77/100 SECURITY SCORE

Certificate Information

Subject
CN=forge.studiopromethean.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 07, 2025
Valid Until
January 05, 2026 46 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
81:EC:2C:14:95:65:15:C0:56:BD:B6:95:BF:D5:06:59:44:35:85:80:2D:BD:49:3F:F2:20:0A:BC:62:55:E0:0A
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
extra.onsite.invue-live.com

Other domains in certificate

adrianadev.page
amaiscloud.com
anycors.com
vlogger.apm2.studio
www.artecipo.com.br
app.babybezoek.be
www.beluga.lk
www.bhutkatha.com
www.bigleaguesinc.com
dms.bitsensing.com
waittimes.bondvet.com
www.breakawaytv.com
buttercorn.net
www.caazam.com
chankyome.com
vanchhai.chetneak.com
auth.chihaya.dev
www.polaris-fin.co.il
eumentis.co.in selvainfotech.co.in
madhusudhanpathak.com.np
crafteam.ro
davidcaddy.com
deepthought.co.nz
sulu-5.dev-ltl-xpo.com
www.documentingindia.com
dsjj.org
myfinances.eduardoazevedo.com
everyspace.me
fantasticllama.com
fieracontract.com
fcbiz.freecharge.in
compliance.freedomgateway.com
report.ftrustee.com.br
gamel.ist
gametime.party
docs.gdotv.com
www.geotekmed.com
sounds.getshuffleboard.com
www.giggleleaf.ca
timeline.gmph.co
www.harshjobanputra.com
playground.ihatelettuce.com
www.independentproductions.ca
intellineurals.com
www.iosdev.com.au
app.ironsociallifting.com
cssgrid.iterativ.ch
invitation.janghansol.com
staging.jessie.ai
web-dev.johnshortland.com
joystickgaming.co.uk
blog.julian-sauer.com
karenmedicus.com
blog.kenthua.com
affiliate.kidsup.net
www.kyzrlabs.cloud
lafumet.kr
www.lucydeburgh.co.uk
lukeisawesome.net
www.madeformefashion.com
learn.staging.mikademy.ca
millionshow.com
pos.millionsolutions.dev
www.mjai.app
mlti.io
dashboard.munio.in
www.nelinik.ch
engineer.nibc.co.uk
www.nuemedi.com
oldeckert.com
app.oliverahg.com
operatingtheory.com
merchant.periode.no
pitches.net
www.powerbuffgirls.com
hashtag.prepa.io
roveapp.net
expenso.sanidhya.in
godmode.saxena.xyz
kazi.scube-ems.com
app.socialteetime.com
staige.net
forge.studiopromethean.com
surpriseculture.in
auth.tawq.in
www.tchicktchick.be
www.techgrity.com
pilot.test-paper.online
speech.tokbird.com
tokyomixcurry.com
tokyo.uechiryu.okinawa
cv-maker.ultof.com
www.videiracentral.com
vidhairecycling.in
lq.webgurus.biz
www.windsingers.hu
retail.ydtechs.com
www.zenithcreations.net