Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.brentwooddermatology.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 11, 2026
Valid Until
November 09, 2026
89 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
DA:7D:9B:FB:D1:28:4E:5A:7C:FD:AD:B1:A4:FE:45:25:5E:4C:BC:F0:10:3E:8B:14:6D:C7:AA:84:01:37:BA:05
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
digitechsecurity.ca
www.1600-8274.com
pix.2rpay.com.br
chamberlain.aaronkeller.com
loppe.docs.ameroservices.dk
www.analisecasa.com.br
androidgeek.in
anurag.ch
anvikhospital.com
athleticroomprops.net
austroengg.com
dev.automatoai.com
bhandaraapp.in
www.brentwooddermatology.com
fsapp.brpsystems.net
dev.builditops.in
ppl.busoft.com.tr
carrozzeriacupparo.it
playground.cervonwong.com
damgiagroup.com
denis-mathan.com
portfolio.devexatechnologies.com
dioptre.in
wofe.divarch.com
docdankos.com
pfmos.drtis.com.br
ecomodo.it
ekonomipanel.se
clasificados.elsudcaliforniano.com.mx
lobby-uat.emaraplay.com
esatoivola.fi
esaumaus.fi
firebaseapp.exhands.org
mobile.extra.ge
www.fabianojmoura.com.br
gratuit.fayafree.com
fernandoaoborges.xyz
gmaf.com.mx
btt.hazeapps.com
transfers-uat.hotwax.io
www.collect.huruinitiatives.com
intergentec.org
iotaobjects.com
www.isso.ooo
itsdigital.com
mta-sts.ivan.costa.nom.br
adpulse.kantoprojects.com
magaza.kayzerorganizasyon.com
keralaneetacademy.com
klitch.com.au
app.konect.to
test.krusche.one
mta-sts.leila.costa.nom.br
www.limhenry.xyz
litchfieldparkpreschool.com
www.lostfocus.org
account.lotworks.ca
app.mable.co.uk
magnopustech.com
mobilerepairandmore.com
hexdate.nabilamerthabit.com
www.ncraffletool.online
kipu.nunaid.com
www.oklocare.fr
optimisticfuturist.au
get.passify.es
www.pattalcott.com
playmyday.in
poppyplaques.co.uk
us.preventure.live
pupcoach.com
qedoshim.mom
www.reserv.ooo
rochefort.uk
www.salvatgia.cat
contract.samschmitt.net
dnd.samsite.io
aragon-dao.securely.id
www.seijishukyoproyakyu.tokyo
www.semessaoudi.com
education.mysore.servicemall.in
staging.shop.link
sidqly.com
simpledisplay.app
snapalytics.co.uk
speechkeys.io
app.sportyfind.cz
stipendly.se
client.symmetryapp.org
tareqabelkaidiaegypt.com
www.thedatatalks.in
www.tocially.com
app.triplist.eu
ultify.app
app.vimageapp.com
volunteersimpactinitiative.org
www.vsmlogistics.in
ktelesys.wowdesk.jp
legacy.app.yamm-staging.com
business.yollty.com
Other domains in certificate