Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.dynamicnfc.ca
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
March 08, 2026
Valid Until
June 06, 2026 32 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D2:20:A9:F1:66:85:77:B6:C1:38:21:58:5A:E7:8E:50:F8:C1:CE:ED:DC:1F:CE:12:E2:9C:C2:05:B8:FF:D7:8B
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
dyncha.com

Other domains in certificate

app.agents4.com
agentstudios.site
www.akashrai.me
al-thawheed.org
www.allanjp.dk
appmurah.aparoo.my
gym.aurafitness.club
beyondbullsbears.com
bleustudio.kr
broadcastmyself.com
canifight.butnoonegothurt.com
signer.caisias.com
www.calcmei.com.br
campaign360.co.ke
www.careerrasta.in
carikciogluhukuk.com
catalystic.com
www.chansnest.in
www.charlietour.com
www.cloudhealth.co.za
www.codefacto.co.uk
cashier.commonbrew.shop
tetronome.compiledvibes.co.za
copybird.store
auth.cumalochannel.com
disneyblog.com www.disneyblog.com
dogma-ad.com
www.dynamicnfc.ca
ebox.mx
eduspace.lk
www.app.eka-ai.in
www.epaepa.com.br
portal.esstampilla.com
app.facadetc.com
fever.community
pos.fhbcmorganton.org
fortired.cl www.fortired.cl
www.frostycup.live
auth.ganttfather.com
gauming.com
giftingbridge.com
gokandytaxi.com
grhassociate.info
app.gtthetachi.org
gzkeyi.cfd
indrian.com
archive.jesseray.co
auth.kabalgo.com
www.experimental.katkus.eu
keystoqualitycontrol.com
khanhlq.id.vn
play.ko-solution.net
ktsco.kr
www.kunz.store
labragourmet.cl www.labragourmet.cl
mariage-severine-valentin.fr
www.metrohelper.com
mezrioui-hakim.com
www.mill.tokyo
www.minhafono.com.br
qr.nhaphangorder.vn
www.nordmodulareditor.com
auth.orbx.space
pdqtech.co.za
ohmydogsandcats.pet-appointment.com
pldelnord.cat
psynma.com
www.quillnote.co
reachfurniturepds.com
reachfurniturestudio.com
auth.realtokyoestate.co.jp
kindred-kidneys.rotaractalumnimora.org
safestash.com.br
www.saqixpro.com
sbc-sarl.net
d4trade.sefir.dev
www.shivomlabs.com
wrap-it-up.shoo.ovh
shortstacklabs.llc
sincereautomotiveadvisors.com
tix.skey.network
www.smart-code.click
solae.info
solutio.team
ps.redirect.sovoto.app
keyura-collections.styleforce.in
sudsakornmuaythai.com
www.thegreat70s.com
gopayments.thinkdigital.co.za
www.topsidetipoff.com
twodeeband.com
bestellen.veneziadorsten.de
victorvaz.dev.br
www.vireum.com
visionaiautomation.co
app.vtcpoa.com.br