Open
Cached
·
just now
88/100
SECURITY SCORE
Certificate Information
Subject
CN=adwords.google.com
Issuer
C=US, O=Google Trust Services, CN=WR2
Valid From
October 13, 2025
Valid Until
January 05, 2026
58 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
45:4D:EF:E5:82:B6:DA:D2:CF:1C:C5:72:A8:F4:6B:B7:1C:F5:B0:1C:C4:E0:C7:DA:73:5E:DB:43:40:19:56:29
Alternative Names
Security Configuration
TLS Protocols
TLS 1.0
TLS 1.1
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
Warnings
- • TLS 1.1 is deprecated and should be disabled
- • TLS 1.0 is deprecated and should be disabled
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31536000
Content-Security-Policy
Basic
script-src; object-src; base-uri; +2 more
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Present
ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
121 domains
ads.google.com
adwords.google.com
frame.ads.google.com
www.ads.google.com
www.adwords.google.com
*.frame.ads.google.com
admob.biz
*.admob.biz
admob.co.nz
*.admob.co.nz
admob.co.uk
*.admob.co.uk
admob.co.za
*.admob.co.za
admob.com
*.admob.com
admob.com.br
*.admob.com.br
admob.com.mx
*.admob.com.mx
admob.de
*.admob.de
admob.dk
*.admob.dk
admob.es
*.admob.es
admob.fi
*.admob.fi
admob.fr
*.admob.fr
admob.gr
*.admob.gr
admob.hk
*.admob.hk
admob.ie
*.admob.ie
admob.in
*.admob.in
admob.it
*.admob.it
admob.jp
*.admob.jp
admob.kr
*.admob.kr
admob.mobi
*.admob.mobi
admob.no
*.admob.no
admob.ph
*.admob.ph
admob.pt
*.admob.pt
admob.sg
*.admob.sg
admob.tw
*.admob.tw
admob.us
*.admob.us
admob.vn
*.admob.vn
adwords.google.co.il
admob.co.in
*.admob.co.in
adwords.google.co.in
admob.co.kr
*.admob.co.kr
adwords.google.co.kr
adwords.google.co.th
adwords.google.co.ve
admob.com.es
*.admob.com.es
admob.com.fr
*.admob.com.fr
adwords.google.com.gr
adwords.google.com.hk
adwords.google.com.ly
adwords.google.com.my
adwords.google.com.ph
adwords.google.com.pk
admob.com.pt
*.admob.com.pt
adwords.google.com.ru
adwords.google.com.sg
adwords.google.com.tr
adwords.google.com.tw
adwords.google.com.ua
adwords.google.com.vn
adwords.google.ae
adwords.google.at
adwords.google.be
adwords.google.ca
adwords.google.ch
adwords.google.cn
adwords.google.co.jp
adwords.google.co.nz
adwords.google.co.uk
adwords.google.co.za
adwords.google.com.ar
adwords.google.com.au
adwords.google.com.br
adwords.google.com.mx
adwords.google.com.pe
adwords.google.cv
adwords.google.cz
adwords.google.de
adwords.google.dk
adwords.google.es
adwords.google.fi
adwords.google.fr
adwords.google.hu
adwords.google.it
adwords.google.lt
adwords.google.lv
adwords.google.nl
adwords.google.no
adwords.google.pl
adwords.google.pt
adwords.google.ro
adwords.google.ru
adwords.google.se
adwords.google.sk
Other domains in certificate