Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=leszczynski.me
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 14, 2026
Valid Until
December 13, 2026
89 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
98:F8:1D:A1:7A:E5:72:0C:92:63:6C:08:25:23:F0:59:39:31:A8:46:EA:DE:6B:E2:59:C9:B3:DE:A6:0B:A1:62
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
1stnlast.com
www.acookies.com
admirenutra.com
gucci-beauty.adoratorio.studio
gucci-bloom.adoratorio.studio
www.aionforgelabs.com
alanreklamajansi.com.tr
www.alyssonsilva.dev
amorito.dev
arvoan.com
avatarnova.com
bchapps.com
journal.bkkflynnsta.com
yulispatientportal.bluejeansbilling.com
carrotcontentstudio.com
dev.recruitment.carv.com
chrishatch.dev
cjproservices.com
clubistasbet.com
coffee83plus.com
dailywhisk.app
delicateso.ru
auth.demo-set.live
dongba.lat
ellyokinyo.com
enmodotaichi.com
my.euroloppet.com
evyo.be
bodas.flexiviajes.com
app.goqonda.io
www.guhe.lat
hctech.autos
hedeffit.com
hexus.dev
ichinotour.jp
indiasalt.com
www.indiasalt.com
test.picking-capacity.ingka.com
isle.news
ivanugorich.com
www.ivanugorich.com
www.jcg.dev
josephbooker.com
takip.kenetcatiizmir.com.tr
kerkuscorredores.com.bo
www.knownow.lol
kokororacing.co.za
koobiq.io
leibovic.com
leszczynski.me
listbake.com
mailyhub.com
www.marketlobo24.com.ar
safaricraft.mashoke.com
www.memphistigerscamps.com
mwm-meble.pl
mymediledger.com
pic-betsafeontario.mentor-na.neccton.com
newn.co
nicusandnemeses.com
orkestra-app.com
oss.onl
pahirannepal.com
assetmix.partnerhub.co.za
accounts.peanutbrittlepress.com
peanutbrittlepress.com
peterbox.com.br
www.pickandchewz.com
pivotguardx.com
totem.playasdecapdepera.com
www.plumgrace.autos
www.quanthall.com
ayuda.rappi.com
vocuscx.ratemycx.com
rinjani-parahita.com
romskyslovnik.online
royaltrust.lat
admin.sel.vn
www.setupguru.shop
skeattur.com
www.help.smokeless.world
www.softwingdynamics.com
www.squiggol.com
stacksmartpoker.com
tatamatkabazaar.com
stage.register.tijoree.money
tlakeranch.com
tribified.com
unafactura.com
www.usuallyhungry.com
veilwise.academy
vingrecoimports.com
voiceshiftia.com
vuvio.app
wagevoyager.com
app.econ.dev.int.weeswares.com
whilesoftware.com
wietsevenema.eu
wooord.xyz
zymdev.com
Other domains in certificate