Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=dh-app.tech
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 15, 2025
Valid Until
February 13, 2026
82 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
59:4C:AB:6A:37:DE:8D:43:E7:67:F4:E4:37:89:D1:AA:7E:A8:C7:36:6D:F2:20:9B:74:ED:5A:D4:74:6B:1B:97
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
app.pyxisculture.com
www.12933551canadainc.com
adhocaudio.com
art.alexlysenko.com
amaspeak.app
aniqha.com
ashmd.biz
www.bellaviinternational.com
billbeeapp.com
bioviva-codekeeper.com
auth.borno.io
gdpr.burrn.app
callpilot.space
www.campfertil.com.br
admin.canopy.io
www.castalianspring.de
celestaaro.com
contacto.zambezi.co.mz
coldandold.com
admin.prendamas.com.bo
iris.gmall.com.tw
courses4arab.com
sc.crimsonzamboni.com
app-mlp.cydocs.cl
www.davidbethune.com
deringm.com
dh-app.tech
dmlhmediator.com
edinburghproperties.org
effiwind.com
escuelaflores.com
www.fantasycourts.ca
felipelourenco.design
feynworks.com
www.filli-go.com
firstbell.ai
franklintarter.com
fravents.com
fuelandcarbonsavings.com
gadalamariazablah.com
gamti.com
gishohaku.dev
harryludemann.com
hbs.llc
www.hifunite.com
hisabkitab.live
iafinanciera.co
infonetisp.com
invin.id
evolutool.it.com
www.ivanjimenezfotos.com
upload-2022.kaigionrails.org
korta.cl
www.kumidev.com
travelapp.kutukemre.com
www.lanzifurs.com
www.larissavieira.com
lemonsavery.com
liftup24.com
www.liftup24.com
app.linklogiq.com
lowerbp.app
lyyyf.com
mahabernardino.com
martellphotography.com
massagemapthailand.com
mblasesores.es
mejoramientocaminonachen.com
mgpautoparts.com
www.mgpautoparts.com
midsummerwool.com
mikrothemes.com
www.mikrothemes.com
mikrotickets.com
mollygetslachddown.com
app-stage.mtnra.com
nibbot.co
njbbc.org
7a91d3d0e8.nozharov.me
opahiai.com
oplaproperties.com
ovwrstudios.com
www.partnr.paris
pitman.com.br
pixelforger.com.br
quizgamepro.pixofun.com
www.ramiro.pro
www.remotedev.co
saifore.com
sculptorsindia.com
backoffice.test.skipr.ninja
aflspin.sqwadhq.com
staging.tapcast.io
tayloremolo.com
stg.theos.fi
tunetether.com
www.undauntedathlete.com
usedenginetransmission.us
visvis.org
staging.gpis.webedia.tech
Other domains in certificate