77/100 SECURITY SCORE

Certificate Information

Subject
CN=hpacs.co.uk
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 17, 2025
Valid Until
March 17, 2026 81 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
1A:7C:94:23:5E:48:D9:05:03:83:FC:FB:B7:93:90:47:AD:F0:AB:41:72:A1:FC:53:CD:79:0C:03:22:2E:DA:FE
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
admin.gwapagt.com

Other domains in certificate

admin.actiwoo.com
alleeco.com
portal.allergymapdx.com
realcast.anbi-reception.jp
apelgrim.com
billowpeople.com
at-staging.brut.live
admin.chorusclass.com
citeinsight.com
cmdesarrollo.com.mx
consultants.foht.co.ke
lnk.test.dodocart.co.kr
guide.tufee.codedbypatel.com
www.coffeeandcodingpod.com
cripasitoapasito.com
crispoo-catering.crispnow.com
www.dalpontesrls.com
damatoelectricidad.com
www.danieldevapp.com
shared.deeplatform.rocks
douleva.se
ericlo.dev
fingerbible.com
app.finsharia.com
microsoft-ideacloud.forgedx.com
franzrichter.de
www.friendstechworld.com
generateinvoiceongo.com
zoom-deauth.gmelius.io
greenshiftbiofuels.com
securedpayment.hawkridgesys.com
api-staging.helpboardapp.com
store.hifz.com
hpacs.co.uk
app.imobiliariapindense.com.br
instapixy.com
iwin.inwine.com
www.iyuto.com
joseef.com
auth.lahtube.com
ledgrify.com
literalcoder.com
www.loanmesoft.com
ikoverk-lounge-mobile-staging.logicwind.co
nachhilfe.lsv-ooe.at
applinksstg.lulumea.com
app.treemerge.madebyenzo.com
cloud.makrshakr.com
site.meritu.co
meylertech.com
app.misterfanta.it
homol-backoffice.mulherespositivas.com.br
www.myaramark.eu
myflowmeter.co.uk
emr.ophelia.com
orionn.mx
www.painpointmedical.com
www.refund.parkyypass.com
pasttensedraw.com
web.preprod.paymytable.com
app.personate.ai
admin.race.phuket.run reg.phuket.run
qwengineering.com
r1.miami
www.reacttouch.com
restateprops.com
inventory.dev.safetyinminutes.ca
www.saodev.com
savvygenies.com
schooladvisorbr.com.br
redemptions.seriousmd.com
violet.preview.shortwave-staging.com
smncproperties.com
fbcf1.dev.squadle.com
stonicvpn.com
sugampharma.com
szabonorbert.me
tank.homes
tezsure.com
thedemonwholaughs.com
vasireddy.thefamilytree.ca
thejuansandoval.com
tsgsmarttechnologies.com
www.tuanhuyenwedding.info
dialer.uideal.dev
unaviolaalpolonord.it
auth.google.urbanplay.com.br
mitratelv3.vertikaliti.com
vickeyapps.com
vishesh.dev
www.vr.world
www.weddingtails.com
wisetro.com
www.wmammogram.com
wonderingwillis.com
yala.cloud
yelowbox.com
zeewords.com