Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=allyvia.co
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 19, 2026
Valid Until
October 17, 2026
73 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
8F:1C:59:B9:1C:F8:F6:E5:9C:22:C0:BC:AE:15:57:BD:AD:46:FB:42:3C:41:32:5D:60:95:47:4A:67:A2:B1:6E
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
admin.gym-tech.co.kr
go.51.ca
staged.ad5creative.com
aistakingbank.com
docs.akademiasamouka.pl
allyvia.co
hakochu.ambii.com
www.angeloconstantinou.com
lister.angora.se
annaostberg.se
www.appdisplay.co.uk
arbmarble.com
www.arvindjangir.com
ccl.atrux.ro
kowai.autoarticles.net
www.avanifarmfresh.in
msg.awccom.com
www.bartreauconstructionllc.com
ai.bina4all.com
www.bluepixel.games
trebol.builker.xyz
auth.call-4-me.com
www.casmium.com
smashdex.chaseholdren.com
auth.irori.ciderlabs.link
www.classinit.com
admin.cloudnova-solution.com
www.clubnetworth.com
connerludlow.com
dansroofing208.com
admission.dme.edu.mm
auth.doctable.online
bondicarpentry.dotconstruct.com
edumatrix.id.vn
envynails-vabeach.com
eximproltd.com
five28hertz.com
sovx.frontterrain.com
gaiapupella.com
www.generation-eiffel-bm.fr
www.georgelbs.com
www.gjosh.in
www.harleybrito.dev
heatcompass.com
test.hr-ms.com
app.hyperseed.com
idealindesign.com
interiormotivesla.com
www.ipdandp.com
www.jaksanapong.com
japy.jp
jmbshipping.in
kherem.com
kosherbid.com
www.kraftlayer.com
kready.life
youthpeak.kro.kr
www.kryptolage.de
l1deres.site
lian-clean.com
madengineers.co.in
mecbookshop.web.lk
mintedreceipts.com
mogswamp.com
resume.muniuday.com
app.mysmartstaff.co.za
nalolabs.com
www.nalolabs.com
www.niklaspirnay.com
transcribe.novare-orbis.com
novibakes.novistack.in
www.npcglobal.co.kr
integration-testing.beta.numerous.cloud
app.paragoncodeworks.com
cardwizard.peterursem.com
www.pieterseassociates.com
pinaashartjewellery.com
pouncecatgame.com
pressurelogic.com
profera.in
quidvid.com
raku-sika.com
randivoo.ma
rojinem.my.id
zenreader.rojins.in
www.rosebrand.in
seafoodsexpress.ph
daftarkelas.sekolahhub.web.id
selahpath.com
shepherdclass.co.ke
www.sjcb.co.th
soloire.kr
sudutruang.id
order.swipe-order.com
xride.techas.co
app.thetapinupes.org
tiyastouch.com
topmetricgroup.com
dashboard.trainr.club
udcofertasgen.ddns.net
Other domains in certificate