77/100 SECURITY SCORE

Certificate Information

Subject
CN=allyvia.co
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 19, 2026
Valid Until
October 17, 2026 73 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
8F:1C:59:B9:1C:F8:F6:E5:9C:22:C0:BC:AE:15:57:BD:AD:46:FB:42:3C:41:32:5D:60:95:47:4A:67:A2:B1:6E
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
admin.gym-tech.co.kr

Other domains in certificate

go.51.ca
staged.ad5creative.com
aistakingbank.com
docs.akademiasamouka.pl
allyvia.co
hakochu.ambii.com
www.angeloconstantinou.com
lister.angora.se
annaostberg.se
www.appdisplay.co.uk
arbmarble.com
www.arvindjangir.com
ccl.atrux.ro
kowai.autoarticles.net
www.avanifarmfresh.in
msg.awccom.com
www.bartreauconstructionllc.com
ai.bina4all.com
www.bluepixel.games
trebol.builker.xyz
auth.call-4-me.com
www.casmium.com
smashdex.chaseholdren.com
auth.irori.ciderlabs.link
www.classinit.com
admin.cloudnova-solution.com
www.clubnetworth.com
connerludlow.com
dansroofing208.com
admission.dme.edu.mm
auth.doctable.online
bondicarpentry.dotconstruct.com
edumatrix.id.vn
envynails-vabeach.com
eximproltd.com
five28hertz.com
sovx.frontterrain.com
gaiapupella.com
www.generation-eiffel-bm.fr
www.georgelbs.com
www.gjosh.in
www.harleybrito.dev
heatcompass.com
test.hr-ms.com
app.hyperseed.com
idealindesign.com
interiormotivesla.com
www.ipdandp.com
www.jaksanapong.com
japy.jp
jmbshipping.in
kherem.com
kosherbid.com
www.kraftlayer.com
kready.life
youthpeak.kro.kr
www.kryptolage.de
l1deres.site
lian-clean.com
madengineers.co.in
mecbookshop.web.lk
mintedreceipts.com
mogswamp.com
resume.muniuday.com
app.mysmartstaff.co.za
nalolabs.com www.nalolabs.com
www.niklaspirnay.com
transcribe.novare-orbis.com
novibakes.novistack.in
www.npcglobal.co.kr
integration-testing.beta.numerous.cloud
app.paragoncodeworks.com
cardwizard.peterursem.com
www.pieterseassociates.com
pinaashartjewellery.com
pouncecatgame.com
pressurelogic.com
profera.in
quidvid.com
raku-sika.com
randivoo.ma
rojinem.my.id
zenreader.rojins.in
www.rosebrand.in
seafoodsexpress.ph
daftarkelas.sekolahhub.web.id
selahpath.com
shepherdclass.co.ke
www.sjcb.co.th
soloire.kr
sudutruang.id
order.swipe-order.com
xride.techas.co
app.thetapinupes.org
tiyastouch.com
topmetricgroup.com
dashboard.trainr.club
udcofertasgen.ddns.net