78/100 SECURITY SCORE

Certificate Information

Subject
CN=demondre.dev
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 12, 2025
Valid Until
January 10, 2026 40 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
6B:C2:9E:93:6D:33:1D:9E:7F:B5:A4:01:8C:8B:94:C7:C3:65:FF:E7:87:70:35:CA:4B:4C:4E:92:BF:78:8F:C2
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Weak
require-trusted-types-for; report-uri; object-src; +3 more
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Present
ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Significantly strengthen CSP directives
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
dev-share.litely.life

Other domains in certificate

www.abhishekkrishna.com
app.acuitymd.com
www.airsmat.com
albinlandgren.com
aminoapps.dev
www.amrwaz.com
www.artwithfun.com
webapp.askpinkypromise.com
astronautlabs.com
autoapp.com.ar
fbpl.avastbrowser.com
baraotraining.co.uk
debug-diveshop.belugadive.com
www.benmeeks.com
bondvet.com
bowvie.com
dev.brightsource.com talents.brightsource.com
www.camm.mx
www.celushop.com.ar
cerna.cl
chatapp1.site
team.chedi-itech.com
chouhanimmigrationservice.com
sunpower.com.hk
intraday.commo.dev
link.conshumeur.com
cvtalize.com
datascienceinsights.org
demondre.dev
v2-staging.digiqc.com
www.drugdealapp.com
emailcheckerpro.com
erlendbrodal.com
ctg.experiscolombia.com
password.exploradogs.com
filmbase.dev
pl.futurecoder.io
store.globalgarner.com
recipes.higgins.dev
iicio.com.br
jeu-lipton-2025.fr
jmdiaz.dev
fitfinder.johnotu.com
app.kaiclass.com
www.kaijunka.com
app.keeportoss.com
storycorps.preview.app.konch.ai
www.landxgh.com
laurensvoogd.nl
www.lexkisby.tech
www.lifeistechafrica.com
underwriting.listfunding.com
www.matzon.com
www.maxkhl.com
medentec.com
www.mysteryfour.com
app-staging.notyphi.com
offiprim.com
vellore.onewaydroptaxie.com
ourmandobeachbash.com
www.palapa.ai
mint.paperpeople.io
testing.pitchspot.co
stage.plantedpeople.com
www.prayandfast.io
qmeq.me
console.rcloud.dev
www.react-tutorial.app
clientes.recora.mx
redez.io
rekall.in
open-platform.richku.com
admin.rowcave.com
flutter-note.rubydog.jp
carrier.rxoconnectuat.rxo.com
recipie.scottysseus.me
sharelot.jp
sherigo.com
walten.soklan.com
spaces-ai.com
www.sriravikiran.dev
www.studease.app
flutterweb.superkhans.com
retailpharma.techcompose.com
techsolvepro.com
train-tavie.thinkvitalshh.com
sandbox.boost.thndr.games
tomhibbers.com
truckvisit.com
turongtek.com
portal.shankar.uk.com
www.unsick.in
useassured.com
utyproject.com
www.vetahytta.no
vivekkadre.com
like.app.ws.agency
yokomotod.dev