77/100 SECURITY SCORE

Certificate Information

Subject
CN=app.jccsprts.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 15, 2025
Valid Until
March 15, 2026 88 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D8:BA:8E:EB:D0:63:9A:7F:57:68:AB:1A:9C:B0:96:B2:E6:88:33:83:DD:11:1A:29:C7:14:AC:63:A5:B9:F1:10
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
auth.google.telecomfoztv.com.br

Other domains in certificate

agencia2d.com.br
www.almlofs.se
sbc-nakano.ambii.com
attractivesafaris.com
script.autogoldmine.com
auth.avec.fr
www.balkakrafolketshus.se
www.basedon.com
berktunc.com
bidaskmanagement.com
blauwevlinder.be
bookmyshot.ca
budgetenvelopes.com
bot.buitientuan.com
tp.capella.pro
www.creamhub.co.in
www.codesociety.xyz
contractapay.com.au
www.copa.io
milo.creaivelab.com
www.d3s-images-words.com
academy.darulihsan.ng
dealbeast.co
dontless.dev
www.earthemail.org
portal.easyrecon.co.za
educanetworking.com
www.everwaking.com
fikzax.com
booking-dev.framr.tv
fuckyoubill.com
fulllifeag.in
fyne.games
dev2.apa.gaviti.com
www.gemma.art
app.getprizepool.com
auth.ghs.fr
ihg.hemisphere.digital
jaycode.in
app.jccsprts.com
www.josefyu.com
kahlilgarmon.com
uat.kash10.com
kelly.soy
kidapps.in
www.lebensessenz-gd.de
loshucalendar.com
dev.lumenprotocol.com
blog.mgt.co.nz
drive.myanatomy.in
myleon.neoufitness.com
doctorneumo-prueba.neumomed.com
scrm-daikinapp.nexlab.vn
nickandclaire.wedding
www.nupurgraphics.com
onedropservice.in www.onedropservice.in
admin.orchidinstitute.in
login.isocial.org.br
groups.owltest.org
paravacademy.com
partyhousegames.com
partypics.zip
pocketcowbell.com
ppe.polarr.co
mail.pomezia-assicurazioni.com
pranayarunkumar.com
pro-bonum.hr
portfolio.produvar.com
sugaberrio-admin.pujasweb.co
puntclub.link
quantumowl.in
quikmaths.com
quiosquesirioalmoco.com.br
panel.qurtubagroup.com
rageon.es
randomcities.com
admin.realdatingnow.com
salahlo.in
savoryslices.in
approvals.shineweddinginvitations.com
smenterprise.co
www.sorbelo.nl
marketing.steamoji.com
bodamasielymauricio.swanmoments.com
prod.doc.tartansoft.com
www.thedevhouse.io
thephilpott.house
leave.thinasweater.com
user-menu.api4.thorbooking.com
www.trakerweb.com
www.truemenu.tech
twin.veilx.io
vfsmembers.com
dl.vopero.com
engage.ithiliensgrace.voyagernetz.us engage.vjxieajqoknmyjzjcnvd.voyagernetz.us
widnes.dev
panel.wipitech.cl