Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=www.tadhg.co.za
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 12, 2025
Valid Until
March 12, 2026
51 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
60:62:81:6F:65:B3:A5:02:C7:6E:1B:5F:3C:4A:90:11:53:35:53:8A:D5:29:87:ED:45:05:EC:13:E7:F8:70:23
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
ese.edu.sv
grand-p.app2.1on1navi.com
abhishekkrishna.com
openelective.mitaoe.ac.in
anidealai.com
arcpromotion.lat
thestage-dev.artanitech.com
aylantechnologies.com
devadm.basil.menu
auth.baykusgufeeapp.com
bytesyntax.dev
ptfirebase.cdreader.com
healthumbrella.co.in
kskvasu.co.in
line-q.co.kr
ceo.poontongfiber.co.th
coding.casa
dashboard.cognify.earth
www.confieza.com
countimator.com
www.cultuurhuishoogeveen.nl
drivemate.nz
ecommify.in
www.epistema.com.br
evendating.us
genxtoday.com
glansigbilvardskovde.com
www.app.kinder.graubuenden.ch
advent.heilsarmee.ch
www.homegamehost.com
lyrics.ibrackets.org
www.impactus.kr
new.jjthaispa.com
k12.com.mx
kooplicatayurveda.org
limeapp.my
www.lipbloom.kr
locate-buddies.com
lurpean.es
reviews.luvikno.com
malaysiamounjaro.com
meetragreen.com
www.meetragreen.com
www.moalduhun.com
moraviantours.com
app.movlocadora.com.br
www.natecruz.xyz
fantasyballoons.navi.cards
nomoapp.xyz
app.nyle.ai
ogspace.in
oheja.com
admin.oigla.com
oigla.com
application.opendurian.com
www.outfitadvies.nl
angular.particle-text.com
next.particle-text.com
nuxt.particle-text.com
react.particle-text.com
svelte.particle-text.com
vue.particle-text.com
angular.particle-text.info
next.particle-text.info
nuxt.particle-text.info
react.particle-text.info
svelte.particle-text.info
vue.particle-text.info
angular.particle-text.online
next.particle-text.online
nuxt.particle-text.online
react.particle-text.online
svelte.particle-text.online
vue.particle-text.online
prytso.com
recipeeps.com
rezekianaksoleh.site
menu.routesixtysips.com
selodesalomao.pro
demo-desk.skiday.app
smart-top-realestate.com
spherenex.com
cleancopy.stricklanddigital.dev
supermegaapple.com
www.tadhg.co.za
dev.tamil-football.dk
inside.tattooya.kr
theultimatemcu.com
tmtravelhub.com
topappsmaker.com
tubelight.store
application.uat-opendurian.com
uhporg.org
www.uhporg.org
uily.dev
ddw.umi-mori.jp
weddingchieuthuy.online
yadhunandan.me
azococ.yamaterous.net
www.yuanxiaous.com
Other domains in certificate