Open
Cached
·
just now
80/100
SECURITY SCORE
Certificate Information
Subject
CN=demo.myvelocity.in
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 25, 2025
Valid Until
March 25, 2026
84 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
50:05:F7:E6:6A:CF:30:84:EC:4F:56:15:16:E4:76:31:43:88:85:16:BF:50:E7:1A:6F:9F:27:73:B5:23:2B:05
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
Wildcard CAs
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • You have authorized 6 CAs - consider limiting to only the CAs you actively use
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
Subject Alternative Names
100 domains
deercrm.com
ext.actinius.com
mdai.mystic.ai.kr
amanai.in
blog.august-extreme.link
aurohomes.in
admins.borkuafrica.com
venus.bpmcenter.pro
bugsbunny.ch
repo.cutlasscorota.com
app-dev.deeddelivery.com
www.deekuinsights.com
designface.se
www.divyan5h.dev
celikdisticaret.easyapp.co
gurugurme.easyapp.co
easyeditor.co.uk
admin.easysignage.app
edgebyte.in
www.enunicorn.com
novamed.filokar.com
forrisk.com.br
neldata.freeway.com.ar
gamegou.com
gaydalajara.com
www.gazelledriver.com
whiteboard.giger.dev
godrejflatsbangalore.com
www.godrejflatsbangalore.com
guna.ph
staging.admin.photo.harimau.run
history.hdu.help
www.hypnotize.nz
aqar.inmogr.com
app.insig.ca
dev-data-ingestion-app.jerimed.ai
www.kalinowewzgorza.pl
www.krka.works
lavaderopalermosoho.com.ar
leadeazy-portal.app
www.lelije.et
www.louiseetjohn.fr
bestdeals.masterseufuturo.club
plastics.mayamd.ai
lptour.mbility.app
meulora.ca
mooksel.dev
demo.myvelocity.in
nidonombres.com
pmd.opeople.kr
podcast.overbuild.top
www.overplus.co.jp
paintingworks.in
penkeyconcierge.peninsula.com
www.plastics-designer.com
play2d.com
app.plustalentglobal.com
cus.pnv.vn
www.preppinbee.com
www.promobell.com.br
www.psychosoftwaresolutions.com
recargaspacuba.es
app.referralsbooster.com
agendan.relyit.se
valpri.revolus.com.br
track.rxoconnectperf.rxo.com
stocks.ryan-info.com
www.sangserene-house.com
firebase.skinvoyance.com
smedmann.no
spoutsoftware.com
wmushuffle.sqwadhq.com
wmushuffleadmin.sqwadhq.com
stefangeorgescu.com
www.pos.sunshinemart.vn
systheba-albrecht.de
tashbetz-family.com
tekotattoo.fr
telionhealth.com
www.telionhealth.com
www.theideasplanet.com
receipt-preprod.tiime.app
www.tischler-reisen.de
traygpt.com
trevia.app
ultimateandco.com
unavictimade.com
unfurl-connect.com
link.uvida.app
www.virulaine.com
www.vivetrassierra.com
app.vlifenow.com
app.vyctr.com
support.wataboda.com
wenyuar.com
www.whattosay.kr
wpktavares.com.br
www.wwvacations.com
jobwork-dev.zibma.in
releasenotes.zithera.com.au
Other domains in certificate