Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=www.ryan-jacobs.co.za
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 11, 2025
Valid Until
March 11, 2026
52 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
15:A8:9D:21:E7:76:5D:B1:BF:89:37:5E:2D:0F:60:3E:6F:D6:1B:A4:11:C9:45:86:B9:E2:80:7B:ED:DA:6C:4C
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
centro-ocular.com
ipcomms.28east.co.za
abogadosfys.cl
www.abogadosfys.cl
admintotal.cl
app.agribankemobilebanking.vn
painel.ativedu.com.br
www.auratels.com
desktop.bikefinder.it
birraduria.de
staging.navigator.bowhead.ai
app.bridge4cause.com
amigo.brinias.eu
app.brixy.io
brixy.io
selbstauskunft.brueckner.immo
www.bryec.com
www.cabs4tours.com
www.cirqa.ai
privacy.done.co.il
doctor.qease.co.in
colegiomorazan.com
deeplearn-summerschool.in
user.designalley.in
dg.investments
msg-app.diekmann-rechtsanwaelte.de
distinctacademy.org
www.distinctacademy.org
www.dividytech.nl
www.dlani.com.br
tpenso.egg.srl
www.eshin.se
evolucion.africa
www.exterminationdismemberment.com
alpha.fieldwave.ai
geeigo.com
www.geeigo.com
learning.gtkpress.com
www.gut-tracker.com
www.hammadebs.com
www.hopkwan.hk
iaensoluciones.com
fuzzefer.id.vn
www.jointhemutiny.app
compass.kairos-advisory.com
web.khosmos.fr
teacher.jambi.kindergym.id
laceai.run
lafetedelavie.fr
call4aid-dev.logicoven.com
michael.loot.com.br
www.masungi360.org
christmas.mcgu.dev
misalons.com
mobintourntravels.com
monkeydog.uk
free.muscle.mba
www.myjourney365.com
nexusrn.me
nilauto.fr
npks.digital
nutrisek.com
api.openperplex.com
www.osstftech.com
www.ozdi.org
www.plya.io
thefour.polsat.pl
www.pradeesh.com
quecomiencelafiesta.cl
www.quecomiencelafiesta.cl
radixmarketing.in
lifestyle.reshapeclub.com
reunitegroup.com
www.rkptravels.com
www.ryan-jacobs.co.za
tv.scl88.live
semeai.com.br
www.shusson.info
simplebmicalculator.com
smartdata.works
smcfuturesacademy.com
www.softalentbee.com
str.st
www.swissmarine.dk
talhawaqar.dev
time4tow.com
www.time4tow.com
store.topscore.id
espace-accedant.upbycellance.com
www.urhonorapp.com
api.vert.farm
js-demo.video.io
vizagseafoods.com
www.vnmconsular.com
eleccions21d.websays.com
www.xansrtech.com
www.xglsystems.co.uk
www.yoonso.love
www.yourbiz-platform.com
admin.zsebtanar.hu
Other domains in certificate