Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=math20c.kantisiri.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 27, 2026
Valid Until
November 25, 2026
70 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
63:EF:36:89:BA:DD:F4:FB:78:B1:7E:BD:E3:84:01:5C:70:68:1C:2F:B7:BE:1A:2C:29:9B:F0:8F:7C:48:ED:9D
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
elidus.tv
mlc.elidus.tv
mlv.elidus.tv
tools.10110.dev
1choicedrywall.com
lowes-bom-recipes-cert.3dcloud.io
80wash.com
v7.angular.io
www.antonysmindmakerz.com
astlax.com
www.autohaus-diker.de
www.barometro-naviero.com
www.beaucasttv.com
bikinlapang.com
blackframesolutions.in
blaubox1729.com
bringacamper.com
buatcompanyprofile.my.id
farmer.carbongrounds.com
carcleaningspecialist.nl
cat4school.de
beta.convoquesttracker.com
digilabcrew.com
dossia.ai
draartibodhanihomoeopathicclinic.com
dronenow.buzz
drushtisecurity.co.in
effex.ae
ejmjunkin.autos
www.ejmjunkin.autos
esgalliance.com.au
assistant.fizxtchr.com
flourishmoney.in
app.flowrecs.com
footintv.com
citrix-qa-ideacloud.forgedx.com
www.gaitstudio.com
geevo.com.br
www.geevo.com.br
golanlandscape.co.il
hostpreneurconsulting.com
www.humbltokenengine.com
cdn.improvefy.com
imsenthil.com
www.intercontinentalbc.com
www.itamnow.buzz
kanta-yamaoka.earth
math20c.kantisiri.com
kayokisushi.es
sepf1.ksug.ai
lanacole.net
compass-simulation.lastcompass.co.jp
lendmo.com
lubelskafundacjarozwojugolfa.org
www.markkrouse.com
www.mindxhub.com
taskmanager.misschool.net
destil-qa.mobilenxt.app
dev.moradas.app
auth.mypallas.app
mysoul.app
mystery-files-germany.de
nordkrafdt.com
app.opomly.com
pelusita.app
taskmate.petriapps.com
plans-team.com
playthex.app
dev.prior-ai.com
admin.qwibi.co
compliance-corner.rcloudsoft.app
sandeeppula.info
sankalpaya.online
www.scorpionroadways.com
sethkarodimal.com
shiftnow.hair
factory-app.simamdigital.com
www.sivakasicrackerspurchase.com
starelai.com
family.studenthub.app
taflow.app
taskat.app
timelesswomanstyle.com
www.tivio.ca
ops.touragate.com
laimun.turnosweb.app
uniroom.app
www.uniroom.app
univoice.asia
urmed.net
vaniacenter.app
varre.com.br
varunpanambur.com
t.vipaylife.com
www.vitapanacea.com
engage.demo2.voyagernetz.us
whatsayus.com
xiangze.autos
zahavamedia.com
www.zedoaid.org
Other domains in certificate