Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=reflection.kristenkirkman.life
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
May 03, 2026
Valid Until
August 01, 2026
87 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
78:6C:9C:93:B1:42:D7:19:32:64:5B:08:CD:17:24:FB:81:18:AD:0A:21:7D:07:08:33:B0:61:C7:82:B0:72:34
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
app.get-ramble.com
core.aesa.sk
ai-stax.com
amicaleng.sn
anasa.io
beta-01.machineshub.arcadehaus.com.br
beta.machineshub.arcadehaus.com.br
development-01.machineshub.arcadehaus.com.br
development.machineshub.arcadehaus.com.br
machineshub.arcadehaus.com.br
production-01.machineshub.arcadehaus.com.br
gbf.artle.games
awiddelivery.com
balanceonhand.app
bubbal.ai
bzkyapi.com.tr
cheapfax.app
cipherscalepoc.com
www.cmkoekelberg.be
word.cognivus.com.br
coppacocktailsgh.com
www.corsol.com.br
gestionmonotributo.cymaplicaciones.com
daucohanghoa.com
ephesustechnology.com
eskwela.app
evenskyfilms.com
www.executehub.com
client.invoicing.exiaedge.com
favorino.app
www.finovapak.com
finetailors.firerio.com
www.fitmycase.in
foodnfit.com
www.fractalloop.dev
www.gabitoapps.com
www.genezez.world
auth.getwealthrise.com
goldencompliance.com
guelpheyemd.com
www.guerrilladev.xyz
habiboard.com
heexsah.com
hotelg17.in
invokeit.in
jackapp.com.br
jinrongyou.buzz
nexus.jiricech2059.com
reflection.kristenkirkman.life
kwikbundle.com
micro-cursos.labosquescuela.org
leastcountrush.com
www.lecouloir56.com
harvard.lordos.tech
maroof-travel.uz
gestio.massanet.cat
masterfullauto.com
miapppro.com
calc.minshoki.com
monarco.app
link.moxom-ye.com
connect.narayann.dev
nationstardigitalb.com
nokal.app
frete.oaxis.com.br
only1cent.com
ornamentdash.com
pawegio.com
quarate.com
ravensquareventures.com
sistemia.redacted.ai
redleaves.net
renterbooks.com
resettingworld.com
start.rivuu.com
robotpak.com
sb-oep.com
cse-idp.sdsforg.com
admin.seawareapp.com
simran-apps.com
sip-equipment.com
login.snowjoe.com
irata.softaware.fi
www.superfrits.nl
szylair.pl
technologybuildings.com
www.technologybuildings.com
thegmstudio.com
www.trilhamaster.com.br
trustioagency.com
vongquay.tuoitrungnien.com
ukiyoshopp.store
hermex.usama.ai
valion.dev
app.vetyz.com
www.vetyz.com
lp.webaca.jp
weddingdancetango.com
app.whas.dev
ziggy-road.com
Other domains in certificate