77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.ktfbibleapp.link
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 02, 2026
Valid Until
December 01, 2026 83 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
89:C1:DE:1D:9B:41:E6:B2:F5:25:64:52:41:9A:C2:6E:0D:72:2C:E3:4F:FF:41:44:C4:EB:75:7B:3F:45:4E:3B
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
elena-apps-dev.online

Other domains in certificate

1month-ai.dev
adhyaychildcare.com
chat.agtdijital.com
h.almosafer.com
asmirawellness.com
spsplacementtest.auxswot.com
www.aytchemicals.com
wavy.bandarra.me
www.baohuypharmacy.autos
www.beclean.ge
bigbee-eg.com
cannesphotographer.com
www.capturedmomentsphotography.co.uk
contact.charlieproctor.com
chemaeronumerics.com
app.cloud-manage.jp
codesplinter.in
link.codig.ec
www.compassionrobotics.com
connectme.lv
cybercores.com
danglong78.id.vn
www.typesomething.ddaaaaann.nl
www.dialvacanza.com
dmfbloodbank.online
www.drsankarkumarroy.com
www.duraiinvestigation.in
duttonautomotive.duttongroup.com.au
ecbmart.com
www.elisecasey.com
www.euromig.eu
www.fayafree.com
www.flattenthecurvesim.com
www.grona.com.mx
www.guitarlessonsnorthampton.com
emailfooter.gyokohsha.com
www.hildobijl.com
input.csc-intelligence.ingka.com
inorks.com
johnhaskell.com
joinbtw.com
trash.jorgetoloza.co
test.kahaclub.com.br www.test.kahaclub.com.br
app.knoxpo.com
www.ktfbibleapp.link
propuestas.lacedemon.com
linkeus.net
www.maiborengineering.com
masat.dev
speed-test.media52.com
medinabeltran.com
www.mindengage.net
mini-lab.tech
mistermobilephoneuaq.com www.mistermobilephoneuaq.com
auth-v2.qa.mockrocket.io
www.mybitspace.com
office.nargil.net
www.nexthire.cv
nguyenhongkhoikm.id.vn
ninko.dev
auth.numbaz.xyz
ofabioandrade.com
onerisetechnology.com
www.onstandby.co.za
ourhse.xyz
www.papeenvironmental.com
preview.sandbox.payo.com.au
peacockcom-tv.com
pollsim.com
elixbrand.postgoo.com
prementerprices.in
www.raspberryrd.com
redesignbygenz.reserved.com
rhythmx.in
podcasts.runwayconcepts.eu
seegakula.com
wpc.senaskat.com
www.servicelinq.com
track.spafinder.com
user.spcommunity.org.za
app.speech-ai.app
www.stephenegibson.com
www.stevensoaps.com
strangedays.tech
susanvespoli.com
tainefng.id.vn
referrals.thecollective.com
thekreationzshop.org
thetaharvest.com
tomschluep.com
tsewangsonam.com
app.ungcash.no
vasogenbio.com
www.vastgoedgereedschap.nl
brandmanager.viralfission.com
zaibot.net
zipurl.io