77/100 SECURITY SCORE

Certificate Information

Subject
CN=paxmule.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 07, 2025
Valid Until
March 07, 2026 75 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
72:41:E3:41:2B:A7:75:70:39:DA:15:95:A7:0D:34:52:7D:1C:50:0C:22:D0:86:FE:93:DC:7A:FB:79:96:0F:05
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
auth-my.mapway.com

Other domains in certificate

elms.120v.ac
auth.1ransom.com
acwoc.androidclub.tech
vipp.applabs.no
beer.ardila.info
speakie.areser.net
audassurproduction.com
lava.avalogistics.com
www.bashartasslak.com
beez.at
portal.brainygirlu.com
careermadad.com
www.carlotabartoli.com
auth.cavemenstudios.com
bustanibites.co.ke
www.sanxuatnhua.com.vn
hope-college.cspayafrica.com
drinkcracy.com
droptaxin.in
engginno.com
estancianovaolinda.com.br
app.firmamenttrackers.com
www.fixor.in
resgatar.flowsportclub.com
franzz.ch
www.g20ind.com
www.giapha.site
calc.handora.io
www.hotelesmaioris.com
auth.guma.ia.br
sandbox.imaginehumans.io
www.imavirtuosos.com
indianparkny.com
incoda.innovatutti.com
energydj.inovaia.com.br
www.kalaharicoding.co.za
www.kapalasainvestments.com
kprubberproducts.com
lifebypriority.com
www.linkpad.bio
lugal.ai www.lugal.ai
portal.makeusa.us
www.mauricemorneautax.com
operator.modulo.llc
extranet.my-mag.fr
auth.abusaad.my.id
www.neitherwise.com
beta.nftconcerts.com
bellringer-text-alerts.noahgearhart.com
static.onsh.co
jibc.or.id
money.paisapoo.me
pariscalendar.info
paxmule.com
paxradar.com
paxslot.com
paxtune.com
paxwidget.com
penpub.app
h2r.pirotech.fr
app.plesion.com
dev.pocc.me
www.price-savant.com
prodigypm.com
v1.raymondshiner.com
routeloop.ai
vibestudio.saueglobal.ai
shieldspace.ai
simplevr.studio
smartrestoran.com
smlink.ir
soccer-glossary.site
sokaksahnesi.com
sonicom.gr www.sonicom.gr
stackorsnap.com
studyzoominternational.com
chess.survaivor.nl
wh.suwagrocery.com
thesimplegeography.de
thrill-me.com
www.tomiburiram.com
toonsdaily.com
admin.topsidetipoff.com
www.totaun.com
www.tracertcompliance.com
auth.widget.unixusergroup.org
www.v-hmutual.com
www.v3rii.com
vinabike.cl www.vinabike.cl
santehnik-uman.webly.click site-monitoring.webly.click
wishlistchallenge.org
woke.st
yalocuellar.com
sanctuary-for-the-soul.zeroxin.xin
zumidate.com