Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=paxmule.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 07, 2025
Valid Until
March 07, 2026
75 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
72:41:E3:41:2B:A7:75:70:39:DA:15:95:A7:0D:34:52:7D:1C:50:0C:22:D0:86:FE:93:DC:7A:FB:79:96:0F:05
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
auth-my.mapway.com
elms.120v.ac
auth.1ransom.com
acwoc.androidclub.tech
vipp.applabs.no
beer.ardila.info
speakie.areser.net
audassurproduction.com
lava.avalogistics.com
www.bashartasslak.com
beez.at
portal.brainygirlu.com
careermadad.com
www.carlotabartoli.com
auth.cavemenstudios.com
bustanibites.co.ke
www.sanxuatnhua.com.vn
hope-college.cspayafrica.com
drinkcracy.com
droptaxin.in
engginno.com
estancianovaolinda.com.br
app.firmamenttrackers.com
www.fixor.in
resgatar.flowsportclub.com
franzz.ch
www.g20ind.com
www.giapha.site
calc.handora.io
www.hotelesmaioris.com
auth.guma.ia.br
sandbox.imaginehumans.io
www.imavirtuosos.com
indianparkny.com
incoda.innovatutti.com
energydj.inovaia.com.br
www.kalaharicoding.co.za
www.kapalasainvestments.com
kprubberproducts.com
lifebypriority.com
www.linkpad.bio
lugal.ai
www.lugal.ai
portal.makeusa.us
www.mauricemorneautax.com
operator.modulo.llc
extranet.my-mag.fr
auth.abusaad.my.id
www.neitherwise.com
beta.nftconcerts.com
bellringer-text-alerts.noahgearhart.com
static.onsh.co
jibc.or.id
money.paisapoo.me
pariscalendar.info
paxmule.com
paxradar.com
paxslot.com
paxtune.com
paxwidget.com
penpub.app
h2r.pirotech.fr
app.plesion.com
dev.pocc.me
www.price-savant.com
prodigypm.com
v1.raymondshiner.com
routeloop.ai
vibestudio.saueglobal.ai
shieldspace.ai
simplevr.studio
smartrestoran.com
smlink.ir
soccer-glossary.site
sokaksahnesi.com
sonicom.gr
www.sonicom.gr
stackorsnap.com
studyzoominternational.com
chess.survaivor.nl
wh.suwagrocery.com
thesimplegeography.de
thrill-me.com
www.tomiburiram.com
toonsdaily.com
admin.topsidetipoff.com
www.totaun.com
www.tracertcompliance.com
auth.widget.unixusergroup.org
www.v-hmutual.com
www.v3rii.com
vinabike.cl
www.vinabike.cl
santehnik-uman.webly.click
site-monitoring.webly.click
wishlistchallenge.org
woke.st
yalocuellar.com
sanctuary-for-the-soul.zeroxin.xin
zumidate.com
Other domains in certificate