77/100 SECURITY SCORE

Certificate Information

Subject
CN=nvpgames.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 04, 2026
Valid Until
October 02, 2026 49 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
3A:84:AA:4F:53:42:96:30:A1:67:60:54:4A:6B:DC:4C:34:FE:35:78:7B:37:E5:DD:78:F4:A5:3D:D8:05:16:FB
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
app.playmatcha.com

Other domains in certificate

academiadekster.com
www.alesca.com.br
aquasur.org
www.asociacionveracastillo.org
www.authentication-srilanka.com
autoexpertindiacompany.com
auth.bewitness.world
bilindgame.com
blarkly.com
bonuska.com
app.brickvester.com
carromera.com
cataloger.me
chicagoshipchandlers.com
clarifocus.app
wallet.cocopago.app
asl.codebridge.app
coincidenceapp.com
cxie.dev
damnedbytime.com
daneshelford.com
dev.docs.dcupl.com
platform.deeplexity.ai
digioneexpo.com
admin.dionytravel.md
www.doubleus.at
drschek.com
duel-streams.fun
lite.dumbnote.app
totem.queue.e-ceos.app
www.entregas-am.org
www.evokgym.com
app.familinku.com
www.fichon.eu
ganando.forjadecodigo.com
web.getplaytime.app
pay.sandbox.playhq.gr4vy.app
guvenceatlas.com
habaitlezchuyot.com
haballerim.store
cumin-beryl.harecord-dev.com
demo-beta.hashdash.it
hpusharkscamps.com
imobiliariadepaula.com.br
ednevnik.usce.ios.edu.rs
www.islandcarrentals.travel
jessieyang.net
jyoraceramic.com
kalalawyer.com
kristinepaez.com
lehonghai.id.vn
www.letsplant.app
app.limplusresolve.com.br
lirainmobiliaria.com.ar
lokali.ai
www.luizyamada.com.br
maathmagic.com
masarap.mendaza.eu
www.misto.world
monteiroealbuquerque.com.br
morphosis.co.za
web.mushby.app
muxfd.com
nahraynarabia.com
notafid.com
nvpgames.com
link-staging.outpatient.ai
pisicloud.com
www.plantboop.com
playtakethel.com
portugalcarassauga.ca
www.pos-rest.com
procastium.com
projetoerguer.com.br
pscorecard.com
qrconnect.app
jepsonnorthwest.quetzalpay.io
qwakup.live
ravenrend.com
razcreationmedia.in
www.readcoach.site
red-ksa.com
rigli.com
score4allmediatech.com
selfevolutionlab.com
siepip.org
skyloopbeats.com
www.smarthomeapp.com.br
shopping.stable.codes
stayuntilsunday.com
www.sudarshandhakal.com
weathertide.sysadm.no
ten8.co.in
go.tere-za.eu
timelnr.co.uk
usolume.com
app.engage.cja-collections.voyagernetz.us
vygram.com
font-cdn.wizardlabs.com