77/100 SECURITY SCORE

Certificate Information

Subject
CN=compress-ai.afi.dev
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 16, 2026
Valid Until
October 14, 2026 50 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B9:D4:2B:72:A7:BA:5A:9D:E5:77:E0:DA:EB:BE:89:C6:90:4D:F5:CE:F9:59:CB:A7:F0:FA:39:B6:9D:B7:6F:2D
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
compress-ai.afi.dev

Other domains in certificate

1029.online
cl.1touchrevolution.com
woodmark-cert.3dcloud.io
7webs.co.in
aisw.de
alqode.nl
mustardseed-nursery.andrewcarey.dev
ankitamagdani.com
www.aroundom.com
arsalabs.co.in
www.arzensoft.com
bdcalc.com
docs.betoto.pet
psc.bluehorizonsolutions.net
www.bugragezer.com
cabinetdentairemermoz.fr www.cabinetdentairemermoz.fr
www.cannabismd.life
www.cernosickasance.cz
maskin.clau.io
club32.co.za
comunidadefamiliacrista.com.br
das-portal.immo
drivv.in
scanner.drlivingood.com
e2x.app
www.ecchi-code.com
ecoluxecleaning.co.za
edydesentupimento.com.br
endzoneeagles.in
englaf.com
www.exlisto.com
luciano.forest-idc.com
mb.forkao.com
fortamazing.com
ftpservice.it www.ftpservice.it
www.fusspflege-gress.de
masks.grannyfab.com
gretatoffoli.it
loyaltyapp.groceryoutlet.com
www.haisoft.com.mx
helpinghandoverlay.com
www.hexus.dev
millie.howlin.ie
admin.ibefpr.com.br
decider.ibjects.com
www.jawadnazir.co.uk
jkithome.com
justabible.org www.justabible.org
app.demo.keeportoss.com
www.kotlinquiz.com
hr.kukerja.id
kyleperkuhn.com
lbrooke.com
leftcoastoverland.com
lordsgarden.com.br
www.macro-cheat-sheet.com
foko.magson.no
manzarhaq.com
meowtheinfinite.com
dev.mercadosliz.com
app.metatrade.life metatrade.life
dev.mylivox.com
ngetimoon.co.za
notaspampeanas.com.ar
atmos.pairat.dev
patrick-energie.com
api.planless.com
quemadosporlaindustria.com
mobile-dev.quincus.com
telemetry.rpr1.de
insight.rutemartajansone.com
spacebook.salahanwer.com
dev.scanafy.de
shkolale.ru
smartsports-ai.digital
dgr.snps.edu.in kb.snps.edu.in ldh.snps.edu.in
softwingdynamics.com
www.splendidnest.us
app.stockdale-coaching.com
supadilo.com
www.sustainabilitylodon.com
www.sweetemotionbook.com
auth.tabify.dev
link.talktalk.com
login.teacherdesignlab.in
testescolare.ro
theokoel.com
trackitapp.io
mamaseafoodemenu.triggersplus.com
vetera.digital
vicioteca.online
visualeria.com
kids.wumbox.com