Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=www.tynka.org
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 03, 2025
Valid Until
January 01, 2026
41 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
BF:A5:A1:63:0F:46:42:98:47:4C:B1:20:37:CF:FA:9C:B3:5B:23:A5:67:2A:4D:BD:E3:95:1A:E4:1F:E9:2C:3A
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
business.appjection.com
2023.sunny-tech.io
32pxl.com
ang-labs.com
proapp-dev.angieslist.com
autonexuss.com
bacorp.ca
bandlreisser.at
alpha.befinch.com
uatinter.biibiic.com
www.blindreferral.com
agrito-links.bonmek.com
www.brickwise.net
metaverse.burjmayfair.com
www-stage.burningsea.com
www.calculatingbitcoin.com
app.campuslife.com.au
caroscuro.com
m.choozmenu.com
monviestory.co.kr
www.monviestory.co.kr
performancetracking.weget.co.th
artisan.fix-it.co.zw
www.cocoon.beauty
www.domestically.pk
beta.ejsa.space
elmsi.io
www.emplode.com
edge.ensaturno.com
www.fdqgames.com
www.ffxivteamcraft.com
links.finblox.com
www.fivedgroup.com
www.fivesecond.com
layout2.freekarts.com
www.fuzenpharma.com
gabrielefabbri.dev
www.getfitl.com
grids.dev
www.guildmarket.net
hallapp.com.br
www.hupaze.com
erp.innox-jp.com
scrum.jonvoth.com
jordanmel.com
www.junebeecartoons.com
kanlaya-eco.com
www.keystagewiki.co.uk
kritiqme.com
www.learnteq.com
industry.lexer.dev
www.liberimap.com
bnt.m-u.kr
dev.makealoadout.com
www.memorado.com
simongame.mikelkamel.com
www.mkgoodburguer.com.br
pigeon.nathanko.com
nathantravels.com
www.nathantravels.com
nudge.neocollar.com
whatstat.neocollar.com
podcasts.neolivros.com
signin.newlevelgames.com
enroll.staging.noyo.com
sharedcontent.nuitapp.com
es.oktravelcancun.com
www.omnicard.app
orcashabu.com
biz.ossapp.com.au
phaos.pinhasov.com
fortnite.playerquant.com
qarious.com
links.quintalescoladaleste.com.br
rebelservices.llc
redwood-group.co.za
www.respirabiobio.cl
romesco.ar
rrurakointi.fi
www.salty-cs.com
uat-sandbox.good.members.sargon.com
go.set.live
sleepylunadesigns.com
dev.cp.softcomp.jp
www.somvista.com
abeille-assurances.speakylink.com
about.stereofy.com
syagent.com
business.rc-prod.tefter.com
login.thinkbabynames.com
timezen.com
tomiburiram.com
mobile-demo.truckstop.com
www.tynka.org
vance-holding.com
content-hub-qa.visitingmedia.com
weight-graph.com
westcs.club
whatsupwithbuttons.com
willreidy.com
Other domains in certificate