77/100 SECURITY SCORE

Certificate Information

Subject
CN=ahlladmin.test.hng.one
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 09, 2025
Valid Until
January 07, 2026 55 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
DE:E2:93:3A:7F:D1:E0:1A:0D:23:5E:01:72:F1:DA:E6:BB:57:CA:1C:35:65:11:6D:EB:89:61:29:F8:77:55:1E
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
app-qr-viewer.gruposercomm.com

Other domains in certificate

l.123fahrschule.de
mailer.77mke.com
muvio.apptget.com
arrivedapp.com
arrx.uk
fr.artboxy.com
personalfinance.ashva.net
schoollinkeclass.auxswot.com spkclassmanager.auxswot.com
modules.backlot.studio
bahajai.lt
bobsizoo.com
btoglise.no
buildpaste.com
beta.butterflyit.com
app.catarfacil.es
catfridgestudios.com
chiannerose.com
www.collabrains.in
liborius.commulino.de
www.customhive.jp
dentrecord.dadalar.net
instant.datnguyen.dev
alex.deltavel.com
screens.deploy-cd.com
shpdtl-i.dev-ltl-xpo.com
staging-admin.droidkaigi.jp
e-bon.md
www.energy-authority.com
www.erickcarias.com
fiduciarycapital.in
www.galaxy.md
www.getskan.com
gezondesportlucht.be
plan.glowbe.com
alpha.gratiu.app
business.greenplay.social
gym-grid.com
myauction.harcourtsauctions.com
hereitis.app
e.hiflorence.it
ahlladmin.test.hng.one
www.holisticgardening.info
www.hucklberry.com
ibustcargoturquie.com
www.store.impaird.com
www.inayathalam.in
cdr.ingelan.cl
player.inusualsignage.com
ai-proctoring-usa.ischoolconnect.com
www.iv247.com
www.rubric.jigsawacademy.com
kidi-fun.com
como.knownuggets.com
lanabiljett.se
md-exam.com
you-awesome.mherren.ch
links.test.millsteel.app
momisworking.com
www.nexdup.io
nissangranby.com
nissansherbrooke.com
www.oncowiki.co.uk
eb.orchestra4edu.com
settings.petleo.app
pieterjanse.nl
presencedesign.online
pumpkinsonyourporch.com
reporting.qaas.nu
quehry.com
about.remoteforslides.com
sapps.io
informes.sbgt.info
searchhammer.com
sebastiancassisi.com
preprod.set.live
app.sicaleg.com
staging.skwirrel.io
sociocs.com
link.sooszoltan.ro
rainer.supplieth.eu
eventouno.swan.lat
app-test.sylva.ac
talentopiaweb.com
tapikrupa.com
www.tapneatgy.com
topokart.no
ttark.se
www.tutortree.net.au
utnq.in
www.vedslogistics.com
vilket-sl-kort.se
fourth.wadla.in
functions.webcat.app
www.wesoapp.net
wfluffy.com
firebase.xpointonline.de
www.youdontneedblockchain.com
zachorystrike.com