77/100 SECURITY SCORE

Certificate Information

Subject
CN=qalames.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 30, 2025
Valid Until
January 28, 2026 77 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
98:71:A2:EB:C9:74:13:88:FE:88:EE:22:14:EC:61:A3:80:EB:56:5A:AB:59:F1:CD:F4:3E:6E:26:5D:3F:7F:99
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
cv.pete-woods.com

Other domains in certificate

app-staging.29k.org
www.aethon.fr
test.alsakerhytte.no
customers-panel.teorema.app.br
cdc.benhvienducgiang.com
beebot.bitsbee.net
todo.bjarkebjarke.dk
www.browserfocus.com
culinaress.cateringportal.io
clwnajoo.fun
testusdz.cmouse.app
www.g-fit.co.il
compufactsystemscrm.co.in sdlm.co.in
www.codesharkai.com
coursematrix.live
tracker.dajsipauzu.sk
datacert.ro
pad.diddo.education
divyanshvijay.in
www.drvikramaditya.com
www.dtcwarehouse.co.za
dutz.ro
www.easydoc.jp
app-test.english-od.net
www.envieer.com
www.esgie.com
chatwidget.fredx.dev
www.dev.admin.gestio.school
dev.getliszt.com
globalgors.com
www.hawaiiathleticscamps.com
curator.heny.app
hermannfreiburg.de
payment.hiretime.nl
buitaduc.id.vn
www.inter-routes.com
www.iran-kish.de
account.irishcma.ie
www.ivanvotti.com
prodp2pclienta.ivr-platform.com
www.jamdesignsalterations.com
body-transformation.jgh-dev.de
admin.kabadmandi.com
www.kangacoach.com
www.karanmishra.dev
silos-mvp.lioda.xyz
host.liveparty.jp
www.auth.loukaaa.com
www.luminora.pro
www.maslab.io
staging.content.mathu.co.za
www.meergraph.com
meetmaeva.com
marketing.menfasting.one
metsights.com
mjdispensary315.com
mtcharger.hu
financeiro.sifra.net.br
nevansgibson.com
www.ntcmuhendislik.com
app.oleschool.org
beta.palmexus.com
www.paolo-manlunas.com
www.pianetabimbi.it
www.pointseasy.com
demo.praservirmelhor.com.br
prototypekit.com
qalames.com
admin.quickjobs.cz
democuriosity.rebus.com.co
lp2f.resperate.com
partner.rideplus.in
liquidsms.sarequl.me
serverlessworkshop.dev
www.shrutlekha.com
vtc5.simpliroute.com
office-dev.sovoro.kr
speech2subs.com
spirus.app
www.squaregrid.com.br
subaerial.de
synergeticquotient.in
tabletopalley.com
trip-service-en.staging.tada.dev
development.tadaexperiences.be
payrollv2.texcloud.app
pay1.thechefkart.com
amemurasakaba.tsubohachi.co.jp
v2amdischarge.app
vermehrung.ch
staging-app.virtu3d.io
l4.vote62.com
www.waxvm.com
weles.dev
wiseguyinvestor.com
yukalizola.com
zanegrowth.com
app.zkmakers.com