77/100 SECURITY SCORE

Certificate Information

Subject
CN=dev.stryvesport.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 27, 2025
Valid Until
February 25, 2026 89 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
4E:D4:49:4A:13:5D:66:2F:F9:C0:2F:C0:A3:F7:A0:14:0A:5C:13:5A:49:00:3F:D2:73:28:7C:B3:C7:6F:F1:27
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
affirmaflow.sanviapps.com catculator.sanviapps.com

Other domains in certificate

www.aarogyahealthorganisation.com
sta.phuket.psu.ac.th
www.accurantgroup.com
www.aitechnologies.nl
alericdlafarmaceutow.pl
zorgapp.anderzorg.nl
aztecshields.net
babyapp.brainfitstudio.com
shrigirirajminerals.co.in
on.coffideas.com
dilishoponline.com
no7.enogu-no6.com
esnault-virey.fr
beta.dynamic.handsomeapp.com
harzer-waldkarte.de
hawkrealtyandinfra.com
d-meter.hidroconta.com
hmaprotax.com
share.hodl.mobi
links.homelyenergy.com
tolalla.hormigos.com
retencaoacademica.ibcea.com.br
im-aquib.online
www.beta.teams.insiteapp.co.uk
vm-manager.iob.ch
www.ivellegames.com
jacode.org
www.jamesaduncan.com
adbc.janamora.com
klaire.app
www.lab3apps.com
jobs.laney-apass.org
orbit.staging1.learningsuite.at
oldphysician.lifemd.com
ottofire.longdo.com
www.losfattoquotidiano.it
lycanfiction.com
apcs.mamklearn.com
midnas.shop
www.miku.online
www.minjeaseo.com
marketplace.mitraqsr.com
applink-training.mobeforlife.com
aplp.msgcoe.info
amazing-nails-spa-atlanta.mybestsalons.com
qa.mydevlink.com
n7cloud.com
nairio.com
itahari.nepaldrivinglicense.site
www.nextloop.sg
nomesx.eu
nomu.app
qc.nostics.com
www.ollies.com.br
omnimanager.com
order.orderbuddy.net.au
owl-ina.com
www.papitasmochileras.com
patrimonisonservera.cat
redirect.pelavo.pl
wine-staging.piazza.ninja
playcourtpiece.com
test-sites.plusclass-sports-incubation.co.jp
pokerfishhook.com
www.progettoorfanilagovittoria.com
typi.promirage.com
prosperai.tech
www.regulars.win
riskeeper.eu
www.rsmotorsudi.com.br
rumagro.com
firebase.sarankon.dev
app.sayform.com
scalei.com.br
www.seatplanner.de
auth.sessionhub.app
shreeganpathistone.com
sketchx.in
snapsave.work
soul-bloom.org
soulmarket.tech
sfr-business.speakylink.com
event.stephanziehl.de
dev.stryvesport.com
legal.studdybuddy.app
tazertazer.fr
trasteosgomezgomez.com
zakelijk.urbancollect.app
usautopartsdirect.org www.usautopartsdirect.org
usedautopartsusa.org www.usedautopartsusa.org
vibralgo.com
wizqwiz.app
th.workspace.training
writercopilot.app
xiarooftopbistro.com
zamspk.com