77/100 SECURITY SCORE

Certificate Information

Subject
CN=fooncash.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
January 20, 2026
Valid Until
April 20, 2026 88 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
84:C0:E4:66:01:6D:48:AC:33:68:E5:01:F9:51:2B:01:23:92:A4:B1:0D:04:B7:68:E9:A6:F1:68:0D:3A:43:00
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
e2e.web.aglive.com

Other domains in certificate

www.3mount.com
www.adon-marketing.de
agensdesign.com
app.aicalendarpro.com
stingray.airfind.com
www.airvapps.com
colori.albemala.me
ct-testing.aldointegrations.com
alrashidconstruction.com
freshcut.appsaucy.com
doc.dev.appsonair.com
www.artschool.lv
atem-app.org.uk
elab-staging.azelis.com
api-docs.b2bninja.com
bettynwoks.com
bhadhraprojects.com
sensor.bilimkamyonu.com
api.bistrochat.com
google.blastronaut.co
hub.blueenergia.com
www.bluestackav.com
mysarca.bmarken.com
stargaze.caarya.cloud
cafecouture.fr
stories.calebmiller.org
precinctmanager.carl4beavercreek.com
catawbaindianscamps.com
quickpick.cbingham.com
centrebugafer.com
chilemasajes.com
www.chithien-tcn.com
chscompclub.com
chynarobinson.com
sass.cloudburststudio.com
www.kapildevsharma.co.in
codeauditor.com
www.codeworks.com.ar
dev.competitivemind-tecnologycloud.it
www.confor.tech
devtek.info
www.digitetti.it
climers.for.dinii.jp
easystory360.tools
api.dev.ention.eu
fooncash.com
fdx-qa-ideacloud.forgedx.com
onlineexhibition.freedomanatomy.com
www.gorgerowing.ca
grwb.com
blog.hachi868.com
hashworkz.com
chh.hmh.kr
www.hmzones.com
homeon.ai
book.hopencarehomeopathy.com
app.irrigrow.com
dev.johnshortland.com
joose.online
www.kargoroo.ca
kerafyrm.com
kifayti.com
klktrading.co.za
ml.learn-to-code.co
hey.lekeodewuyi.com
ai.leventefazekas.hu
lonsdalemarine.com.au
mbdharandsonjewellers.com
subwaysim.mframe.ca
www.millburnrobotics.org
nextgen.miraeasset.io
www.mobilamdemici.ro
giveaway.myrealfood.app
www.nodcaps.com
www.chisushi.pedidomovil.es
inscricao.pertalks.com.br
invite.poly-island.com
www.proginelectricite.ch
bcmmapp.propertywallet.co.za
www.quizappie.com
www.recforge.com
t.saladin.vn
sayhello.band
solomonova.ca
pensdown.soumyasagar.in
chubb-app.speakylink.com
staninik.com
www.sunnimohallaclinic.com
tamimabbasaljuratli.com
service.techlanda.com
www.terrasjes.eu
udupishreekrishna.thediners.in
tst-thoothukudi.in
portal.universell.in
utahfireservices.com
www.visithome.it
abdurrachman.web.id
id.wgi.ai
kapkitonyfcs.zaoletu.com