Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=shepherd-international.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 17, 2026
Valid Until
November 15, 2026
85 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
97:7B:85:45:68:35:D9:2E:55:B5:A7:43:B4:D5:0B:B1:2F:99:9D:61:CA:12:75:B0:17:7C:D0:B0:F8:65:B5:BE
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
danicaminos.com
app.2023.com.py
howdens-catalogue.3dcloud.io
admintrips.africanlisbontour.com
agendabox.app
hekmaai.ahmedltd.com
link.allright.com
amitbhawsar.com
app.aneyeonbeauty.com
aquaticpoolmanagement.com
de.arkhamcards.com
staging.artuik.com
askbangaloretaxi.com
www.associazionefelicidad.it
www.backyardbuilding.com
bcomp.ca
auth.birilee.com
api-docs.blackpurl.com
audit.bureauvalley.net
app.calibracionesdurango.com.mx
compramostumoto.com
www.cozeecratestudios.com
fiizdrinks-orders.crispnow.com
demolizionestabilivecchi.it
devgero.com
dmarketing.ro
widget.docendo.eu
dolphware.dev
eliseejewelry.com
www.endoftheworldpodcast.com
escudaranch.com
www.exploringsmartmusic.net
www.fabiosousa.pro
finestdoorsmiami.com
finzaiko.dev
fluentkids.com
www.fwdfinancial.io
admin.cointabil.gactec.com
gaston-services.com
getopensafety.com
greenminihost.com
gustavofreitas.dev
rv.healthspaces.io
helenbauerdesign.com
lastube.hooqle.com
howthecookiecrumbls.com
icetrayray.com
irowebdesign.com
jennayousef.com
jointownhall.com
console.jwplayer.com
elaine.kaienet.com
kattawar.com
www.kaylamelton.com
apphost.keyin.pro
knbrindle.com
latticerobot.com
app.lidlplus.com
maxenn.com
retort.mehar.ca
yjs-test.moondungeon.com
fire.moonlet.cloud
mssulionscamps.com
www.newwavesintl.com
nihankarakurum.com
ads.novacash.co
doctores.novansapiens.com
www.nuvoxx.ca
ourafricansafari.com
oxford-fitness.com
www.pacificpow.com
palettenest.com
auth.psifi.app
patient-access.purview.net
www.quantanal.net
salavirtual.retransmision.mx
baywa.rgateway.it
roammtb.com
romeroyasoc.com
www.romeroyasoc.com
www.sathtern.in
savetherobbin.com
www.scamwisesquad.sg
scoreboards.app
auth.sendy.app
shepherd-international.com
www.shwas.org
quest.smartms.net
todo.solarsail.work
www.sportfan.ro
sslabindia.com
stardustmusic.jp
www.sthokar.com
sunna.sn
tauiker.com
theutmbuilder.com
vapaux.co
villacomida.com
vrbet.com
weleadai.com
Other domains in certificate