Open Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=api.staging.activitystreak.app
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 07, 2025
Valid Until
January 05, 2026 52 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
6B:06:F2:42:16:E1:18:3E:F8:67:E1:74:7B:BA:F6:BA:9A:EE:AB:48:BD:9C:6B:9C:0B:DC:A4:BF:E2:30:C2:79
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
app.tripp.com

Other domains in certificate

www.100marathonclub.id
vantageit.app.1on1navi.com
2019.devfestcampeche.com
api.staging.activitystreak.app
aiappsbrewery.com
aislinfoods.ca
alertacomunicador.cloud
alleystrengthandnutrition.co.uk
antonioresende.com
hike.ar-route.com
app-preprod.axiocap.com
www.bartvermaercke.be
bayareamaker.co
www.bidyositi.com
www.bitforest.tech
bobtagnil.fr
bullmoonjunior.com
bytebeat-liu.club
www.cassettetapes.org
formulario-web-cyd-dev.cc-irdigital.pe
clp.gr
app.easy-event.co.il jem.co.il
cobiene.com
intranet.colegfarmcluj.ro
powerbank.ranna.com.tr
dogsjoy.com.ua
conf-bashedu-fmit.ru
www.app.constructioncleanpartners.com
www.dalton-thomas.com
digbuild.net
digitalby.me
efas.com.br
dons.eglise-boissiere.fr
dmi.elxa.io tss.elxa.io
www.emeraldanvil.com
enalanda.com
englewoodafterdark.com
dashboard-staging.ensodata.com
dev.impact.fairchain.org
go.fit-solar.de
app.floatyfly.com
gameworks.co.jp
geekdas.in
app.kinder.graubuenden.ch
procenkids.gravass.co.jp
happyloon.ca
tracker.healthcare-now.org
hoccongnghe.vn
www.hoeveelmoetiklenen.nl
www.houstonathleticscamps.com
iiraa.com
qa.impactplus-investing.com
www.infinitesync.app
invitation.jareads.com
www.jjjmsun.com
qr.lockit.rentals
app.luggagestoragesuzette.fr
mags.dk
markifyapp.com
playground.matthieumontaille.fr
www.mihajlobondji.com
mindybots.in
mingleli.com
micp.missionchain.cloud
www.nextgenerationrailway.co.uk
jitsi.nooks.in
admin.dev.norby.live
kundenclub.nordsee.at
www.pablo-alexis.com
www.pixelwhips.app
positeasy.in
www.pranjalmishra.dev
pudgycow.com
kpmg.recruiting-solutions.org
system.resbutler.com
admin.rieticket.com
rohitbind.in
welcome-app.schueco.com
sea-forge.com
seattlemashujaafc.com
www.covid.sed.hu
weborder.spont.cash
macutriviacr.sqwadhq.com trivia-dev-admin.sqwadhq.com
timharbakon.com
urrutia.me
veey.io
villanovacamps.com
test-erp.vsolpacs.com
app.wantic.io
nbn.wewonder.com.au
whiskylogen.no
www.winelottery.no
web.wiwo.com.co
yerlinugarte.com
www.ymx.me
yt1s.biz