77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.ewhallet.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 07, 2025
Valid Until
March 07, 2026 87 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
EC:A0:6C:EC:D3:B0:2E:0E:61:0E:47:61:49:C5:74:60:65:BA:AD:F1:C1:A8:D3:F6:6E:EB:8C:61:8D:CD:23:BA
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
covid.liamatkinson.com

Other domains in certificate

cp.3meel.com
abejike.com
demo.sellerhub.ailumia360.com
london-requests.appliedinnovationexchange.com
www.apps4admin.com
supermercadosaoroque.appshare.com.br
www.aysh.com.br
baletrona.com
barefoot-vitality.com
app.bencressallfitness.com
admin.berop.cz
bibleforyou.app
www.bishtbytes.com
www.bodynova.ltd
breadboardsimulator.com
www.busanbus.app
demo.cashcowrewards.com
casting.castingapp.com
quiz.ciphernutz.com
rrbk.clevereducate.de
theventi.apps.flyground.co.kr
vincent.cottin.se
app.creativetokyo.com
cricket.poker
dawczak.pro
edition-weho.teaser-demo.dbox.com
dema.dev
www.destinationabroadlimited.com
tools.devhonorato.com.br
www.didrow.com
www.djjoelkupis.com
www.dorix.ai
doubtnut.org
coimbatore.dropstaxi.in
erickandres.site
vonquintus.eventtravel.app
www.ewhallet.com
imageviewer.f5.si
faramatics.com
filter-live-music.com
fractorize.com
auth.giovanniliboni.it
app.gmailmeter.com
www.goblintown.town
gorillasports.in
www.habit-loop.com
www.hagel.app
htxbeehiveremoval.com
www.ielnexus.com
www.immigrationnationusa.com
mathsbyjaideep.indiandevelopers.org
intalko.id
stage-arbitrage.internal-fun-chegonibudj.com
www.invoyze.com
www.jeff-life.com
jeremyroy.co.za
www.juttame.com
jwal.kr
ti.k-9apps.com
kadirdonusum.com
www.kaitlinandnorman.com
dev.portal.kardia.no
ppl.environmental.katapultwebservices.com
kejubycarmen.com
index.kreva.be
bp.kudosone.com
www.kuma.bio
cesba.lapieza.io
cockpit.leaf.swiss
www.mastermealplanner.com
megorder.com
miles-tracker.com
fsg.minhacentralonline.com.br
www.missythegod.org
mnassa.com
controlroom.mondora.com
mudo-chungdokwan.com
helper.nestpayroll.com
www.officekitagawa.com
payby.tech
www.schedule-up.com
weather-forecast.sebasbad.com
www.sherringtoncentre.org
www.sporepatrol.app
srivats.dev
stamp.team
summerof90.com
rastreio.superfrete.com
www.tamarinlabs.com
embed.undock.com
admin.vajro.com
storybook.vezham.com
radio.vidoctor.vn
waitupgame.com
www.wecountwords.com
wegoalongclub.com
avukat.wellztech.com
zachgreer.com
www.zahr.io