Open Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=talent.staging.castingapp.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 30, 2025
Valid Until
February 28, 2026 89 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F5:D3:AD:63:82:DF:24:FB:D6:40:06:9F:D9:E1:CE:F9:DC:5D:AE:53:C9:73:8C:C2:84:63:44:7F:64:AE:B2:3C
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
aaraveyecare.in

Other domains in certificate

www.a-c.app
americanrevolutionexpo.com
www.araari.com
online.arattupuzhapathisserildevi.com
atlascrm.avisi-apps.com
www.bharathiassociates.com
www.bitsindia.in
talent.staging.castingapp.com
aitutor-dev.cloudpssolutions.com
lowcars.co.in
propexso.com.de
grupo-cruz.posweb.com.do
roquiz.com.ro
manage.edti.com.tw
datafolio.net
debttothedivine.app
develophy.com
dj-analyzer.de
auth.dpdp.design
electronicscalculator.co.uk
www.backend.ellieerp.com
fastid.link
franshenwinetours.co.za
mobile.froged.com
www.gabrielbastosdesign.com
haircutease.in
henrikschoenfelder.de
www.ilagautam.com
dynlink.inisa.id
innovatrixtech.com
intricsolves.com
www.isuweightclub.com
seeapp-booking.itsmarawi.com
www.jungletak.com
www.kelbswap.com
kiesjekerst.online
leertraject.kogeka.be
byu.koryhutchison.com
retailer.laguinda.app
lapizzeriadublancfour.com
logtecnico.com.br
www.louisedepa.com
www.maheshd.com
www.mangozpevnik.cz
www.mariafernandatembra.com.br
www.metitate.art
panel.mezcanautic.com
www.miingames.com
userguide.miracl.cloud
resume.morrell.dev
app.moxom-ye.com
track.narenjo.com
www.neilpathare.com
www.nimbletill.com
admin.one-evenement.com
test.onemagicschool.com
ontheroadagain.app
business.opinry.com
orthopathway.com
palooza.io
potentiia.com
potries2031.com
consumer.propps.com
r.pythontherightway.com
app.qipeo.fr
realmeasurements.ca
www.registatus.com
ridegofr.com
rlmcdn.net
rtevrest.com
sandhillsartisan.com
www.seazonrightz.com
sendpoll.com
shahir.dev
shivashaiva.com
skymatetechnologies.com
www.speechutility.com
games-admin.sqwadhq.com
live.staage.com
www.starstartx.com
subansiriecocamp.com
alarms.tapacenterdev.com
tersytel.com
theluvhut.com www.theluvhut.com
tigerreally.com
bakery.traktrok.com
www.trueboo.app
viperlogix.com
wellkomp.com
www.wgweichengarments.com
digital-showroom.whiteelements.com
wombatbarn.com
womenhealthfrequencies.com
www.xlsahi.ai
zenify.dev
zerotogans.com
blog.zfanw.com
www.zirconadvance.com