Open
Cached
·
just now
90/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=stephaano.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 10, 2026
Valid Until
December 09, 2026
89 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
3E:F2:46:EF:62:76:39:6F:AA:61:EC:D5:CA:98:82:AA:01:D8:96:8F:4A:25:0D:CF:3C:B1:0D:5C:B8:D1:59:AE
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=63072000; includeSubDomains; preload
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Present
camera=(), microphone=(), geolocation=()
Recommendations
- • Add Content-Security-Policy header to prevent XSS attacks
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
bomh.co.ke
jlp-curtain-configurator.3dcloud.io
auth.aiheadshots.us
www.andybee.com
app-vitabilanz.de
app.service.aspenproperties.ca
bastien.jp
www.baur.dev
analytics.bolububu.com
bringbizon.com
www.buildertracks.com
mijn.buurtvervoerheumen.nl
dev-violet.c-point.co.il
ccascursos.mx
cdigi.fr
admin.chepex.com
app.coachlydia.com
www.danielbreault.art
www.e2o2.com
www.elevareapoiosocietarioealvaras.com
eliteinteriorhub.com
www.engilyin.com
www.epoch-innovations.com
firebase.eriksturesson.se
ewaldhirs.ch
www.fermedespuits.fr
comingsoon.ff-frotzersricht.de
auth.finlayfitnessservices.uk
fuzion.fndrsng.com
www.genshincv.site
legal.goidea.app
preview.greener-buildconstruction.co.uk
www.hex.pub
partner-center.hmobility.co.kr
bunbunapp.impossible-labs.io
intelliflow.app
www.ivaziconstruction.com
testriderandroidchat.jeeblynow.com
tourradar-sdk.joinsherpa.io
www.justekt.co.jp
lakecityfamilylaw.com
lexiportal-app.leximancer.com
dashboard.livegigz.com
ongkos.lumbung.app
macnevin.com.au
magnes.app
go.mapnia.com
larbins2.admin.maxentwickler.site
telemedicine.mayamd.ai
mesogeios-restaurant.com
mpksdai.co.in
www.multimarca-cundinamarca.com
print-coll.mysodexo.app
admin.nannyadvisor.it
boost.neetechs.com
brandkit.neetechs.com
proof.neetechs.com
nelybehar.com
nhtech.top
olijothi.com
www.onesticker.onedate.app
default.openreads.xyz
www.opulencelodge.co.za
orangecitydb.app
www.pinea.nl
planetdoodell.com
my-staging.rebalancetech.com
www.recons-ltd.com
rentkirkland.com
happy.ronne.dev
runningbullmedia.com
events.salto-orion.app
samasrawellness.com
www.saveyourstyle.com
ce-app.stg.shippio.jp
wfdcmbqznst2mqpsugot.smartimob.io
smokingtiger.io
softwaredefinedbuildings.com
solidification.io
f.sounter.com
www.spacereport.news
stephaano.com
sthokar.com
surgeonsforsurgeons.com
talentinum.com
talestonini.com
landing.thesaturn.app
thesaturn.app
go.ticketbro.com
travalris.com
trenzyfinancials.com
trustglobal.com.bd
kehua.turnosweb.app
union-bauzentrum-hornbach.com
dishub.wasdlabs.com
webbeon.io
www.xenthropic.com
www.yssolutions.org
www.z5ottu.hu
zinxstudios.com
Other domains in certificate