Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=talent.staging.castingapp.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 30, 2025
Valid Until
February 28, 2026
89 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F5:D3:AD:63:82:DF:24:FB:D6:40:06:9F:D9:E1:CE:F9:DC:5D:AE:53:C9:73:8C:C2:84:63:44:7F:64:AE:B2:3C
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
aaraveyecare.in
www.a-c.app
americanrevolutionexpo.com
www.araari.com
online.arattupuzhapathisserildevi.com
atlascrm.avisi-apps.com
www.bharathiassociates.com
www.bitsindia.in
talent.staging.castingapp.com
aitutor-dev.cloudpssolutions.com
lowcars.co.in
propexso.com.de
grupo-cruz.posweb.com.do
roquiz.com.ro
manage.edti.com.tw
datafolio.net
debttothedivine.app
develophy.com
dj-analyzer.de
auth.dpdp.design
electronicscalculator.co.uk
www.backend.ellieerp.com
fastid.link
franshenwinetours.co.za
mobile.froged.com
www.gabrielbastosdesign.com
haircutease.in
henrikschoenfelder.de
www.ilagautam.com
dynlink.inisa.id
innovatrixtech.com
intricsolves.com
www.isuweightclub.com
seeapp-booking.itsmarawi.com
www.jungletak.com
www.kelbswap.com
kiesjekerst.online
leertraject.kogeka.be
byu.koryhutchison.com
retailer.laguinda.app
lapizzeriadublancfour.com
logtecnico.com.br
www.louisedepa.com
www.maheshd.com
www.mangozpevnik.cz
www.mariafernandatembra.com.br
www.metitate.art
panel.mezcanautic.com
www.miingames.com
userguide.miracl.cloud
resume.morrell.dev
app.moxom-ye.com
track.narenjo.com
www.neilpathare.com
www.nimbletill.com
admin.one-evenement.com
test.onemagicschool.com
ontheroadagain.app
business.opinry.com
orthopathway.com
palooza.io
potentiia.com
potries2031.com
consumer.propps.com
r.pythontherightway.com
app.qipeo.fr
realmeasurements.ca
www.registatus.com
ridegofr.com
rlmcdn.net
rtevrest.com
sandhillsartisan.com
www.seazonrightz.com
sendpoll.com
shahir.dev
shivashaiva.com
skymatetechnologies.com
www.speechutility.com
games-admin.sqwadhq.com
live.staage.com
www.starstartx.com
subansiriecocamp.com
alarms.tapacenterdev.com
tersytel.com
theluvhut.com
www.theluvhut.com
tigerreally.com
bakery.traktrok.com
www.trueboo.app
viperlogix.com
wellkomp.com
www.wgweichengarments.com
digital-showroom.whiteelements.com
wombatbarn.com
womenhealthfrequencies.com
www.xlsahi.ai
zenify.dev
zerotogans.com
blog.zfanw.com
www.zirconadvance.com
Other domains in certificate