Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.forget-me-not.app
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 08, 2026
Valid Until
December 07, 2026
87 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
CF:1E:79:10:79:8E:36:B6:AF:19:51:E4:2F:98:14:C5:B4:7C:D0:37:02:CB:36:25:55:56:7D:06:35:37:05:C5
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
dtravelit.com
www.admin.2value.ro
www.afterreps.com
ahcdevossen.nl
smartbar.aodocs-staging.com
www.axiantlabs.com
www.betterexpress.net
www.bigcirclecompany.com
bitmates.net
bkcore.lat
www.bkcore.lat
booknshow.in
meguiars.cardetailing.fr
cardjoy.io
app.ciedwizard.com
meet.columbia911.com
www.registro.congresoson.gob.mx
www.copenmama.com
admin.copitaly.org
app.cordaoecracha.com.br
crimsonbuck.com
auth.ctwant.com
log.dataly.solutions
haddox.decision.com
digitalknow.how
www.domdaria.com
www.eatwhat7.com
eibogames.com
agrilelang.elevarm.com
ephraimzimmerman.com
fatcatcoffee.com
firststreet.io
www.flightyfelongames.com
www.forget-me-not.app
business.fscegypt.com
painelteniscatanduva.g2canal.com.br
www.gesia.studio
adminhelp.getpath.com
gotrixsalvador.com.br
corollary.grimvier.com
hctz.buzz
helpboardapp.com
henryspickles.com
auth.typoly.idolypride.jp
www.impensuselectronics.co.in
www.inrelation.no
assets.insightlyticspro.com
intalioestates.ph
mint.kawaiitraders.com
www.kiangabiz.co.za
ar.kopiraittila.fi
kris-kay.com
kuroro.blog
www.lantsea.net
linggax.com
mia-location.eu
en-int.michaelsaschalau.com
mooretech.jp
auth.mybc.bio
myhoop.ca
cic.nefront.com
notadot-bh.com
nrglobals.com
www.nylenix.com
mobilewifi.operationnekonomics.com
faq.orderly.jp
pedigreeagric.com
phamtrungkien1904.id.vn
piclockapp.com
playground.style
pletacream.com
polatavci.com
protalk.game
www.oss.randomsense.jp
www.ravachedecor.com.br
reich-tec.de
salahudinmalik.com
semdt.com
www.semdt.com
www.sofiamantovani.com
spellmemorizer.com
stkatherinescogic.org
suatkaygisiz.com
bodaisayrafael.swanmoments.lat
app.system2.fitness
talk-health.co
techaus.mx
tefra.mx
thehoperitua.in
thehoperitual.in
psychopinball.tim.fi
translook.net
ubytovaniostrovnadoslavou.cz
visarepublic.in
vktechmedia.online
vvelt.xyz
besports.wearena.eu
xlr-konnect.com
zenomarquis.com
demo.zxxy.co.uk
Other domains in certificate