Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=mountainvmushrooms.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 18, 2026
Valid Until
November 16, 2026
77 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
FF:0E:BC:BE:39:B7:BF:F7:45:7C:10:03:03:5E:6C:80:10:98:1F:DC:C9:28:AC:F3:B4:5C:0E:06:60:E4:8F:FC
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
epup.dev
admin.affa.pt
www.allymarhealth.com
auth.amornexustechnologies.com
app-launcher.co
www.app-launcher.co
www.aqode.it
www.assurehomehealth.com
ba2edu.com
www.ba2edu.com
ba2edu.com.br
www.ba2edu.com.br
ktema.bhumiksoni.com
tf-insight.bi-devsolutions.com
www.bidev.mx
www.boffinglobalgroup.com
www.brightvastudio.com
bunkandbeyondadventures.in
c2titan.com
carleft.it.com
www.carona.io
www.cebelahoney.com
chasenoble.lat
courtlive.app
crismir.ro
www.datavision.sk
dayback.com.br
www.dayback.com.br
deafhealthke.com
devaiacademy.online
ccse.dia1.io
www.duinerus.co.za
dunaclub.mx
www.emmanuelafricanshop.com
www.esforia.app
executive-fusion.com
fabricademotorhome.online
framemasters.com
fucking-ai.com
www.fucking-ai.com
www.gsequiposycontroles.com.mx
guidonops.com
www.highteadordrecht.nl
iasystem.org.br
impulso.ao
main.luckamoi.online
www.lusseapp.com
luwaktech.com
www.luwaktech.com
ctvhomes.madhive.com
auth.madhyanchalsarbajanin.co.in
auth.marveclass.io.vn
mcreamedibles.com
codereview.michalik.tech
modeimaging.com
www.modeimaging.com
mountainvmushrooms.com
www.mttelhasmetalicas.com.br
links.droom-stg-int.account.nasta.co.jp
o-girador.com
opensapp.net
peoplesagency.org
pinturasschuster.com.br
planaxis.app
powerforcecs.com
privnix.in
admin.projecthollow.com
promedoglobal.com
www.proszamos.hu
bnb-dafatery.quadrsoft.com
reglass.co.in
renataeleo.com.br
partslink.repuestera.mx
risespark.in
gestao.santafelicidadecj.com.br
hospedes.santafelicidadecj.com.br
recepcao.santafelicidadecj.com.br
shaneandsammysgameboard.com
sidegrashop.com
ksapark.simamdigital.com
sitarasoftwaresolutions.com
auth.solfapp.com
suchonabasu.com
sunshineitiseoni.in
alcoholzelftest.tactus.nl
takweencode.com
tasks-app.com
temjogo.app
app.tradestudy.academy
tradestudy.academy
trivedh.com
fitapp.vlys.com.ar
school.voltava.in
wearelosmedios.com
www.wearelosmedios.com
yongentecho.com
audio.youbrain.pro
video.youbrain.pro
web.youbrain.pro
youbrain.pro
Other domains in certificate