Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=ganghee.dev
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 22, 2025
Valid Until
February 20, 2026
85 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
39:B4:C6:54:96:84:1D:1F:A8:F9:0F:D2:45:52:8E:83:C2:96:20:34:E6:F0:8C:18:97:C9:27:B7:80:F2:72:7C
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
excelacademy-preschool.com
acdpainters.com
www.aerionlabs.co.uk
alalidrivingschool.ie
escritorio.apem.cc
apollocomercios.com
asconsoftech.com
www.aspiregenx.com
chatbot.autonomya.fr
www.axerea.com
medicinaprepaga.ballesta.com.ar
bankiao.com
barcode2sheets.com
beautyplay.club
admin.bestgolfcarts.ca
everyparent.billullonex.com
blockspace.nz
ichecklist.buildint.co
caishcloud.com
triumph.chema.mx
figma.chinjja.com
clinicarehavi.com
lp.coderoad.pl
painttools.coloredpuppy.com
www.connorkerns.com
courtheat.com
multivlaai-test.creativewiz.nl
custos3d.com
diizzayy.com
mint.dinomonz.com
dev.down2detail.ca
dsksystem.com
entreecuvee.com
staging.frujufrenzy.co.nz
ganghee.dev
ghiandola.com
www.giacopy.com
staging-dlk.girls2-fc.net
gobluehoseathleticcamps.com
hdfs.ie
www.helpi.lat
heydoorly.com
www.shoes.hugebelieve.com
kmg.idmx.io
ilijaleko.com
iosuega.com
isotking.com
japanesemnemonics.com
jiexiangfan.com
jonas-jensen.com
www.jornadarpa.com.br
karoldanko.com
kevinxerandhi-wedding.kcexn.com
www.keenuts.net
koshurdodh.com
fabian.kotschenreuther.me
mackbrowne.com
talmont.madhive.com
martinwahlberg.no
markdown-viewer.matthewlong.io
maxhenderson.com
mikalmorello.com
pwa-food.mohammed-najib.me
momentumtailoredsolutions.com
api.myntapp.io
app.neostudio.io
www.nikan.me
www.one-night-werewolf.com
beta.openvivo.co.uk
overdrive-finance.ca
rdtramandaifm.pampa.com.br
pi.university
www.pinkpopcentral.nl
branchhubapp.postoffice.co.uk
app.procuraimoveis.com.br
www.puree.me
volvo-forum.px-staging.de
rachelvoss.com
radtera.com
www.scoorjepr.nl
demo.septacode.com
beta.septanteminutes.be
www.shopsecretsmakeup.com
sigmamath.org
www.sistemas.com.co
candy.soybeangame.com
bookremeet-wepl-canary.spaceeight.net
staging-sandbox.safe.staxy.live
www.stiebri.lv
www.technology-garage.com
www.thairinruam.de
thehotpotato.ca
www.tvedahl.se
verify.twotaps.io
www.typex.co.jp
app-test.unipay.club
www.vdglobal.co.uk
bodytone.versades.com
victorianails.studio
quiz.zingtongroup.com
Other domains in certificate