Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.andelser.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 16, 2026
Valid Until
October 14, 2026
37 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
98:ED:4F:4B:76:F7:1C:F7:CC:2E:A4:02:69:C3:1D:DA:07:BE:56:9F:4B:46:20:F1:9C:2F:3D:A2:9B:A5:CE:25
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
app.patsonpharma.com
app.abssl.in
abunits.com
africanintellect.org
www.albioncrafter.gg
www.andelser.com
www.apexlabs.tn
ceramispace.appdeco.ca
suny.auralinq.app
www.autoservis-plisek.cz
www.billyskedd.com
www.bringitapp.co
calcraze.com
api.celebreak.eu
app.cge.as
chieratech.com
chuseimonjo.net
clarifyproperty.co.uk
cleanovacare.com
www.clicahorro.com
clickear.net
comprobaec.com
cooperativaredjoven.org
www.daltondavatz.com.br
evolfresh.digifyme.tech
drcaelis.us
www.dreli7.com
www.ehiheritage.autos
ep101.pro
www.ep101.pro
ep101.study
www.eunoia-montessori.org
www.eventphotography101.com
fawatir.online
filmmakersmeetup.ph
geocities.blog
auth.gimnfit.com
gohaus.ai
www.grumpyroyal.com
heyiskra.com
hotstats.be
www.ibroys.com
business.instahire.io
intramecgroup.com
karnaf-games.com
kdrglobal.net
ket.kletterwald-darmstadt.de
korvx.lk
latitudeops.org
www.cbh.lb.digital
auth-dev.leasy.co
www.luminaljourneys.com
lupitatecuida.com
magnoliagroup.fi
marketmind-ai.com
matchlessworld.in
miwaspa.com
mujahiz.com
mumbaitempledarshan.com
muycalienteyloco.com
www.mysds.in
fh.app.naradigital.ca
novavita.world
alpha.playo.club
www.pomezia-assicurazioni.com
jaggeweer.poweredbypunk.co.za
appv4.priceworx.co.uk
tour.pronogames.com
rayathaimassages.com
www.readycommercialcapital.com
s.retach.biz
rhsk.autos
www.rhsk.autos
console.riskut.com
second-breakfast.ryanross.net
seguroslamas.com
showlabevents.co.ke
simonadoes.com
efe.skmarinecloud.com
skmarinecloud.com
www.sksfans.com
skyaibharat.com
somerenlabs.com
spotta.site
tienda.susaron.cl
tabcalorietracker.com
techienext.com
api.tenstars.co
theresumeio.com
tilzspa.ng
timgo.co.uk
timgo.com
trifecta.page
tuconnaisqui.fr
viter.io
vitya.shop
pacientes.vivadoctor.com.br
wepapay.com
cs.workflowmanagerpro.com
qa-assessment.zingtongroup.com
Other domains in certificate