Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=aon-explorer.affinity.do
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 07, 2026
Valid Until
December 06, 2026 89 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C0:FD:FF:91:B2:D6:5E:7E:B6:DC:9E:50:26:95:83:45:53:0D:8E:14:77:C8:0E:71:A7:67:44:63:39:B5:5A:72
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
berberler.net

Other domains in certificate

classroom.1campus.net
diagnosis.365medical.or.jp
4movo.com
photography.abalan.ro
web.actpodapp.com
aon-explorer.affinity.do
agrialsat.agrial.com
register.alomaryah.com
amienshakya.com.np
www.aspectuae.com
www.axadal.com
beacham.org
admin.stg.briix.com
circuitcare.com.ar
links.civik.ca
www.clarkstevenson.co.uk
register.codeconecta.com
craigsheppard.com
connect.danishlifesciencecluster.dk
ddarogyopetcenter.in
www.ease-digital.co.za
egoai.ng
localpracticesadministration.ehryourway.com
www.elcapiroteapp.com
reviews.frendorf.de
www.funzioneanimazione.it
www.gebirgsmarine.sexy
www.gecaservices.hair
hagen-schupp.me
hinaway.hicity.world
idaol.app www.idaol.app
manage.idu-identification.com
www.ifcxr.com
access-app.insideapp.dev
itcondo.com
jerrysel.in
www.joinpie.app
www.juanmingo.co.uk
zebrabox-fr.keynexis.com
knewtrons.com
www.lch-mfi.com
www.littleskoolhouse.sg
lyenter.com
www.marqueslandim.com.br
mavitalya.com
mycone.jp
test.mydanceportal.com
www.mygiftacademy.com
link.nefisyemektarifleri.com
quanly.nghienorder.vn
nightvsknight.stream
www.northstarkpis.com
www.optimal-klima.hu
www.pretty-byte.com
www.psikologevim.com
hardlocks.ptcert.com
rexmd-pe-m.pyxal.io
www.raykoeller.de
rmclassroom.com
www.roofingprojectmanager.com
rustixmanor.com
rvafamilydentalcenter.org
connect-ng-reports.rxoconnectint.rxo.com
salelub.com
schneiderei-olga.de
scpm.me
www.secamhn.com
app2.seggac.com
plunder.shadrach.dev
hk.shedtest.no
shldmed.com
cupid.slashall.hk
snapill.com
softwaresignalengineering.com
sonsleftbehind.com
admin-dev.sorafinance.com
admin.devel.spaceknow.com
stambool.com
www.stangeland.dev
starzl.com
data.stoperan.pl
mmto.streamsocial.gg
swy.kr
lato.t-ayumu.co.jp playhouse.t-ayumu.co.jp
takeshifujimoto.com
tareq-faraj-law.com
teaplane.com
techsaleswalt.com
guest.thebigday.my
theprickandthesting.org.uk
storybook.togetherplatform.com
web.trellish.com
trionexatech-imgtoolkit.in
whereuatapp.com
yapanzeka.com.tr
www.yusufbek.com
ziadhesham.dev