Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=ca-rollcall.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 22, 2025
Valid Until
March 22, 2026
85 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A4:92:1F:89:17:B2:C6:41:85:25:35:71:F3:BA:A1:D1:5B:1E:03:54:BF:D8:2F:AE:4E:7C:DD:3A:9F:ED:FD:94
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
akashkrish.tech
10thkl.com
2048.yhatch.com
digifull.cms.2na8.com
assessment.4digit.com
www.affordableautos.co.uk
olfe.aimcomely.com
amikaytech.com
www.anuonewaydroptaxi.com
www.artsbyjp.com
www.audazsistemas.com.br
staging-workman.baginex.io
baro-english.com
www.battlebitesapp.com
bavron.com
www.bavron.com
bennutritionniste.com
biostarbot.com
dev-selector.bluewhale.kr
bosnaklezzetleri.net
www.boxylink.com
www.brokenduck.club
bulldogworlds.com
businessplangenerator.work
ca-rollcall.com
demo.che-restaurant.no
cltcalcir.com.br
fluentexpert.co.in
www.allulirac.co.ke
comexsolution.com.ar
www.comexsolution.com.ar
dailyfish.online
www.daykly.com
dentaldesk-ai.com
www.dentaldesk-ai.com
invest.diakiv.com
dirtrek.com
edebile.com
eduhuberp.com
www.eduhuberp.com
www.englishlessons.com.br
www.esmaltate.cl
farmacialascumbres.cl
dashboard.fietskluis-app.nl
findlostcellphone.com
fire-chart.com
fluxoraitsolutions.in
getcoders.co.za
www.getsimpledirect.com
gox-selidbe-ns.com
www.gox-selidbe-ns.com
graphqltool.com
tickets.gronblom.com
growwithmugish.com
habitcheck.com
api.hactiq.com
app.hactiq.com
dashboard.hactiq.com
www.hactiq.com
handy237.com
hangoutu.com
hexkoda.com
imxtech.ca
pets-safe.innoware.fr
javimogan.com
kabul.in
www.kabul.in
www.kellora.com
kennethco.online
knotwork.store
league-ai.net
lussoro.com.ar
www.lussoro.com.ar
siteseer.manideep.info
mantratechnologyinstitute.com
maruan.tech
www.maruan.tech
mobile.masterrestaurant.it
microbudget.be
stratford.mobilemarketresearch.com
naseeb.pro
newsmani.com
nexaeyeclinic.com
nifusion.dev
www.nogozone.org
sima-develop.arco.org.br
pc27.in
propcanary.es
pulsotech.com
sasanakreasi.com
assets.shafeenalam.com
biblely.soyambatech.co.za
soyambatech.co.za
www.szlakzpk.pl
tensortax.com
tintedoahu.com
trcs.pt
tws.viveklokadiya.dev
code.zwanedev.co.za
me.zwanedev.co.za
Other domains in certificate