicz.pl
www.street-e.com
www.sweetmickymovie.com
www.syndilab.org
talonai.lt
thefirst.in
thepremiumbarbershop.ca
notes.thevv.me
torqmap.com
towerstaxsolutions.com
ulurutickets.com
unshift.jp
valverdefleamarket.com
www.xubisoft.com