Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=rezar.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 15, 2026
Valid Until
November 13, 2026 82 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E4:23:B4:2A:6B:73:20:F0:AB:3E:07:71:47:A3:EC:93:91:E8:77:1E:64:42:9B:CE:EE:1D:68:6C:0A:56:3A:8D
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
auth.kdx-sa.com

Other domains in certificate

albumdefigurinhas.com.br
www.arelsmerchandise.ca
artriam.co.jp
athvyaflowers.in
audiomedam.com.br
autospa.net.au www.autospa.net.au
ayodejipfalope.com
babysolidfoodtracker.com
battuia.com
bestcurepharma.site
binlademlanches.com.br
bvasian.buzz
calibersnova.com
canpropp.ca
link-dev.celebhere.com
charejli.com
www.chelseafama.com
citrya.com.br
cinnabon.clau.io
closeknit.me
www.costruzionidigisrl.it
www.coyote3dprints.com
cristofazsentido.com.br
www.cvcbiorefineries.com
daffodilsmttc.com
dancehubsocial.com
www.delightsystems.com
divyamilan.in
enannanhakan.se
www.fbodistrib.shop
flightflicks.net
get-era.com
getvasto.ai
gkcoating.com
guesstheimpostergame.com
gyanteyacademy.com
hauy.io
highpointlowlife.com
www.hoteledilmaslodge.com
humanexperiencehub.es
integraltechsv.com
registro.interclubes.mx
inthyanvi.in
www.irisambiente.it
ndt-scholar.jeantronics.com
jy2gy.com
kanztech.com
kozacicekcilikizmir.com
lotax.co.za
app.tv.makesense.org
maquinavoadora.com.br
maxcolyer.com
mirrorbill.com
muruganengineeringservices.com
nailian.buzz
narrowedgame.com www.narrowedgame.com
www.necatik.com
hello.octaveapp.fr
wuttisak-cosmetics.plaping-dc.com
masculine.primalfitdad.site
expenseflow.quantumcreations.in
admin.rajababu.ai
rezar.com
warehub.rm3logistics.com
www.roboticdonut.com
scrabza.in
service-tech-hub.com
auth.sherco.se
shotashimura.com
www.shreeshivomtirth.in
sktledgers.com
plusdigital.skyltplus.se
sosoloop.com
splitt.pro
app.squidbooks.com
www.steorra.co
api.tatbandi.com
auth.thaitypingonline.com
thomascarbureanu.com
tiket-ku.com
trainersarena.in
trilokdia.com
tritsync.com
links-dev.mobiletoll-ext.np.tu-aws.com
unicoreproject.com
join.useaccord.com
vehiclues.app
venerasart.com
vickmaniaccollectibles.com
virtualcambridge.com
weissberg-ag.ch www.weissberg-ag.ch
www.wenching-yen.com
auth.xinity.in
xuntaiind.lol
yufarinsondev.com
yuvrajkataria.in