80/100 SECURITY SCORE

Certificate Information

Subject
CN=drewtadams.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 22, 2025
Valid Until
February 20, 2026 76 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
CD:05:F7:81:C3:91:36:4F:42:38:C3:17:A4:95:D3:CB:92:13:5E:4E:30:8B:2E:29:E1:31:6B:95:7E:2E:71:ED
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
app-staging.relative-ci.app

Other domains in certificate

100ord.is
aday.today
v.ar-tile.com
pixelart.arcuilo.com
ashergordon.com
registro.bachatamexico.com.mx
bsqapi.blindsquare.com
app.blueribbonocala.com
bonjer.id
embeds.c360.org
op.capplay.com
api.carrynow.in
cartwheelagency.com
dev.link.chalkapp.com
clarioncamps.com
admin.clubnautic.net
codemiro.com
play.hippo.com.bo
youtube-clone.suniltako.com.np
www.epoxyart.com.pl
www.comixtopia.com
app.controltaken.com
dev.controltheroom.com
mpc-staging.cpptl.co
www.creativedesigns.fr
eternity.danielangel.co
deathtrapdungeons.com
devshiksha.com
dieseldispatch.com
stripe-callback.donatid.com
dreamlikedigital.com
drewtadams.com
impulssesaude.drtis.com.br
dev-admin.durianboat.my
earnhaus.com
xsktcohhf5lplr.easyapp.co
www.eijiroid.com
www.erupi.app
etherniti.com
noodplanph.facet-accountants.nl
febryanasa.com
feedbacklet.com
fitmujer.com
sandbox.top-up.fonbnk.com
fouchproperties.com
painelluiseduardomagalhaes.g2canal.com.br
www.guru.delivery
career.harecord.com
www.heluhe.lu
hillcrestpanelbeaters.com
cfs-rx-testing.hmhsistemas.com.mx
link.id5.io
admin.inspedium.email
insurehai.com
israel-ptsd.com
www.janussoftwares.in
kuljetuskanerva.fi
app.lans360.com
www.leataranto.com
manateavagner.com
estg.moovup.com
my-fantasy.live
myaccount.bg
hosted.laidlaw.net.nz
onefacture.com
oneprintworks.com www.oneprintworks.com
acolec.org.co
www.outdoapp.pt
parindey.app
beta.personalharmony.org
links.dev.planeat.eco
minite.pokope.sk
polywots.com
testbed.processpuzzle.de
www.quirklings.com
ravenorcars.co.uk
www.relationality.xyz
sirkel.rokrust.com
shoppingchatgpt.com
test.shoutout.ai
siambaler.com
flashlight.smcu.org
sphrei.com
www.sringaarastream.in
www.starkade.com
dev.replica.stylers.cloud
app.subbieapps.com
dcon.sukina.cloud
sunnycloud.se
tal.is
tangerinedating.com
www.tcg.life
themainstreetcreamery.com
www.tyrill.com
www.ultimedtrichy.in
volentus.com
www.webdev.ee
docs.xpack.dev