94/100 SECURITY SCORE

Certificate Information

Subject
CN=aimico.ai
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 10, 2026
Valid Until
October 08, 2026 58 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
DB:1D:8D:C8:0F:47:96:CA:C2:D6:50:31:36:9E:E9:D6:B0:BD:1E:50:63:84:89:9A:B1:CF:83:A0:C2:D5:B4:2F
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains
Content-Security-Policy
Good
default-src; script-src; style-src; +6 more Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Present
accelerometer=(), autoplay=(), camera=(); +6 more
Recommendations
  • Consider adding 'preload' to HSTS for maximum security
  • Strengthen CSP by removing 'unsafe-eval'

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
admin.staging.enimas.co.jp

Other domains in certificate

home.adroitcloud.online
aimico.ai
aithreads.net
www.aptimithra.com
app.arapp.one
arriveorigin.com
astrofarts.in
app.ayavn.us
staging.backupfire.dev
bibliothe.ca
www.biculounge.com
blades.bookshelf.press
burrito-station.de
beta.buzznbuild.in
www.bycatandmill.com
staging.cakecost.net
casablancasfood.com
clubifasport.com
codeforged.com
cokluhaber.info
contextfound.com
crunchy-app.com
currys.co
dataprimegh.com
day-scheduler.ca
dismotormais.com.br
doggineda.se
www.drmcgoey.org
easiestbudget.com
www.elcajonhistory.org
slides.finaya.tech
franklinarauj.com.br
www.fregocoffee.com
www.fridayknightgames.com
gmrtech.us
goalsrush.live
app.teamsync.gt.tc
hauntable.top
www.haushub.com.br
frigg.henther.no
homevue.io
app.innojin.co.jp
link.izi.health
blog.javabien.net
www.kanji.rocks
kontaktkampen.kontaktdagarna.se
www.kubenba.com
logis.technology
gabriel-lanches.lupi.delivery
maisonmayaki.tg
auth.modvc.org
mountainviewgroupllc.com
auth.dyndns.newlineproperty.pt
www.norang.kr
obrol.my.id
app.onarvel.ee
stage.app.ownhome.com
ph2.io
promesaspatrias.com
www.psycheatlas.org
www.ratingg.com.mx
realtimedata.ai
rtl-staging.recruiting-solutions.org
www.ripspy.com
rivnile.com
www.sajon.com.np
previewer.sammiandtheo.com
www.saywhere.net
auth.scan360.in
app.seens.io
www.servicecenterhyderabad.co.in
goldloancalc.smartswintechnology.com
socialscanner.in
app.speaknoaccents.com
spintaxi.se
www.stepuplabs.io
bambinvazio.tamasszarvas.me
welcome-to.techbookfest.org
workflow.techbrens.com
thealexandria.co
thegeocommunity.com www.thegeocommunity.com
multiplatform-template.titanium.productions
www.titanteo.com
land.toss-online.com
app.tradealike.com
trax.sg
cryptoweb.tuawebmobile.com
components.tullyapp.com
www.turniq.in
u2a.games
umidjonarslonov.uz
vendaservice.com.br
sam.white.engineer
www.wordydoo.com
xtract.website
www.yammyjoy.com
www.zainroot.com
zraya.com