Open
Cached
·
just now
86/100
SECURITY SCORE
Certificate Information
Subject
CN=dentalreach.app
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 08, 2025
Valid Until
January 06, 2026
49 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
7E:3D:16:3E:5B:DC:E3:74:50:48:60:38:22:D5:FF:1B:2C:01:45:1A:6F:20:70:C1:22:C8:9F:1B:79:39:DD:B9
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=60000; includeSubdomains
Content-Security-Policy
Basic
default-src; base-uri; connect-src; +10 more
default-src 'none'; base-uri 'self'; connect-src 'self' https: *.googleapis.com *.cloudfunctions.net *.firebaseapp.com; frame-src 'self' https: *.firebaseapp.com *.youtube.com/; object-src 'none'; script-src 'self' 'unsafe-eval' https://*.jquery.com https://*.google.com https://*.cloudflare.com https://*.bootstrapcdn.com; style-src 'self' 'unsafe-inline' https: maxcdn.bootstrapcdn.com *.firebaseapp.com use.fontawesome.com fonts.googleapis.com; img-src 'self' blob: data: https: *.google.com *.googleapis.com; font-src data: https: *.fontawesome.com *.gstatic.com *.googleapis.com; frame-ancestors 'self'; form-action 'self'; block-all-mixed-content; upgrade-insecure-requests;
X-Frame-Options
Good
sameorigin
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
dev.atbeva.com
2018.khaokheow10.com
dwr-sectional-test.3dcloud.io
harano.abc.br
akanni.marketing
portal.akrivisteam.com
link.alggrands.com
www.altraders.nl
aquaroseirrigation.com
staking.aria.fyi
www.astrohimalaya.com
commandes.baguetteabicyclette.fr
www.bastet-app.com
bcap.wtf
stepzero.beneprog.com
besideapp.com
bimseas.com
binalbruno.com
bins-bin.xyz
app.bleanq.com
app.bookmarkspanish.com
apps.bpmjapan.co.jp
cemor.org
www.chaton.io
zanzai.chatwithsteiner.de
heart4kids.dostesting.co.ke
comandosvigia.com
admin.crossfittorino.it
www.danq.jp
dentalreach.app
dhpinnovations.com
app.digisense.ma
messages.dev.evertransit.com
www.excellencembs.com
frenitime.se
gatconsulting.org
www.gautiervanrossom.com
anda.givology.org
ilikepixels.co.uk
suitesdemo.inseat.menu
woodstockinn.inseat.menu
intersphere.earth
jarevalo.dev
johnny-airlines.co.uk
share.jointheunicorn.com
joshuagibb.website
www.kaistreeter.net
www.kamilpawlowski.pl
docs-qa.kisanhub.com
knowjay.com
leftisright.co.uk
lilawonline.com
linefeed.jp
ln-training.com
locotrade.app
www.loplist.info
assets.lumiere.is
macpawcleanmypc.support
martinson.io
dev-web-admin.meraoffice.in
micropio.com
airsideapp.mohemian.rocks
www.morgannels.org
app.mybookingo.com
www.nateabel.com
nilssimons.me
notjustany.one
www.npmresearch.com
onlypkcould.com
operadores.com.br
perspectivas2000.com
admin.peymynt.com
a.phoneduo.app
auth.placehires.com
pocketfarm.planckunits.io
www.rasela.net
raullarosa.com
redvsblue.live
romanspage.com
portfolio.s-sh.info
saludconciencia.com.mx
scieinz.in
scontrina.it
skul.in
et-matches-wilfred.skunk.dev
blog.solbergairport.com
stichtingkoh.nl
admin.stratcare.app
www.studiogr.pl
www.tchelectrical.com.au
thezach.website
www.threshold.us
console.security.ubutouch.com
unevenbits.com
upwardstudios.com.au
www.vicpoolcomplianceinspections.com.au
www.watching.plus
change-of-routine.wccprojects.com
app.wow-plus.com
forum.aevuifc.wuaze.com
Other domains in certificate