Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=testez-lexcellence.fr
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 03, 2026
Valid Until
November 01, 2026
72 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
3E:9B:48:09:C0:09:B5:54:98:A6:4E:ED:D8:39:B3:45:5C:44:FE:82:BC:BF:D5:DA:EC:A0:34:EF:06:C0:07:56
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
ajsmartshift.store
admin.acdoctor.in
staging.anfragen.additive-apps.eu
app.agribankemobilebanking.vn
alterside.io
alublack.uk
www.angiogram.me
asistentecongre.com
lauf.asv-leichtathletik.eu
navale.atkelman.com
notebooks.autolight.io
axioprep.com
www.axioprep.com
platform.bdata.ca
bloomt.org
www.bloomt.org
www.fiyatlistesi.cetinportal.com
www.chaille.fr
clearpointsmessaging.com
www.closeby.one
codeforgeacademy.net
policy.colavo.kr
comehungry.in
covanchontruong.com
cursuswebsite.nl
dkrosalesservice.com
drgayathrishomoeopathy.com
www.earthemail.org
technoserve.easysignage.app
dizisaarthi.egyaanhub.in
diziudaan.egyaanhub.in
futurepath.essentialx.us
icompare-web-staging.f5.works
app.fleeety.in
fleeety.in
www.ghstrans.buzz
www.ott.grpconecta.com.br
www.guru-caterer.com
www.healthaid.lk
humaninterest.shop
panel.klab.inclub.world
qa.iotdataroom.com
www.jiuguo.buzz
smjcalc.joshuamr.com.br
www.kmsolucoessolar.com.br
link.kok-heijkamp.nl
plus.kraftmusic.co.kr
reg1.lotoclub.io
www.macnevin.com.au
make-up.io
www.make-up.io
www.mesopora.com
metaia.in
tailor.metaia.in
ptc.mpesd.org
ibmedia.mptclive.in
www.mwcreations.dev
www.myacademypartnerfranchise.com
plexqo.nerqon.in
nickalgarcia.com
www.nnelevator.pk
novusy.se
www.occiplast.co
sample.olapagos.com
antepartners.outrun.work
ap.outrun.work
photocore.pro
www.receitasvocreuza.com.br
sbg-os.com
www.sbninspections.com
www.sevisacorretoradeseguros.com.br
sidetrackedstudio.com
www.slycarrot.com
smartlist.online
plant.smithnet.dk
www.springsofwisdomhighschool.com
sslan.shop
www.stacksens.com
www.stombaershoeve.be
ta90.si
www.ta90.si
countrystatecity.tansuasici.com
mdzen.tansuasici.com
www.tekticx.com
telefonsex24.at
www.teoricoconducir.com
testez-lexcellence.fr
www.tocan.com.br
www.tota90.si
transgenerationnel-oleron.fr
www.ucartstore.xyz
urge18.com
vayahvikas.org
vein.network
caroustills.vemoyo.com.au
pinball.vikramtiwari.com
microchat.weblative.dev
www.whip-up.com
www.wuselperium.de
share.yaska.me
Other domains in certificate