88/100 SECURITY SCORE

Certificate Information

Subject
CN=nextroundweb.xyz
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 25, 2026
Valid Until
November 23, 2026 85 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F3:B8:9C:7C:67:A9:86:D0:05:01:D1:1F:09:7F:6A:3E:B1:26:54:06:8D:FC:CD:8C:37:2D:C0:64:2E:2E:B8:44
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Weak
frame-ancestors Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
no-referrer
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Significantly strengthen CSP directives
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
admin.humanmatch.app

Other domains in certificate

jkj.10xscale.ai
aeiscal.3cket.app
adminjob.app
adminjobs.app
r.advokat-t.no ressurs.advokat-t.no
ressurs.advokatt.no
aimtowing.ca
allthatdanceoh.com
animalidentifier.app
appofweb.com
tm.askcodi.com
automaitify.com
www.avatarcabal.com
bestyear.app
better-together-club.com
bilal.codes
app.dev.boostchinese.com
www.casaqeela.com
cinematheque.app
classford.com
clientreservation.app www.clientreservation.app
cofortis.com
tinkrma.comline.app
pro.daphnee.app
publisher.digestpaper.com
www.dozingcatsoftware.com
ds-i.ch
www.emorywedding.com
ph.eui.app
auth.expertsonline.com
fairylullaby.com.au
bestellen.fattoria-georgsmarienhuette.de
flourishinglab.app
infocms.fortum.com
foxsoftwares.com
galacticloud.com
geeksquadappointment.co
geetakconstructions.com
www.gini.ventures
growwithsown.app
www.independentbuildinganddesign.com
www.industrial-eye.com
japashouse.infinitifood.com.br
prototype.itago.app
show.josecarrizo.com.ar
www.jpi-motiondesign.com
kampar-refill.com
katteryn.com
kinovapartners.com
www.knyhoobih.com
letsyak.com
local718petanque.com
lowkeycode.com
www.maxcramer101.com
hindi.corona.mayamd.ai
buyback.medicalmaterials.com
meetyourbudget.app
www.microfunda.com
www.minneai.com
mivoto.net
nabtacare.online
compliance.nanoleap.co.za coveredmed.nanoleap.co.za
nanoologi.com
stage-crm.nautixsuite.com
nextroundweb.xyz
noroeste.dev
omkarmore.com
paolopietrelli.info
passtheparcel.app
www.patriciojaime.dev
short.pensador.com.br
www.planetsolver.com
pranaessence.co.in
www.prarena.in
api.provedor.app
pnp.sandbox.caas.qitech.app
revworks.dev
rithika.de
scoochparking.com
sendriyasampada.com
sevenioexports.com
sporttagapp.com
stevemasson.co.uk
www.pay.straetus.app
sulavg.com
www.synluma.io
links-testing.tagheuergolf.com
www.thepaintingdoctor307.com
therightclick.org
narvaro.toleredsaik.se
tomduresmith.co.uk
terramotors.track360.net.in
locus.tsukinorun.jp
umc.jo
builder.vbtradeshow.com
gabriel.weeeb.com.br