77/100 SECURITY SCORE

Certificate Information

Subject
CN=wikiracegame.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 06, 2026
Valid Until
November 04, 2026 84 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
25:B9:5D:F2:F0:74:22:92:DA:07:5E:AE:1B:98:A0:6E:67:DE:0E:40:10:95:D5:17:7B:21:07:8F:F6:FB:2D:70
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
planlighter.com app.planlighter.com

Other domains in certificate

beta.advancenameplate.com
agata.academy
agentmorpheus.xyz
akyakailetisim.com
alrca.id
www.aniqsaidi.my
app-yacht.com
artukludis.com.tr
www.beard.ink
bexleyyouthfootball.org
auth.bishonline.ca
boiledocean.ca
bootspruefung.de
botanicosur.com.ar
browar-balans.pl
carnaibaesmeraldas.com.br
cevichesycoctelesdondesandra.com
chicagoroofinganddecking.com www.chicagoroofinganddecking.com
docs.chrisberno.dev
beta.collagia.com
chat.comunicazioni-academy.com
datatoolkitforsheets.com
www.deepfakex.ai
zil.desenpi.com
ecopcion.com
www.edvindizdarevic.com
eeo.com.tr
seed.emrg.be
facadecalculator.com
www.fedrigo.com
fixturea.pro
app.forthemaster.org
frndbis.life
www.fyhba.com
geokatu.com
gifduel.com
glancein.com www.glancein.com
grandcaymanfcu.com
gtbarberteam.com
auth.admin.ha-saku-kintai.com auth.agency.ha-saku-kintai.com auth.ha-saku-kintai.com auth.worker.ha-saku-kintai.com
harikesh.co.in
agency.dev.hearthconnectedcare.com family.dev.hearthconnectedcare.com
holomiru.ch
jakejoraanstad.com
ttw.jakobsponholz.de
panchayat.jayganga.com
aregonde.jorigine.fr
joshua-fletcher.com
www.larkreel.surf
www.luckykittens.io
nexstarcorporate.madhive.com
www.maureenamiller.com
auth.nano-forms.co.il
mandarim.navling.net
nerri.ca
nexus-project.co.kr
nexus-project.net
northreklam.com
omnis-tech.com
findings.ordinario.ph
passexam.mom
redirect.postando.de
rabbithole.fr
plugin.staging.ratality.com
collector.reachus.dev
recruitmeai.space
www.rejsal.com
www.sgam.site
shuttlelabs.co
socialmax.digital www.socialmax.digital
www.srimahacateringservice.in
react-documents-staging.staffshift.com
statictalent.com
auth.stolenwatermedia.com
talopp.co
taskhunters.online
www.tiaras.co.in
web.time-wallet.app
budget.tohorizons.com
www.tollpinas.com
ultracleaningct.co www.ultracleaningct.co
reports.vagebilokapic.hr
www.vgent.dev
vispires.com
wewalk.app
wikiracegame.com
play.yabadoo.tv
pontonosparceiros.yesmktg.net
www.zagakulab.jp
legal.zsam.app