Open
Cached
·
just now
80/100
SECURITY SCORE
Certificate Information
Subject
CN=miraze.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
January 12, 2026
Valid Until
April 12, 2026
81 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
10:81:EF:5C:12:F1:3E:52:28:A5:2D:8B:2D:51:9C:34:B7:A5:09:F2:4A:49:72:AE:E4:93:F5:71:62:F2:4F:B6
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • You have authorized 10 CAs - consider limiting to only the CAs you actively use
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
Subject Alternative Names
100 domains
dstech.digital
app.acadioncloud.com
www.acadioncloud.com
actuz.com.br
ajmotor.net
manager.aperitiv.it
bhkapp.hair
www.bhkapp.hair
api.blinq.app
www.boaznradar.de
canifi.com
fuck.ccwu.cc
cleaningjob.app
staging-homesecy.coffeebrowntech.com
cpost.io
www.crir.net
www.crunchycashews.com
cubixpanel.com
aghgestioninmobiliaria.dataprop.cl
vn.dnc-automation.com
docagency.com.br
www.dollface.net
easyconvertit.com
ecobrite.cloud
smartprojects.eid.cl
www.falconixsystems.com
fishchoice.in
www.fitnessmonkgym.in
flickster.app
www.foreignconnect.org
pay.sandbox.assurantuk.gr4vy.app
www.guwei.lol
heartheaded.de
hkytsa.org
ideaholiday.com
www.immigrationroutes.com
infer-know.com
cmstest.inseat.menu
inspecthub.app
auth.ironsteadlabs.com
www.jasperspringael.be
trades.jenceo.com
juliemutschler.de
staging-roles.k-9apps.com
inventory.kensingtonfood.com
dashboard.kurios.la
app.lasalita.ch
econtract.lasyn.com
lbs-im-landkreis-esslingen.de
casting.lefty.io
dl.letsreto.com
manage.linkednet.com.au
www.locassi.com
www.lulsoftball.com
sushimania.lupi.delivery
maison-aimard.com
www.maison-aimard.com
socialreact.marcosdayan.com
suvo.masstechbd.com
miraze.com
control.nextgen-studios.com
truco.niko.works
club.nirelcr.com
oficom.com.ar
houseofinterest.olsonify.com
omnialab.org
openforprofit.com
app.oslobrassfestival.com
www.owneroperator.ai
paulandchester.com
www.paxhorizonwealth.com
punyachadabewala.com
qudex.xyz
admine9855b42086ed507b65bf8650c1d9dcf.rada-aludwan.online
reachblueline.com
rmo.io
admin.rotoolbox.org
sciuskku15.com
scribaly.com
seallogistic.in
old.sebdoe.com
shubhplasticsindustries.com
consumidor.sidneinardini.com.br
slates.co
solcombine.com
tablixy.com
techandcommercehub.com
theaifinanceguide.com
www.theexamfactory.com
www.theherbaldigest.com
theledgerapp.com
theonetik.com
www.treecrafted.net
tunespire.com
u482.net
valuetaxhelp.com
warrantydock.com
www.whocan.dev
www.willburgis.dev
www.xcan.me
Other domains in certificate