Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=david-zohar.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 23, 2025
Valid Until
March 23, 2026
88 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
11:ED:C1:55:22:51:A5:0E:4B:C0:6C:F0:37:00:2E:35:65:4C:CD:5D:3B:E4:CC:98:72:F8:6A:63:84:8C:C8:71
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
admin.axomrefurbisher.com
aisportwatch.de
production.aplano.de
lms.auribises.com
username-generator.branhill.com
partidos.bryanalvarado.com
report.trackimoplus.bycopilot.com
www.calvinconover.com
cardabel.com
www.celestcap.com
chakram-solution.in
chekiprice.com
get.churni.io
co-modo.it
nurturewellness.co.in
mobileshare.pinarsu.com.tr
staging.countdowndays.date
auth.auditboard.cyberhaven.io
k.daasa.in
david-zohar.com
drivinginstructorlady.co.uk
www.drsanchezcomedy.com
quality.duelapay.com
proveedores-dev.el-jumillano.com.ar
work.elevationai.com
fabianojmoura.com
myadmin.fidly.io
book.finni.health
flikbox.app
dev.admin.flowby.io
flyzook.in
foodieshare.us
garageratscarclub.com
auth.getdebatable.com
teack.globalcarecenter.co.uk
www.govetery.com
www.hellogoodbye.digital
heneng.no
www.highridge.app
dynamic-link.dev.testing3.huvrdata.dev
idevelop.business
www.iedpuusa.org
miles.imapapps.com
impressia.hu
sumitscience.indiandevelopers.org
indiefinder.uk
www.influenceprofessional.com
sms.intalko.id
jasoncarvalho.io
www.kaluya.de
dev-app.kraaft.co
kvi2.se
dashboard-staging.lefty.io
testdom-dev.lfv.jp
look-at-the-sky.com
maiaindia.com
poke-calc.maripi.net
mastersaccountshub.com
metarational.net
nd.gt
apicetec.net.br
blog.ojisan.io
www.omkardroptaxi.in
bingo.otobou.com
firebase.passwordlastic.fr
www.pecel1gyerek.hu
www.phoneboothprivacy.com
links.raidsrc.me
www.rajatvishwakarma.com
www.realtradeinc.com
reibbwportal.com
www.shadowflips.com
www.shawinfosolutions.com
www.sideboard.app
sj-wholesale.co.uk
jacklinksscratch.sqwadhq.com
sutterhomescratch.sqwadhq.com
www.sugarhero.world
swapnice.com
auth.synaptograph.com
taylorandalex.com
app.teamelmers.com
www.teomir.ro
thesmilesurvey.com
checkin.thursdayhq.com
tickerterm.com
afrikaans.toddlerflashcards.com
tradoglobal.co
uh-balam.com
simulator.unipla.app
unomoney.in
app.visualdataflow.io
www.vrouwenrijschoolgroningen.nl
webmirror.online
whoisrocket.com
wisehackr.com
video-rooms.worksup.com
travelb2b.xmltravelgate.com
my.zaplify.com
webapp.zatobox.com
Other domains in certificate