Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=sis.oakwoodfriends.org
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 11, 2026
Valid Until
November 09, 2026 53 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
04:34:F7:05:69:54:24:43:FA:2B:E7:65:9C:C4:9F:F0:FD:43:84:69:BB:72:28:2C:2B:6A:B6:05:DB:C1:08:5C
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
aazstore.com

Other domains in certificate

abeishere.dev
tmchd2d-dev.aduro.hr
www.aightbetnow.com
allcoatfinishing.com
alphascreative.com
alexa.appsforschools.co.uk
asianbox.mn
asmusibai.pt
assert.co.nz
portal.staging.athena.com
www.bambook.app
betweenarockandspace.com
brickandclick.tech
bstool.info
www.calc-it.se
aramarkcz.cateringportal.io
app.charkoal.ai
chicagojets2014.com
cxm360.in
dev.ro.dispoprod360.dataauchan.fr
www.developcode.co.za
sam.eventworks.in
www.ezj.tw
ingeotun.forja.cc
www.foxar.fr
futureisnear.me
gazzstudios.com
getdots.io
app.gopetey.co.uk
greetings-now.com
fluxocaixa.h2flow.com.br
hikers.social
www.hitechglazier.co.th
www.insideskeleton.com
usask.ipec.app
isupportfarmer.com
honeyrush.jetcodelabs.com
jpolymers.com
dev.jwashopfitting.co.uk
kahma247truganina.com.au
kenyshitoryukaratedoindia.in
www.koshigi.xyz
auth.ksbtech.com.ng
grupounicco-performance.lernit.app
logistry.io
alpha.fraction.lunarworks.co.uk
pinsightauth.lykdat.com
www.maxkeyner.nl
admin.metronworldgroup.com
mobmote.link
morokwood.com
mtyinvisiblegrills.in
www.mymanaged.site
nardi-mure.ca
nardi-mure.com
nuguu.org
sis.oakwoodfriends.org
openfeedback.io
app.origemimoveis.com.br
orthomax.com.ua
www.playproductions.co.uk
app.poskee.com
prestemonos.app
prismecoran.com
www.readaily.app
auth.rebop.io
www.roundmountainretreat.com
www.saleogy.com
salvoo.app
sariq-bola-pizza.uz
saumyamohapatra.in
delivery.selflane.com
www.shopreal.app
aanpakbijplaatsingen.dispatchx.skialabs.com
snipio.de
permis.spaq.com
dashboard.squeakyleads.com
sumanbhadra.fun
tablenotes.net
takei-maquinas.com.br
apps.thefoodfellas.co.uk
thegrowthmap.com
theonecleaning.com.au
thinktanc.co.uk
tomsayshi.biz
topofthehouse.co.uk
trasloco.biz
www.treadtransportation.com
ulabetahdoli.com
www.vakantiewoningburgers.nl
vanago.app
vertexmath.ca
www.view-bme.com
www.vscript.com
qrshow.wtweb.net
ooty.yatradroptaxi.com trichy.yatradroptaxi.com
track.yonnaforex.co.uk
me.zwanedev.co.za