Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=yulingo.app
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 09, 2025
Valid Until
March 09, 2026
88 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
25:55:93:BE:2C:6B:47:3C:46:0F:59:18:4A:EE:40:A9:E7:BD:9F:F0:AA:E8:8F:23:7A:88:97:7E:17:21:85:2E
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
ahldn.org
app.4kweeks.com
dyn-links-uat.accelior.com
intento.ap1.com.br
www.awqati.org
barenderasmus.com
bashcreator.net
www.beansbybeans.com
brother-digital.com
centuriapicena.it
spm.cesargalicia.dev
www.cirasee.com
www.clevercorners.com
www.classifyme.co.ke
www.cofemacaqueta.com
thetamburger.com.tr
account.brightschool.com.ua
spiel.conexionberlin.com
daysi-alimso.crconsultorescolombia.com
app.prep.deliversense.com
devinireland.com
drishyam.org
h2solucoesemsaude.drtis.com.br
www.ductulator.com
elsazondemitierra.site
www.emergenssi.fi
www.enlinje.se
entertainingminds.co.uk
www.experify.io
portaldev.ezclo.net
fingam.ai
auth.fit18.com
www.fivetastes.ca
geagency.com
lebotaniste.getsquarefare.com
gmsdms.com
hanustransport.cz
www.hanustransport.cz
healthtree.org
3yearplan.heartland.edu
hidroteklatino.com
hiphopandcode.com
homespotai.com
honto.com.au
hopperparts.com
www.ic-reader.com
ichef-co.com
inhalerschart.com
canon.inhalt.dk
irontemplarrecovery.com
student-kpl-stage-2.ischoolconnect.com
www.isonetwork.ir
jooon.xyz
klubsoft.com
testauth.koong.world
app.kubilang.it
liquidgov.org
tapthedifference.lotum.com
michaellemke.info
static.firebase.milkice.me
www.monadone.com
moulding-solutions.in
www.mtc.cc
it-school.murich.info
mxmummery.xyz
nakulkundra.com
nanointerfacegroup.com
napstjaertgaard.com
v1.nelkit.dev
link.neolight.live
www.netgrids.com
ninekd.co.uk
www.ohalloran.dev
admin.commit.outreach-dev.com
pandemiccondition.com
www.pippaspan.com
game.prestes.com
hq.prima.golf
feedback.raiderarts.net
web.rosivhub.com
sakasa.jp
salaoday.com.br
santosconsultor.com.br
seanjohn.de
www-dev.sokontokoro-factory.net
midi-sans-frontieres.squarepusher.net
www.taraleemason.com
www.tcwindowtint.com
www.thagomizer.com
www.thebuddypatch.com
theduncans.family
ixigo.visa2fly.com
virudhunagar.vishnutaxi.com
wanderingcastle.net
admin.wareclouds.app
watetenwevanavond.app
whiskybuddy.app
test.manager.woonig.app
www.wrandlv.com
yulingo.app
Other domains in certificate