Open Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=ipp-demo.klarway.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 25, 2025
Valid Until
December 24, 2025 40 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
0B:A2:F1:B1:93:D3:84:53:31:3F:C4:35:9D:6A:09:11:E3:C2:41:02:1E:67:20:6B:C9:2B:26:44:11:95:2D:B8
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
aginix.tech

Other domains in certificate

tecnos.app.1on1navi.com
allsteel-scene-config-cert.3dcloud.io
app.ataca.io
www.atodorov.me
www.ayanengenharia.com.br
www.belgefest.by
vtecarenet.bioassist.eu
www.cel.ink
class.me
joinville.cliquefood.com.br
memorialday2022.ynet.co.il
app.ktaxi.com.ec
go.crdhub.dev
www.csfrequency.com
api.cybercake.net
davidquinta.tech
www.dennismeltser.com
djjuliobeat.site
www.downhomeviews.com
earnzilla.site
easyebikes.co.uk
css.ebrana.cz
sierrahub-living.equiem.mobi
domivest.felixxgroep.nl
firewizard.io
focusdrivingtheory.co.uk
julien.foratier.net
clientes.gabriellmdev.com
gokko-ar.com
tsuri.hageee.net
www.helperstudent.com
www.hogg.io
editor.iawriter.com
idearqs.com
get.instameal.in
www.jackjoynson.co.uk
www.jasonleehodges.io
www.javabien.net
www.business.joinbreakthru.com
www.joininbound.com
tsv.ju.studio
www.kanakapalli.in
www.kitap.one
ipp-demo.klarway.com
kpidash.io
laforja.com.ar
leeeennyy.stream
cah-prod.da.letsdive.io
www.liftsearch.co.za
app.livingtheory.in
login-with.link
mail-spinner.com
mcgoeydermatology.net
mrd25.me
devfest2020.mscc.mu
mymoneymatters.co.za
tools.netdrive.co.nz
admin.nuuphealth.com
office-sagawa.com
www.oohbabe.in
www.podologie-riegelsberg.de
links.consulting.progrit.work
fgvtn.quantumrfid.com
ngx-breadcrumb.ranout.xyz
2048game.rapid-sender.com
my-staging.rebalancetech.com
recoverwith.us
www.registr-dluzniku-k-nahlednuti-zdarma.cz
app.reverseproxy.sh
medicossanatorioaleman.rflex.io
www.ripwallet.io
openpersona.sakaar.dev
www.skitoy.com
webauthn.sld.codes
app.sociilaw.com
kader.sportklettern.nrw
intrest.spried.com
www.studio-mn.com
www.swga.golf
www.synrg.life
techplusmalaysia.com
www.thepunkanimator.xyz
thetutorhub.online
threemuses.co.uk
webinte.thumbify.de
beta.totoconnect.co.uk
dev.tradecheetah.com
www.tridentbuilders.in
mushrifvillage.valk360.com
vmacri.com
vusic.in
tennis.wid.la
withgcp.io
documentation.wizishop.com
dbank.xlntapps.com
www.yobibit.nl
www.yourholme.com
youtube-picks.com
client-app.zeminet.com