77/100 SECURITY SCORE

Certificate Information

Subject
CN=simplefractal.co
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
June 02, 2026
Valid Until
August 31, 2026 83 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
67:A7:16:71:64:C5:D7:A3:F2:06:9B:04:99:CE:98:43:CF:1C:92:3B:27:93:AE:49:6E:4C:28:CA:20:37:10:73
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
escueladeinglestte.com

Other domains in certificate

www.agrisyncai.farm
alfaiatepro.com.br
altisafrica.com www.altisafrica.com
namerakajp.andydontlikecode.com
www.annapurnafashion.store
www.antaveda.com
desafiodacopa.atletamoderno.app
tonaly.bervos.org
auth.bilegt.com
bti.tur.br
www.cancersk.com
chandify.com
hc.checkup.ai
www.chronopredict.com
admin.cibikapi.com
circcexam.com www.circcexam.com
www.collabritech.in
connectacampanha.com
auth.digontoedu.com
account.drgiuseppemusumeci.com
desdecasa.edad.tech
zx-tools.euson.app
fireinvestigatorexam.com
www.firstrillionaire.com
gamesalotl.autos www.gamesalotl.autos
gourmpet.com.mx
halilovicsolar.com www.halilovicsolar.com
hannaljungsten.se
healeya.com
www.hponcampus.com
mta-sts.implantscan.no
integrolaw.ru razblokirovka3.integrolaw.ru
kanysh.com
typer.karolostasz.pl
kshanphotography.com
doralingo.laibold.com
livingstoninsights.com www.livingstoninsights.com
www.manaba.ai
work.mcaststudio.com
missionekcrore.com
mybesideai.com
myrelax.live
www.nazansariyer.com
nerfsg.app
nicolaslecouffe.fr
ops.nivesheasy.com
odysium.com
ondevoto.com
parentpilot.xyz www.parentpilot.xyz
auth.pawly.sk
ps.peopleofthe.cloud
helpcenter.qitech.com.br
auth.radar-me.app
sa-assessment.reflective.global
admin.renoster.co
rundevsolutions.com
www.samedaylpa.co.uk
www.sanjsobatisevalay.com
sandbox.rpc.sauvara.com
segriva.com
biz.shroomcatcher.com
www.shvvs.dk
simplefractal.co
smartspacio3d.com
sofia-salas-wrestling.com www.sofia-salas-wrestling.com
solveint.com
aisearch-coryking.speculo.ai
www.splashin.co.za
oilerspolladmin.sqwadhq.com
www.ssbkd.com
bodalarromanapaz.swanmoments.lat bodamenchuhandal.swanmoments.lat
www.systemsmodelingexam.com
www.thomasalden.dev
tool20.biz
trainingplay.ru
tudirectorioapp.com
uliltransport.com
admin2.uni.net.vn
usomagic.com
ustmasrapor.com
vexorapp.co
app.vinodbaba.com
voltechqatar.com
vpmallorca.com
mta-sts.wahl.no
cracker.wecreates.ltd
woodsports.com.br
www.workinabox.ai
emotee.xeldust.com
yieldpayut.com