Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=link.charma.app
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
January 20, 2026
Valid Until
April 20, 2026
87 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
2D:97:63:99:82:58:AA:A8:93:5D:42:78:D8:77:07:B4:90:B2:59:99:24:A9:A6:46:91:5F:F7:77:1E:3E:E8:66
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
adp.redsolver.net
my.activek9.org
allerly.pl
allesopzeggen.nl
www.ameensayegh.com
anarosadesigns.com
www.parents.athlyts.com
beamremotes.com
beatad.io
kaden-old.beckstead.net
bluedotecommerce.org
link.charma.app
www.chossonandkallah.com
www.classboat.com
claymoresafe.ae
meu.preprod.clozzy.com.br
ikidsart.co.kr
coast.ai
codefroggy.com
consulta.live
brewops.contextfound.com
calabogie.corsecontrol.com
cravedin.com
www.cre8bond.com
www.crnimuc.com
workshop.devduck.de
ehaurora.com
tasks.expertify.store
fedonman.com
live.ffcm.es
www.folsomtoydrive.com
catigua.g2canal.com.br
www.geeteeholdings.com
giovanniperrone.it
www.groundtruthai.net
hyperlink.website
app.imobiliariasaomanuel.com.br
festival-staging-radio.insomniac.com
eduard-elya.invito.link
dashboard.demo.jemhr.com
samaroham.jetgermany.org
kevinboekhoff.com
kris-design.dev
kukkaputiikki.fi
www.larac.xyz
liberimap.com
www.lifediary.app
www.lifeplustechinc.com
www.liftsearch.co.za
dashboard.livegigz.com
www.lockbucket.com
logixair.com
logoped.lv
www.smp.lovellebeautyacademy.com
kevyt.luvn.fi
np-staging-web1.lychee.pro
alva-d-admin.m1studio.co
marc.chat
www.marcocamy.it
marixglobal.com
www.matheusmf.com
payments-prod.medschoolprep.com
evaluate.fnb.failte-ireland.mobilitymojo.com
tf.mytc.work
www.navyk.pl
omranperfumes.shop
admin.onelife.vn
www.ouioui.xyz
qa.outreachmantra.com
safedish.platypus.land
playhearts-online.com
www.popmove.com.br
www.pranavgupta.org
rafflers.co.za
razyuvalwedding.com
clinicamaitenes.rflex.io
road-to-worlds.gg
ds-dev.roadraksha.in
www.run4mission.org
www.scanventure.de
sellyourwatchtoday.co.uk
nft.sheplatform.io
ihalebulucu.sigun.dev
msg.skybookdigital.com
geral.gerenciazap.smartmidiasdigitais.com.br
app.smartsecurion.com
www.studiodluxestl.com
brand.tacocat.co
thecorporatecondition.com
www.tranquilityfullspectrumhealth.com
www.trentwclifton.com
marypotter.tumbleweed.jp
simulador.usucampeao.com.br
www.varunonewaytaxi.com
www.vietnamoutlets.com
vitaelight.de
www.vlakemnalhotku.cz
www.vojtechstefek.fun
accesscontrol.whu-event.de
applink.world-family.co.jp
Other domains in certificate