Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=ask-konsultan.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
June 30, 2026
Valid Until
September 28, 2026
39 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
83:70:A8:6B:F7:8C:41:FF:27:00:BB:D7:56:7F:B0:E2:CB:62:A1:3F:AA:6E:51:4C:AF:FE:11:97:6C:2C:B3:DE
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
shipksa.com
app.shipksa.com
dev.shipksa.com
www.101creatives.ca
www.acttelecom.com
aeldoria.com
aidoslab.com
www.allaboardbitcoin.com
ashley-aj.com
ask-konsultan.com
ico.atheelcoin.com
autoskopen.eu
bali-buddy.com
www.behavioursaviours.com
billmaster.ca
www.billmaster.ca
playgroud.bitsrc.io
camsaimscs.com
co-op-tracker.com
codejo.com
comspense.com
corner-cutter.com
app.ctlcsc.com
www.customcreativecrafts.com
dancemember.com
acompanhamento.ecbsistemas.com
ecu-forge.com
elevatevitality.org
endurup.com
www.firelise.com
free3dimages.net
fuckingnotes.com
g7s.io
gebetshausenamalbis.ch
fb-ctt.gestao-frotas.pt
gimnasion.com
logbook-totals-calc.glidebook.co.uk
www.gm5residence.com
www.gorillamath.com
app.happencrm.com
helihero.co.uk
hulutravel.co
tasker.istitutomarino.it
developers.iwayplus.in
www.jacksonadamowicz.com
www.jamesboylepm.com
jona-love-nico.com
kedargokhaleadvisory.com
koblenz-mit-baby.de
app.ktisis.co
kwenaphora.co.za
klmb.lacroixsm.ca
lavvasca.com
app.lepremier.com.br
lymstudios.com
www.lynsis.ca
abc.md-ev.ovh
bpi.monacofoundry.com
monacominer.com
mostudioarts.com
link-conalt.nibo.com.br
www.nishinoyama.net
nkpag.hr
www.observatoryzed.com
app.odysseyportfolio.com
profile.omnevu.com
onechair.dev
obwebhook.orderbuddy.co
organicinscientific.dev
merchant.paynowafrica.com
app.quantumscienceai.com
queenglobalai.de
quicknetwifi.com
www.quoteninja.co
rawajom.com
sagnikbhattacharya.com
samuelhunterstewart.com
sandringham-darlington.co.uk
deskclock.sanjaygangwar.dev
sexshoppinamar.ar
sheltonc.com
www.shiroye.com
shoplite.rw
sikepang.simpelblg.id
skillcomb.com
skilllinkacademy.org
erp.spancomgroup.com
swingduetgolf.com
techready.live
tendercalc.com
tpl.tranzita.com
vendofyx.com
videogamesupercrossseries.com
webarcs.com
worldarena.club
worldlovesbangkok.com
x-auth.com
www.ybdt.ee
zebax.ba
zolights.com
Other domains in certificate