Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=www.guideholidays.in
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 12, 2025
Valid Until
March 12, 2026
82 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
DD:48:9D:B6:A4:A6:C5:DF:BD:66:4D:E8:32:62:A8:14:8F:B8:5E:74:A2:38:7C:92:F7:B9:14:FB:F7:97:42:8F
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
bonga.dk
lowes-kitchen-style-quiz-cert.3dcloud.io
firebase.abgsoftware.com
ami.uinsyahada.ac.id
acme-soft.click
www.allbestringtones.com
www.artalyer.com
test.artjam.com
atasemt.com
www.azigma.com
www.beezysolutions.in
links.bereal.me
www.blossomc.com
b-dev.boards.com
bootsschulen-bedarf.de
www.bumpgames.io
www.bytecrafted.dev
kiosk.connect.cannafo.com
app.ccorl.com
cestcarre.app
championspipeline.com
lindsborg.column.us
app.raben.com.np
puspapyatha.com.np
www.romanprajapati31.com.np
gonullu.tedxsur.com.tr
demo.comandera.com
www.damansah.com
danielmascali.com
www.definedconstructionutah.com
webshop.dragonport.se
beheer.duurzaamwonenbon.nl
elitcatiizolasyon.com
southworks.equiem.mobi
spinningfields.equiem.mobi
www.esgimpactlens.com
espressoplusmilk.com
www.fantasyfootballtiers.com
admin-flashco-super-flash.flashcopilote.com
www.flcr.onl
flylog.fun
us-marketing.fuelservice.org
auth-gestormax.gabrielxq.com
www.guideholidays.in
www.h4c.pro
harper.photos
landlord.hvhomes.de
info-lounge.jp
inneklemtedager.no
app.instructiongenius.com
cochesegurolottus.inter.mx
cochesegurosivale.inter.mx
chat.jaceyi.com
www.karunikachoo.com
www.kristie.com
www.lafaceshield.com
next.learnlink.no
gallery.leonard-siebeneicher.de
home.leonard-siebeneicher.de
www.leondelaimy.com
www.loicortola.com
robata.madebyenzo.com
www.mamilu.cz
mediator-malopolska.eu
www.registro.mejorpyme.ec
microsaasempire.com
synopsis.mindmilieu.com
minexcon.com
mioboe.app
www.mister-tee.de
mlabs.jp
busyutto-kanji.mosoxlab.com
auth.myvirtual.kitchen
www.newworld-lfg.com
link-orcoma.nibo.com.br
web.olabbio.com
onchx.com
onlineregister.co.za
cfly.orchestra4edu.com
www.pensioenbijevofenedex.nl
www.pgn2pdf.com
photosbylp.com
planplate.com
www.prorocket.cz
rxlinkapp.com
www.rytmimafia.fi
www.shoppersparadise.nl
bot.skey.network
slpinturas.com.br
small-acts.com
baiano.gerenciazap.smartmidiasdigitais.com.br
sprogstimulering.dk
www.staudinger-agentur.at
stylorise.com
app.tenniswithfriends.online
links.thecoffeehouse.com
board.trakto.io
www.vsol.in
webcity.se
jury.viinikanlahti.weup.city
Other domains in certificate