Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=test.bharanidesigners.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 06, 2025
Valid Until
January 04, 2026
43 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
1B:0D:46:6A:29:30:7A:DE:77:87:A7:A9:8A:AC:1A:96:5E:EA:1C:E4:98:A6:5C:54:6A:83:95:A9:74:96:54:12
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
app.talepnet.com
421soho.com
afterview.io
app.agroticket.com
asad-dowling.com
www.ateckaudio.com
boardingpass.aveloair.com
www.beckmannacoustics.com
staging.beereaders.com
bencarrental.com
test.bharanidesigners.com
word.briefcatch.com
brinsurtie.com
cedihub.org
chrisishida.com
import-test.classicdriver.com
www.climathermbm.com
app.colegiosamuelmorse.com
jahome.com.tw
conciertolive.com
app.cornerbarberhouse.com.au
www.court-web.com
dazylink.io
deineneueapp.com
www.desconfieja.com.br
esportstechnologiesaffiliates.com
videomark.ezcast.com
fivetastes.ca
www.fouriergauss.com
futurew3b.it
blockchamp.games235.com
digdigdig.games235.com
kittenmatch.games235.com
motox3m.games235.com
getincredibles.com
dev-api2.getintheloop.ca
ghge.com.au
beta.gitflowchart.com
www.gondor.io
grupoesoft.com
helpfulmovinginc.com
admin.iienterexp.com
www.kachijames.com
www.kachkach.com
kaizenfitnessldn.co.uk
staging.kukunawa.pl
lerdodigital.mx
www.lightspeeddist.com
lingomatchie.com
llamadopestcontrol.org
cliniqueamade.luciole-app.com
www.lumineuxrealty.com
speed.measurementlab.net
www.medscan.io
business.medua.me
taxilaurier.megataxi.com
miskybakery.com
www.mojigarage.com
patients.moodusapp.com
manual.mymoons.co
nanami7y.com
needfoodhavefood.com
code.neenbedankt.com
app.newslit.co
nickparrish.com
www.omrinuri.com
auth.oneboard.live
orderandeatnow.com.au
orionyachtsupport.com
palsup.com
passthelightr.com
totalcoach.phaisan.dev
pittaerpemere.be
api.platforma.one
pock9.com
pokestrology.com
qualitylogin.com
olx-cl.quash.ai
www.refun.com
www.sachinbhat.com
training.safet1stonline.com
www.sahanlawoffice.com
admin.salikeritemple.com
www.salikeritemple.com
www.savoir360.com
sandbox.scoopr.no
www.scratchild.com
www.securedomain.org
www.setaworkshop.com
webhooks.simbuka.com
simonlary.dev
smartdojo.org
api.strands.app
tagyu.cc
www.takeclassy.com
lambert.tallyfor.com
viksland.com
s.vunderatert.lu
developer.warrenclough.com
jtld.yell4u.jp
Other domains in certificate