83/100 SECURITY SCORE

Certificate Information

Subject
CN=www.dailyquestplus.co.uk
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 05, 2025
Valid Until
February 03, 2026 73 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
05:C6:8E:1E:D2:28:7F:57:07:53:94:4B:6F:56:C8:A0:96:08:31:55:75:A9:42:30:A4:CB:C1:1A:A0:44:A8:7B
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=15552000
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
apps.zendesignsoftware.com

Other domains in certificate

2tunes.nl
red-hot-timer-for-mac-os-x.3bitlab.com
palace-dev.academytrial.com
www.adcaviation.com
aguasartesianas.com.br
alzijdigi.nl
www.asbetec.com
www.bankroll.network
dev-bsadmin.billsimplicity.com
www.blingg.club
bmax.it
cade.technology
captureme.app
audio.choosewithin.com
www.viox.com.my
www.dailyquestplus.co.uk
shop.damansah.com
www.dash-app.dev
decentrate.com
design-connect.com
directhive.online
meli.distrisuper.com
dolphinmassagespa.in
www.dontstep.com
driverprinters.org
egrtravels.com
eklio.io
puzzles.eleventheye.com
tulipmania.elimlevy.com
esimply.live
estudioconus.com
flexfit-europe.net
flexfiteurope.org
www.fluttech.com
vaults-goerli.flype.fi
farmnfts.foodstarter.io
gavans.work
www.getdetention.com
docs.getquill.dev
gijora.de
portal.gptiming.net
platform.guardianimpact.org
hnelectronix.com
gardikayam.indiandevelopers.org
application2.testing.jacksonlee.dev
ugl-estv.kisscam.com
rybchuk.main.fish
mangomountain.net
matthankins.com
mayodia.com
solstice-routing.mersive.xyz
www.mosahay.info
mountain-wanderers.fr
admin.muscleup.id
naughtyshortie.com
www.ministerio.net.br
www.nk.gs
www.ohgenome.com
link.onoe.dev
app-upversion.opteksolutions.com
app.oriflame.com
su.orijin.io
parichaysammelan.in
www.pat-hansen.com
embed.playflix.fun
www.plover.pt
notification-panel-demo.qlub.cloud notification-panel-staging.qlub.cloud
testing.quattrol365.com
clientes.repzone.mx
resetandrisecounseling.org
restauplus.com
restonpeace.org
ruki.dev www.ruki.dev
sdvx.net
www.sewlikehoney.com
uid-qa.spafinder.com
www.swingdanceseattle.com
www.syntaxeinteractive.com
thedentalcode.com
thegirish.in
quickreco.thepetdoor.asia
cms.theplanetapp.com
jkopay.tixprotocol.com
www.trailblazerparks.com
staging.turfspace.com
ur-next.com
urbanclassic.net
usefulformulas.com
wayneljh.me
www.weiwhite.com
werrec.org
whatsupwithbuttons.org
whattheeggstudio.com
www.wheelof.fish
admin.yaadily.com
yasminsaffron.com
www.zanteohomes.com