Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=www.winsleaguefantasy.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 07, 2025
Valid Until
March 07, 2026
89 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
AB:B0:BA:B8:4E:0C:F0:9F:59:73:45:F6:C4:1C:5F:84:BA:4F:D8:FD:EB:87:80:25:B4:76:EE:CE:54:9F:66:38
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
dev.nbati.me
client.albumhealth.com
reservas.aldeacampestre.com
monitor.aliadosgoo.com
hexental-apotheke.apoly.de
www.appleshakers.com
barnhill.arkansasrazorbacks.com
balticpharmaceuticals.com
trip.bam.cab
barrett-consulting.co.uk
beitri.com
www.bobolo.net
test.bolste.net
www.bpotecnologia.com
buroperevodov.org
otodeger.canotomotiv2el.com
capitalsalesmn.com
www.cherylasteele.com
cn.jerry.com.my
susu.com.tr
concernium.io
www.coraliegauthier.com
noticeboard.counselvise.com
dli.me
pfg.dominos.jo
clasificados.elsoldelcentro.com.mx
micha.elwarner.co.uk
mpreis.backoffice.emporix.com
redirect-stage.enkept.com
www.fabiano-cunha.com
app.faloglan.com
futurocode.com
www.fynd.je
www.getinthebin.com
getyourspec.com
gipszbetonlepcso.com
dev-cf.graindiscovery.com
rynag.graphyform.com
wine.hagakuregroup.it
harfang-valmeinier.fr
questions.hillsongconference.com
ivdm.com.br
cbt-homework-app.jollygood.co.jp
www.jonathancarrasconoriega.com
knesset.run
www.lauracastaldo.it
m.lecy.cc
lobarev.com
lxftfxtness.com
container.lxnavigation.com
mayagreentech.com
csm-demo.mosaicapp.com
munegi.com
navodaya.charity
pic-lottonz.mentor-sydney.neccton.com
quick-scribble.novaquach.com
www.nwforestworkers.org
admin.orchid11dayspa.com
roster.outline.org.nz
artworkfinder.osyoyu.com
clients.personatalent.com
ph7filmes.com
plasc.id.au
play-sheeple.com
dev.presentation-upload.com
mama.reillybrothers.net
pepsico.remotestate.com
www.respirerpilates.hu
www.restaurantemeilan.es
soccerlegends-link.rhizatech.com
www.roarpower.nz
www.rocklandinstantcopy.net
members.runcleobury.org
share.rw-12.id
connect-customer-ng-admin.rxoconnectdemo.rxo.com
resume.sam-redmond.com
www.segevgershon.com
seritilearn.com
sharaftona.com
wellness.simpexo.com
app.smartflowww.com
solitaireplayfree.com
www.soulofeden.com
sportsunityapp.com
square-garden.de
www.staige.it
sudoku.game
quiz-app.szabonorbert.me
demo.tapacenter.com
tdswholesale.co.uk
dev.technotriumph.app
christmas.tonyzheng.xyz
transitaxmexico.com
vasuchetty.com
calculator.vaxthefrontline.com
iam.vezham.com
www.winsleaguefantasy.com
www.witsarut.info
hdfcvl.wooqer.com
yoonicode.com
Other domains in certificate