Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=vintage-demo.mysterydeck.cz
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 27, 2026
Valid Until
November 25, 2026
82 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
73:D1:6E:1F:00:CE:55:E5:41:41:1B:B5:60:04:95:FA:0E:7D:25:E3:99:1A:A6:D4:86:BB:11:49:6A:51:9D:EC
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
erxiaogelong.shop
www.2behappy.org
www.agapesa.co.za
aic.llc
www.alinemudancascotia.com.br
www.andrewjamesbaker.com
app.artofact.art
teads-adidas-crazyfast.atelar.com
awapi.io
www.blobby.games
algo.bowmanboardoftrade.com
brownsproservices.com
app.buildare.com
staging.app.cargotic.app
chopserve.com
www.ciphershade.com
codebase.report
constructivedesignsinc.com
www.courtcast.co
cpak.co.kr
dapobespoke.com
degraniteandrenovations.com
derwandi.ae
www.diegonunescorretor.com.br
divicom.hml.portalcliente.divitech.com.br
admin.dizceresalud.com
guiasaude-hml.doctorclin.com.br
dreamcountry.fit
ebpsolutions.mom
notif.enaj.org
gasmark.com.br
www.gepamalgamate.buzz
gkkagri.co.in
glowupstudioestetica.com
gotv.fi
www.launch-countdown-timer.fm.grzeg.pl
www.heydiari.com
hommagic.com
inlinetracking.com
interify.mx
liveapac.invue-live.com
www.iutaplc.edu.ve
resume.jeshurun.ca
julianabombardelli.com.br
kcfleetsolutions.com
www.kfsinnovations.in
envisionit.koetterwoodworking.com
kolabeach.lol
kruawaii.com
leibelthedev.com
www.likkle-logic.com
liqinqi.shop
www.liqinqi.shop
projects.llgsupport.nl
lphub.qzz.io
rp.luisponce.dev
manicreator.com
matthiastrilsbach.com
auth.mavenpilot.com
www.meixiann.shop
bestellen.mospizza-bar.de
vintage-demo.mysterydeck.cz
www.neilin.shop
next-life.us
www.onjuhu.ca
run.otraks.biz
oyoloai.com
fordevs.packagejs.com
panzhuan.shop
parkpronto.com
pennyfinance.net
phillywingsexpress.com
pieyangaobeng.shop
www.pieyangaobeng.shop
app.polly.ninja
pontucontabilidadaldia.com
test-assessment2.pragmata.io
prakrutheeyam.com
prcsolutions.com.br
www.qna-math.com
quatremonts.com
shanghuanxue.shop
showmypouch.com
www.admin.sleeprocket.be
office.spont.cash
sridroptaxi.com
stalphonsatrust.org
www.taskall.ai
www.thomazsolucoes.com.br
torrbit.co.in
backoffice.tracksphere.space
prelander-builder.tracksphere.space
trimelis.com
tuidengzhao.shop
www.tuidengzhao.shop
undiariodeviaje.com
www.vegtra.com
villagemaps.in
www.vspec.lat
zayreskin.com
Other domains in certificate