Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.gil.fyi
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 03, 2026
Valid Until
November 01, 2026 76 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
BD:19:E2:1B:A9:7B:1D:CD:2E:E5:32:31:8C:55:CD:95:BC:8D:F0:82:09:9C:7A:E9:DE:94:E8:B8:50:7C:72:FD
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
b-bpay.com

Other domains in certificate

abogadomacarena.cl
actosoft.com.mx
airalab.it
almarisolution.com
aphroditeproject.co
skincatchshowroom.console.appabrik.jp
www.archihospital.org
arkengine.in www.arkengine.in
www.astridbang.dk
balkanamericans.org
bobcatcamps.com
store.botio.io
cardapiocloud.com
app.cazadoresmonterrey.com.mx
sondage.ceim.org
11.11.chanmi.kim
www.chronofit.net
chuysconcretefinishing.com
cityc.app
clotetnico.fr
shop.craftmc.eu
public-overlay.custom-overlays.com
imala.darartultd.com
app.davi.ph
medicarmonia.davidecampello.app
push.dcms.info
prod.wizzair.on.decisionrules.io
system.deepdive.sh
dj-solutions.com.sg
surveys.ebombo.io
finovers.org
doughpamine.food2order.io
app.getrope.app
omdb.gihan.uk
www.gil.fyi
www.agroecologica.goias.tur.br www.encantosdoplanalto.goias.tur.br www.serradamesa.goias.tur.br www.valedoaraguaia.goias.tur.br
aps.gradiate.co.za
www.hotelvillam.pl
admin.idyllic.app
murabito.iidangooo.info
www.iletus.com.tr
q8-indexation-testing02.input4you.be
gokula-dev.intutrgo.com
www.junueducationservices.com
kopano.ai
labourer.work
artemid.landlele.com
www.lilja.dk
lok.sh
qrcode.lpbtech.com.br
lyridtech.com
backend.medeasy.io
panel.mertkabak.com.tr
tour.mikelkamel.com
firebase.mybiglove.ru
mymagichost.com
www.mypips.link
www.ngl.com.pk
nqod.it
auth.onlinesolitaire.io
paparecall.app
sponsor.pharmaawards.co.uk
www.picwords2.com
tracking-staging.playerapp.tokyo
www.portugol.app
powersoccer.net
app-dev.pvnt.io
www.renatadocesebolos.com.br
rethinkreading.org
www.sangreenlogistics.com
www.saunacamp.net
www.sff-global.com
www.shillonghousieclub.com
studio.shivoraa.in
skywalk.com.pk
smuldre.com
auth.staging.solostar.io
www.soluweb.com.ar
abc.sports-it-works.jp
staige.ch
www.sualavadeira.com.br
horeca.synckord.com
ta-wuermtal.de
www.talleratres.com.ar
www.thdev.me
auth.app.theconvohub.com
www.timotsui.com
torchi.com.np
transportesandes.com.uy
citroen.u-ride.me
demo.ultari.xyz
mobile.velvetdating.co.uk
www.webconsole.io
ww-fmovies.com
www.yunhui.lol