Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=container.lxnavigation.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
May 30, 2026
Valid Until
August 28, 2026
35 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
FF:82:BA:E9:A0:D5:F3:43:2D:6E:E5:AF:64:03:19:34:E4:9F:88:6E:E4:66:D8:03:23:DA:D2:25:4E:6E:BD:D8
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
cottonspace.com
pdcatch.is.amplifiedit.com
dev.aplano.de
go.artel.app
www.backwood.design
dev-cda.bens-groupe.com
courses.bezkoder.com
www.web.bhasagrid.com
www.bno.bydgoszcz.pl
www.bpotecnologia.com
www.brianmoneypenny.net
www.cherylasteele.com
manager.civitime.com
auth.classchat.cc
classreads.xyz
my.classroomapparel.com
democlaudominicana.clau.io
www.comunidad-vecinos.com
financialgenie.creditpro.hu
stonehenge.creditpro.hu
admin.crush-words.fr
darceo.com
davidhicks.dev
dexcalidraw.com
divebuilds.ie
dopeafterdark.com
www.ecomdyno.com
entornosim.com
erikohlen.com
essoapps.com
fanorcan.com
olympiadregistration.fide.com
projects.flexhero.de
devfest.gdgsxb.fr
gellit.net
getclerked.com
app.glueon.io
app.gokhalebandhu.com
www.gracenotary.ca
healthplugpharmacy.com
ttd.hkoil.org
admin.ime.bo
infyni-kids.com
admin.khamvong.com
lambunao.legisled.com
container.lxnavigation.com
lyle.fyi
www.madelenececilia.com
masdar.dev
mitrho.com
msellerchart.com
multimarca-cundinamarca.com
www.muontelescope.com
musicplusfood.com
nateperkinsmakesthings.com
artistos.nishaad.art
eye.omen-audio.com
padergo.com
www.padergo.com
grdc.parkalot.io
comunication.paroledevie-orleans.fr
phillydu.com
pinkhamtraveler.com
plastoctoy.com
test.playhenry.net
embed.podkite.com
dev.presentation-upload.com
proguru.jp
projecttag.jp
protaxsb.com
redforestal.com
www.redsquid.tv
hortolandia.regularizada.com.br
remishinehealthcare.com
pepsico.remotestate.com
soccerlegends-link.rhizatech.com
riffthegif.com
streaming.romneystudios.com
ruokaloki.fi
ruthzota.com
manager.dev.s-learning.co.uk
resume.sam-redmond.com
sgtclient.sgt-dmr.com.uy
shivcontrol.in
sidehustlestack.co
wellness.simpexo.com
app.smartflowww.com
uat.snowjoe.com
solitaireplayfree.com
spskidz.com
stefanveispennerup.com
www.tcat.app
www.teaganskitchen.com
www.tenery.cc
tombridges.dev
tulukasgodelestero.turnosweb.app
iam.vezham.com
vikeshmittal.com
releases.wasa.app
wellprofiler.com
Other domains in certificate