77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.bhagavadgitasaar.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
February 04, 2026
Valid Until
May 05, 2026 86 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
BC:33:51:C9:A0:FE:69:9D:86:F8:DF:54:7C:81:CC:42:BA:C1:88:21:3F:2A:8C:28:17:10:39:BD:9D:AC:69:A4
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
auth.tradex.rainbytes.com

Other domains in certificate

accordle.is
www.akut-medizin.de
form.ambii.com
www.amcenterusa.com
andrewgable.dev
angelm.dev
www.apideveloperweekly.com
gruporodriguez.appshare.com.br
arazim.co
noah.arndt-serafim.de
income.artafinance.com
chat.azum.com
www.bahaitt.org
www.bhagavadgitasaar.com
bowenzhai.ca
burgersplace.fr
report.meetoval.bycopilot.com
www.codefroggy.com
afyon1903besiktas.com.tr
historyofspaske.com.ua
pdv.crmfacil.digital
links.decision.health
campus.docalculate.in
www.dogotea.es
login.edigitalindiaservice.in
demo.enwake.com
app.esotar.com.br
ixd.evanmachale.dev
app.ezhire.ae
single-kenya.fairchain.org
fancygiveaways.app
fernandovr.com.br
admin.fhsis.org
furnitise.nl
gerg.in
service.gigtag.jp
globaltalentinsight.com
growbyapp.com
cast.hellodoctor.com.mx
hungryjacks.hemisphere.digital
ifscpinsearch.com
admin.innostaysis.com
intoxical.app
www.jaxtin.me
comics.jesusjbriceno.es
em-csd.jnpa.in
kredio.se
tunnelrush.ktappsngames.com
www.linktoremember.in
www.littleplanet.studio
sleepystories.markusschuermann.de
www.mcdonaldscrushtherushcrew.ca
link.app.mdrt.org
portal.medschooltutors.com
agr.merkurjet.com
blog.moons.pe
www.murilolanches.com.br
dev.portfolio.mvtech.dev
www.mydom.cc
nampil.dev
elf.nargil.net
newvision-homeinspections.ca
www.nickkrumholz.com
nox.gallery
orlantor.com
perfect-pentago.net
www.pidigitaldesign.co.uk
www.powerwastetanks.com
prayatna.com
propl.in
qastrack.com
www.radhakrishnan.in
dev.i.rallyreader.com stage.app.rallyreader.com
www.schultzsteven.com
seawave.tw
slapshotgames.com
tv.smartlinepro.com.br
splitme.in
spokanechiropractic.com
sportassistantmanager.com
dev.storyhunt.dk
www.sunrayclothings.com
lorenzo60party.swanmoments.com
link.swing.africa
meh.take-tracker.com
www.tecnocomputers.it
www.thecambridgeagency.com
www.toadzgang.com
toothcase.app
trekmania.in
tsay.dev
www.ttcderijdtbrakel.be
www.ulearnabroad.com
victorreiner.com
staging.viridios.ai
wendato.com
www.weslyortega.dev
apps.wewonder.com.au