83/100 SECURITY SCORE

Certificate Information

Subject
CN=app.staging.jeff.fitness
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 20, 2025
Valid Until
March 20, 2026 55 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
1D:1C:9A:9F:EF:0E:C2:84:8E:4F:43:54:4E:AA:57:BF:2E:97:91:4E:CD:47:B7:BB:DF:36:BB:3D:23:D5:F6:1C
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
app.contingenton.com

Other domains in certificate

links-concetti.acty.com
www.annanagarautoservice.com
apicolamexico.com
anywhere.atco.com
partners.attentivex.com
app.aurorabysigholm.com
www.authentication-malaysia.com
auth.staging.bankhooks.com
beautylaseril.com
oap2021.beezsocialerp.com
app.beyondinflammation.com
www.bhuvi-tawari.org
girafintastica.bracelit.es laantigua.bracelit.es
gcp-us-east1-05.dev.app.carto.com
namer.champayne.net
app.channel19.io
base.cloutlayer.com
clubkaiku.com
coedify.com
businesspartner.switch-in.com.my
cortezblack.com
www.david-zohar.com
denniseffmert.com
test89dl.digitalmonarchlimited.ng
dsyphagiaresources.org
app.dyc.coffee
dev.einweisungsapp.de
ez.pub
test.fairway.work
ei.app.fallnspring.com
filrolls.com
demo.finncub.com
www.finspare.com
fwatc.com
app.gardenlab.io
crm.gbc.pe
greetnsnap.com
dash.growve.tools
appfuncionario.horadolar.com.br
icfr-meerecompany.com
haoict.id.vn
www.iippconference.com
app.staging.jeff.fitness
car-blog.johnchristophersantos.com
link.juwelis.community
services.keeptheearthfresh.org
www.killara.co
www.lazikadigital.com
admin.lookinggoodfurniture.com
malcadams.co.uk
www.mochaclass.com
api.mssdata.works
www.muazara.com
alpha.muncommand.com
web.mychronos.app
neveratech.com
hokutonoken.orpheo.cloud
swarm.osxperts.com
padelclan.app
paxhub.paxating.com
pescaderiazapatajr.com
www.pizzeriatalia.com
pkio.dk
staging.order.posbel.be
poweredfs.com
account.pyramidwifi.com
q4hacking.com
webapp.qurio.ai
xr-demo-01.r-devstudio.com
rotas.redepass.com
rehabway.com.au
dispatch.dev.safetyinminutes.ca
www.saffronpatchphilly.com
saura.ai
blends.sblended.com
seiwa-kensou.com
sharingsoil.com
sj6498.com
www.smartsafetydrop.com
chat.sonicbank.com
annotations.devel.spaceknow.com
spoonvillage.com
help.sprint-bo.com
checkersinstantwin.sqwadhq.com
www.superhappytech.com
www.tacxtraining.com
www.talkmesh.com
www.taylorchavezdev.com
minutes.thelazyhiker.com
www.thepotteryshed.com.au
www.thomasstas.com
ultmle.com
vineethamurali.com
vyre.africa
app.waitizzy.com
menu.weeks.com.co
auth.wookein.com
app.ypkbali.org