77/100 SECURITY SCORE

Certificate Information

Subject
CN=prc-i.dev-ltl-xpo.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 25, 2025
Valid Until
February 23, 2026 87 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
10:24:04:07:27:9C:B0:6E:E8:36:B3:C2:7D:4B:D0:7C:59:CC:F3:2D:D4:DF:6F:DC:B2:09:7C:3C:0A:C7:07:9B
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
blairfamily.foundation

Other domains in certificate

rh360.1st.com
www.3dreact.com
aeromexico.app
dev-site.alnitek.com
stg.ambii.com
apexsgi.com
admin.apotex360.ca
xira.moengage.apxor.com
www.attenzi.com
boostyoursuper.com.au
staging-staff.bormadago.com
www.brandonshirk.com
clockl.com
committasks.com
crushmatics.com
lts.ctworks.es
d9void.app
spec2000.dataqtechnologies.com
davemountain.com
prc-i.dev-ltl-xpo.com
coronaria.courses.diarium.dev
duo.page
cdap-app.ec-concier.com
esgplaybook.app
stg-hr.estumomentu.com
lms.experimentlabs.in
factoryarea.com
www.faerietavern.com
faithmeetslove.com
matt.fallon.io
app-staging.farmevo.ai
faunacity.com
francisgallardo.com
tpv-v2.funeats.app
ggx01006-006.gadabout.games
valero.gasgas.app
getpotluck.info
gleneagleband.com
my.grandbox.com
gsabales.one
www.histovery.com
coachingcorner-stage.holoscribe.com
www.hweiguang.com
investorportal.app
www.iods.ai
jgsolutions.ca
staging.jorigine.fr
juan-olvera.dev
web.jungle.app
maps.laborsync.com
ladispensadiirma.it
latersteve.org
livestation.app
vib.m1studio.co
mallofinternet.in
mangarel.com
www.mapee.app
mathurs.fyi
app.metodomerenda.com
www.micahbratt.com
dev.mysage.app
admin.noah-food.com
app.notatfaultclaim.com
applink.nutshellapps.com
grobbee.nutt.app
www.obsidianrune.com
orme-immigration.com
dictionary.outstanza.com
www.padl.app
www.patchme.app
pericarp.io
photovoltaik-angebotsvergleich.info
app.praiseworthy.app
prepwize.ai
cdn-v6.quoteninja.com
ramtin.me
reactifplus.com
app.rippl.ai
blog.seanleishman.com
shb.li
jarvis1.simpleclub.com
www.sinos.dev
soccerbond.pt
app-staging.ss.hr
stefanoboccuti.com
auth.dev.subject.com
suqa.app
swish.nu
dashboard.technicalwater.app webapp.technicalwater.app
solitaire.thndr.games
www.tiagowu.com
www.twentytwod.com
ytreact.udayvmenon.dev
upids.io
app.reviews.usegoldmine.com
admin.valdera.com
www.yottabytes.ai
zachwilson.io