Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=testez-lexcellence.fr
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 03, 2026
Valid Until
November 01, 2026 72 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
3E:9B:48:09:C0:09:B5:54:98:A6:4E:ED:D8:39:B3:45:5C:44:FE:82:BC:BF:D5:DA:EC:A0:34:EF:06:C0:07:56
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
ajsmartshift.store

Other domains in certificate

admin.acdoctor.in
staging.anfragen.additive-apps.eu
app.agribankemobilebanking.vn
alterside.io
alublack.uk
www.angiogram.me
asistentecongre.com
lauf.asv-leichtathletik.eu
navale.atkelman.com
notebooks.autolight.io
axioprep.com www.axioprep.com
platform.bdata.ca
bloomt.org www.bloomt.org
www.fiyatlistesi.cetinportal.com
www.chaille.fr
clearpointsmessaging.com
www.closeby.one
codeforgeacademy.net
policy.colavo.kr
comehungry.in
covanchontruong.com
cursuswebsite.nl
dkrosalesservice.com
drgayathrishomoeopathy.com
www.earthemail.org
technoserve.easysignage.app
dizisaarthi.egyaanhub.in diziudaan.egyaanhub.in
futurepath.essentialx.us
icompare-web-staging.f5.works
app.fleeety.in fleeety.in
www.ghstrans.buzz
www.ott.grpconecta.com.br
www.guru-caterer.com
www.healthaid.lk
humaninterest.shop
panel.klab.inclub.world
qa.iotdataroom.com
www.jiuguo.buzz
smjcalc.joshuamr.com.br
www.kmsolucoessolar.com.br
link.kok-heijkamp.nl
plus.kraftmusic.co.kr
reg1.lotoclub.io
www.macnevin.com.au
make-up.io www.make-up.io
www.mesopora.com
metaia.in tailor.metaia.in
ptc.mpesd.org
ibmedia.mptclive.in
www.mwcreations.dev
www.myacademypartnerfranchise.com
plexqo.nerqon.in
nickalgarcia.com
www.nnelevator.pk
novusy.se
www.occiplast.co
sample.olapagos.com
antepartners.outrun.work ap.outrun.work
photocore.pro
www.receitasvocreuza.com.br
sbg-os.com
www.sbninspections.com
www.sevisacorretoradeseguros.com.br
sidetrackedstudio.com
www.slycarrot.com
smartlist.online
plant.smithnet.dk
www.springsofwisdomhighschool.com
sslan.shop
www.stacksens.com
www.stombaershoeve.be
ta90.si www.ta90.si
countrystatecity.tansuasici.com mdzen.tansuasici.com
www.tekticx.com
telefonsex24.at
www.teoricoconducir.com
testez-lexcellence.fr
www.tocan.com.br
www.tota90.si
transgenerationnel-oleron.fr
www.ucartstore.xyz
urge18.com
vayahvikas.org
vein.network
caroustills.vemoyo.com.au
pinball.vikramtiwari.com
microchat.weblative.dev
www.whip-up.com
www.wuselperium.de
share.yaska.me