Open
Cached
·
just now
80/100
SECURITY SCORE
Certificate Information
Subject
CN=dl.aplimax.net
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
December 08, 2025
Valid Until
March 08, 2026
66 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
31:B4:42:90:B1:AA:B5:F2:BC:19:79:FC:7B:34:90:F3:99:E7:5B:B7:85:BC:F3:51:5B:D1:19:1E:73:77:3B:2A
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
Wildcard CAs
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
Subject Alternative Names
100 domains
bevy.pl
www.allthegoodquotes.com
ww1.animeflix.ltd
annually.app
anytvcontroller.com
dl.aplimax.net
apply24x7.org
app.bana.sa
link.betty.social
black-sheep.com.mx
blackcowsdairy.com
www.britishstudentroom.com
pwa.bronies.nl
bazaar-dweb.bukalapak.design
chattyschool.com
www.burtonecooper.co.zw
admin.courtsmaster.com
dev-livercare.cyberliver.com
deadlyfamimpact.org
www.demetrius.dev
dev-app-music.dwango.jp
ehu.edu.et
euroshopfitting.co.uk
eztalk.eztrust.at
colorup22.feexp.space
fessior.com
dev.finlyst.co
webtreinamento.flitapp.com.br
g0oo.com
www.g0oo.com
ginrummyplus.games235.com
popitduel.games235.com
tomandjerry.games235.com
train2048.games235.com
admin.gestur.io
www.getdroptaxi.in
godeso.com
link.hellopillar.com
hoangyell.com
app.iamb2g.com
importa.imtery.com
app.jupitergoals.com
dev-app.jupitergoals.com
recipes.kodie.dev
laberinto.app
app.labirint.ru
www.linkleen.com
dashboard.littlebeespeech.com
liveonlife.in
www.m2it.se
agent.makeit.buzz
commission.makeit.buzz
portal.makeit.buzz
agent.makeusa.us
commission.makeusa.us
www.marcelbaur.io
guides.mealestroai.com
www.meese.pl
terms.dev.megalos-kids-app.com
moca.app
dev.mytrove.co.nz
login.ocp.co.nz
app.orlikfy.pl
oscus.coop
oy-partners.com
philoshea.com
pixelperfecto.com.ar
at.revorize.com
auth-links.rockethub.run
prysmian.dep.rosepetal.ai
pawel.rzeczew.ski
app.scaf.ltd
translate.sign.mt
web.spirally.io
beeldverhalen.staatsbosbeheer.nl
starpay-cards.com
api-auth-gb.tabsquare.com
e-generator-ecms.tabsquare.com
dashboard.techqueto.com
thacogroup-com.com
tondoapp.com
app.traitte.store
drivers.traitte.store
www.trieupham.com
ifviapaiscordoba.ualabee.com
jelentkezem.ujvarosonline.hu
vartis.lt
support.woosa.sg
xeremdigital.com.br
xn----7sbabya4afbtg9baik5a.xn--p1ai
xn--2o8h.ws
www.xn--4bi.gg
www.xn--6bi.gg
www.xn--9i2b2oo3rb4gwwq.com
www.xn--bootsprfungen-2ob.de
xn--cabaamorria-4dbg.com.ar
firebase.xn--hndvrker-9zan.dk
xn--yckq0jzb2b.xn--tckwe
make-font.yaroslav.uz
admin.zecelarece.ro
Other domains in certificate