Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=tickets.hypenation.co.zw
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 30, 2025
Valid Until
January 28, 2026
74 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
DD:84:6C:94:AB:58:EE:F8:48:A3:48:D9:B1:04:FA:B0:39:5C:E1:96:61:65:84:4A:D3:0B:38:99:56:D8:ED:43
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
admin.hypenation.co.zw
tickets.hypenation.co.zw
staging.api.cammington.28east.co.za
backoffice.demo.3dlinkweb.com
www.abdurrahman.pk
bestellen.adler-grill.de
allinoy.fi
cybloc.aozwithphil.com
www.baaly.ma
beta.online.543.co.zm
www.beyonddigitalhealth.com
auth.blintzpizza.com
fwdlifesaving18-9registrationform.brsth.com
tecnomax.bytakora.es
www.cestasvitoria.com
www.cheddr.app
puerto36.clau.io
simpplegames.co.kr
jsan.codeite.app
www.colosungs.ar
jk.com.py
fcs-staging.carclub.com.sg
www.yusufte.com.tr
www.cpower.ie
manager.dauntles.io
spaceship-game.denchdev.co.uk
www.digitalscore.io
drzazgadomy.pl
www.ebti.co.uk
www.eetcertifikat.cz
www.estebanguido.com
auth.alvianuxio.eu.org
www.eurociclo.com.br
deepgenin-bot.fadlogic.app
demo.ff-supply.com
ffi-firebase.link.dev.fintechx.digital
geobusters.co.nz
dev-sellwell.gupshup.io
sms.hi-link.com
m.hizuko.com
mofumofu.id.vn
trantuantu.id.vn
timbrage.ifocusit.ch
cora-cr-testing02.input4you.be
frontend.imagesearch.jarrydharris.org
module6project.joranmulderij.com
www.mishka-show.kiev.ua
links.lagoon.live
log.larval.org
modern.lcmcnet.com
www.legiomat.de
www.lerichefort.com
ptracker.manasav.com
www.mapsbooking.com
co.moons.solutions
api.mydygz.com
www.neilautomation.com
m.nhaphangorder.vn
shop.nosh.tech
www.notaiochieri.it
onthigplx.vn
ondemand.oomphwellness.org
otom-8.com
amandalee.demo.pbj.live
www.periopredict.com
www.pope.ai
climata.praksisoslo.org
slimming-marathon.printslon.com
www.produktpass.se
app-qa1.dev.progi.com
konkursy-sandbox.przepisyjoli.com
cr-staging.qualified.io
kyc.queliga.com
app.questls.co.za
card.reachout.ltd
app.remunera2.cl
villejust-2026.rhs-saar-mosel.de
villejust2026.rhs-saar-mosel.de
misteri.sarquella.cloud
storeboard.shoffr.io
lesson.sochool.com
www.solloto.io
interviews.splendidjob.cz
sznobraktar.hu
www.tak-jim-to-rekni.cz
app.teochew.com.au
astrodatacolors.thesimulacrum.xyz
tiemoc.com
hub.trellisgo.com
www.triadnclgbtqcalendar.org
open-dev.upup.se
appstore.venturay.com
vicong.com
woordenboek.vlaamsegebarentaal.be
whaleislands.com
admin.xtrnls.de
www.ycwholesale.co.uk
www.yodaformazione.it
zenship.zenmighty.com
avatar.zwanedev.xyz
Other domains in certificate