Open
Cached
·
just now
80/100
SECURITY SCORE
Certificate Information
Subject
CN=leilflowers.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 06, 2025
Valid Until
March 06, 2026
46 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
25:8E:CB:78:9F:68:FE:6F:AD:39:EA:DE:D4:F0:75:CA:EB:BD:16:AE:CA:29:3D:C9:BE:BB:C5:6D:76:D3:C3:3F
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
Wildcard CAs
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • You have authorized 6 CAs - consider limiting to only the CAs you actively use
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
Subject Alternative Names
100 domains
codemagicx.com
aivorallp.com
blog.aldebjer.se
www.appscatolicas.com
appshare.com.br
arbolesibericos.es
www.aviator411.com
batamx.co
team.bbcmaestro.com
www.bnbdelelie.be
auth.busability.com
cesar-contreras.cl
www.cinemashup.com
clearancecentral.ca
aadharhealth.co.in
www.quickplay.co.in
coloaid.com
auth.contractors.com
dev.depfly.com
www.devite.pl
drviniciusmartins.telemedicina.drtis.com.br
www.dwebbox.com
ecoemedicina.es
educhunks.com
dev.triple-kenya.fairchain.org
www.furaginum.pl
tokyo.gdgjapan.org
geosincal.com
links.giapha40.com
godwyn.dev
gorillasports.shop
cp-stg.gyms.jp
haus-shiraz.de
ihss.me
janole.fr
quantum-travelers.konahart.com
www.langtidsvarsel.no
leilflowers.com
admin.lightningreach.org
news.mbisconsulting.com
mbuyatech.co.za
www.meistercards.com
www.mertyacan.com
moriapharm.com
motchasoft.com
msoftware.pk
mycancerandketo.com
nailcheckin.com
cockpit.mentor.neccton.com
nela-foundation.com
forbs.net.br
app.new-hope.ch
crazy-ball2.demos.nuboservo.com
www.nucleate.io
staging.ownersup.com
show.pathway.vn
beta.phototag.com.br
www.pitagroup.vn
plus2link.com
sys.dev.puppycloud.com
purplepane.com
qollor.com
www.quanlymauthan.com
www.raptorcoatingperth.com.au
ravika.no
sami.pk
sarayucollections.com
seito.link
app.shopadvizor.com
www.singinglessonsnewcastle.com
www.sivaastudio.in
springvillecemetery.com
wemspringscavenger.sqwadhq.com
www.startupandrew.com
ysm.storymate.net
www.streamwear.com
synamic.com.au
synergyct.net
talkwell.net
fixparser.targetcompid.com
sam-admin.techroh.com
testdeciudadaniaitaliana.com
www.thedoneapp.com
play-test.thelastwordgame.com
portal.theseabay.com
time-drops.com
www.toolsdome.com
trackcryptos.com
www.traydi.com
www.tropicaloasisdr.com
turkaylar.com
www.uneakproducts.ca
www.utahtravelpass.com
volti.studio
webdev-boutique.com
wholeteam.ventures
www.xarmory.store
xevenmaintenance.com
www.xttream.com
yoya.soy
Other domains in certificate