77/100 SECURITY SCORE

Certificate Information

Subject
CN=drewtadams.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 22, 2025
Valid Until
February 20, 2026 84 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
CD:05:F7:81:C3:91:36:4F:42:38:C3:17:A4:95:D3:CB:92:13:5E:4E:30:8B:2E:29:E1:31:6B:95:7E:2E:71:ED
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
beta.personalharmony.org

Other domains in certificate

100ord.is
aday.today
v.ar-tile.com
pixelart.arcuilo.com
ashergordon.com
registro.bachatamexico.com.mx
bsqapi.blindsquare.com
app.blueribbonocala.com
bonjer.id
embeds.c360.org
op.capplay.com
api.carrynow.in
cartwheelagency.com
dev.link.chalkapp.com
clarioncamps.com
admin.clubnautic.net
codemiro.com
play.hippo.com.bo
youtube-clone.suniltako.com.np
www.epoxyart.com.pl
www.comixtopia.com
app.controltaken.com
dev.controltheroom.com
mpc-staging.cpptl.co
www.creativedesigns.fr
eternity.danielangel.co
deathtrapdungeons.com
devshiksha.com
dieseldispatch.com
stripe-callback.donatid.com
dreamlikedigital.com
drewtadams.com
impulssesaude.drtis.com.br
dev-admin.durianboat.my
earnhaus.com
xsktcohhf5lplr.easyapp.co
www.eijiroid.com
www.erupi.app
etherniti.com
noodplanph.facet-accountants.nl
febryanasa.com
feedbacklet.com
fitmujer.com
sandbox.top-up.fonbnk.com
fouchproperties.com
painelluiseduardomagalhaes.g2canal.com.br
www.guru.delivery
career.harecord.com
www.heluhe.lu
hillcrestpanelbeaters.com
cfs-rx-testing.hmhsistemas.com.mx
link.id5.io
admin.inspedium.email
insurehai.com
israel-ptsd.com
www.janussoftwares.in
kuljetuskanerva.fi
app.lans360.com
www.leataranto.com
manateavagner.com
estg.moovup.com
my-fantasy.live
myaccount.bg
hosted.laidlaw.net.nz
onefacture.com
oneprintworks.com www.oneprintworks.com
acolec.org.co
www.outdoapp.pt
parindey.app
links.dev.planeat.eco
minite.pokope.sk
polywots.com
testbed.processpuzzle.de
www.quirklings.com
ravenorcars.co.uk
www.relationality.xyz
app-staging.relative-ci.app
sirkel.rokrust.com
shoppingchatgpt.com
test.shoutout.ai
siambaler.com
flashlight.smcu.org
sphrei.com
www.sringaarastream.in
www.starkade.com
dev.replica.stylers.cloud
app.subbieapps.com
dcon.sukina.cloud
sunnycloud.se
tal.is
tangerinedating.com
www.tcg.life
themainstreetcreamery.com
www.tyrill.com
www.ultimedtrichy.in
volentus.com
www.webdev.ee
docs.xpack.dev