Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=lgcloismartlift.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
January 02, 2026
Valid Until
April 02, 2026
80 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
02:70:1F:E7:15:E2:2F:BC:A5:47:42:6F:D3:9A:AF:90:70:D1:57:A3:20:DC:CF:DC:70:C8:32:E4:62:BB:F9:19
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
fibertuftinternational.com
abantruya.com
www.abantruya.com
abinpc.net
acncablenetwork.in
www.aksasakaprioritas.com
followme.allenjoseph.dev
www.asumanaktuy.com
backgammon-in-muenchen.de
badarchin.com
benluci.com
birdhauz.com
boards.blippit.app
bondedpath.com
data1.booking-system.app
businessvaluationcalculator.xyz
caylerchicks.de
caylersons.de
cecapcb.com
search.chinattihomes.com
design-cert.cityfurniture.com
bangalore.yazhdroptaxi.co.in
argus.comeverde.mx
curso-lab.com
davenportenglish.com
www.dealershipkendra.org
www.definitearticlecreative.com
timervoz.ecbsistemas.com
leads.enstech.com.mx
estatesgo.com
fello.in
fluv.me
www.gabin-laigle.com
glumistcare.com
greengoat.nl
grupozelman.com
habitprompt.com
handlelitt.no
helply.in
baothhust.id.vn
innerbright.ai
jhengservices.com
www.joyredeem.com
app.jumbotronup.com
app.justmovieme.com
kafrapedia.wiki
katani.id
pay.roster.kenoviiva.com
sizemiru.kitemiru.jp
laiminh.click
amplifico.lefigaro.fr
lgcloismartlift.com
mach5-validators.com
maneestudy.com
manikfernando.com
marenleupelt.de
marker-ink.com
botica.medifarma.com.pe
app.miamimoveis.com.br
www.mindmakersproject.org
www.mohsenizadi.com
g.more.vg
auth.mysprout.ai
app.nivedhitaschool.in
wa.nuverax.com
okanaganwellandpump.com
penguinai.app
sha.pichsenmeister.com
priafit.com
pvedigital.com
notes.pwnlogs.dev
quotebook.online
reporfy.com
beta.returna.com
app.royexchange.in
console.royexchange.in
saisonabo.ch
sandbox-school.jp
api.storyvoice-dev.scholastic.com
www.sebastianpreston.com
www.shellynews.com
sonoma.school
soundgrid.io
www.spider.com.mx
stanky.pl
studioaeksent.be
sunrisesustentavel.com.br
superlivingapp.com
www.syedatif.com
www.taffe.dev
talkiko.com
puskas-staging.teamtelefoon.nl
teigaku.app
thepremiumbarbershop.ca
narvaro.toleredsaik.se
vaaaque.com
www.webrtc.tv
xooom.app
obesitest.zdrav.kz
zoltanbuilds.ca
Other domains in certificate