Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=lecanary.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 03, 2026
Valid Until
November 01, 2026 68 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
4A:25:BC:41:A0:93:CD:E9:84:14:AE:88:1D:0D:11:DD:03:01:02:B1:41:1B:55:E4:7A:BA:53:3E:E0:E9:61:75
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
closeby.one

Other domains in certificate

acsbg.eu
allmunchkins.com
almostrobotic.id
anakeesta.get.staging.alpinemedia.com
www.andrewstunts.com
www.apexconsultant.org
tickets.apk-gent.be
staging.link.arcadia.com
argumenta.blog
www.atberry.co.uk
www.blackpoolone.com
app.bole-bole.com
www.calculatucasa.com.ar
www.ceribbo.com
charlap.co.il
chililisoup.dev
chillguyz.io
chrisburton.io
climbingstation.hu
coworkdepot.com
www.damienoliver.com
www.devship.in
v2-admin-dev.digiqc.com
dinoroam.app
www.disruptlabs.xyz
www.dkrosalesservice.com
www.dumphq.com
edaru.su
www.eegedu.com
www.eras.jp
family-find.com
flip-chat.com
geoffdavis.net www.geoffdavis.net
app.getpidgeon.com
gratricollection.com
greywolfcreations.com
gutguru.health
panel.happic.io viewer.happic.io
www.hatimdagit.com
hemocracy.io
heychrisbarr.com
insectbyte.com
insutora.dev
one-education-advisors-stage-4.ischoolconnect.com
www.ishikaboutiqueusa.com
www.italianwineeducator.com
kiagranby.com
kimcoachinggroup.com
www.klappogklem.no
kuking.app
www.kummavalo.fi
learnbread.com
lecanary.com
logo.net.ua
www.mac-n.com
manugrid.com
margaretbb.se
www.monkview.com
nedevelopers.in
link-agicont.nibo.com.br
nukleuslabs.com
www.objectivity.ca
www.osi.io
ournextreality.com
perfoflash.com
app.pikonik.com
polar-moment.com
app.porttea.mx
prototypetw.com
rahavefoundation.org
ramsinzomaya.com
reshetmashkanta.com
cardsagainst.rezonant.dev
gifting.saladdays.co
saudimatchmaker.com
app.shelveapp.com
67.smoulasoutez.cz
sommai.uk
chipin.songsstarthere.org
www.sppott.com
www.staronboard.com
stocksorstonks.com
meetspa.studiossolution.com
tachyonet.cloud
just-in.texnrewards.com
thelazy.co.za
www.thornguard.dev
www.tls.tools
app.tripinarium.com
tsutshiau.com
docs.core-api.usesofia.com
inventory.usp.center
veilguard.dev
esign.vldzgroup.com
www.waterman-boek.nl
xconnect.xccelerata.com
yampli.eu