77/100 SECURITY SCORE

Certificate Information

Subject
CN=firebase-analytics.steadypay.co
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 03, 2025
Valid Until
February 01, 2026 76 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A2:25:54:F3:35:44:6B:AF:57:74:0C:8A:45:4C:7C:84:6E:F0:A9:EC:C0:30:8B:2A:E2:D9:54:7F:E7:B8:F6:24
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
firebase-analytics.steadypay.co

Other domains in certificate

bongames.12traits.com
adamantiummettle.com
showcase.adswerve.com
mta-sts.ahat.om
airtsm.com
alfraengineeringservice.com
alpgpt.ch
anforsm.com
www.arccielafrica.com
admin.argutopia.co
arunraj.dev
my.askipo.com
www.asuwics.org
authorsreadit.com
bdbhukuk.com
beesecure.tech
benlesh.com
app.bigvu.tv
bislinker.site
bpgpm.com
www.buysellcalculator.com
keila.bypal.net
www.capitalloom.in
app.cat4school.de
angular-sandbox.cloudliner.net
cmouse.app
adorable.co.il
contakicontabilidade.com.br
web.pre.daytes.app
devaka.tech
cms.easyhomes.ph
mysre.equiem.mobi
eviloatmeal.se
www.ex-hyg.fr
www.fll.cl
www.fusionmaker.com
sdklog-test.geniee.co.jp
www.getcleaners.com.au
www.samea.haendel.dev
tools.happily.ai
docs.hudi.one
ianmccue.com
tweet.inayathalam.in
www.infinitetheflow.com
apps.inmotionhosting.com
rst10.innovarapp.com
www.justguess.it.com
kinerja.izzatulislam.org
fem-edm.jessbellatti.com
www.joecode.io
mc.jpos.jp
lccinternational.org
leaf-lab.com
lharidon-moreau.fr
admin.kb.logicwind.com
www.lukecutting.com
marinerobengali.com
masala-guru.com
admin.mavithahomes.lk mavithahomes.lk
memestory.app
preflight.editor.mergeedu.com
www.mlconsultancies.com
murdock-brothers.com
myresumepdf.com
nadejepromarpanka.eu
archived.narathota.com
scheduling.nextinline.io
niajobot.live
niftychars.com
notestand.app
www.sas.org.bd
www.parisiannailsalon-westcobb.com
passkaar.com
www.peter-ying.com
ekali.petro-gabon.com
phluidmatch.com
piotr-juskowiak.pl
pixijs.club
adminapp.publicashtrayfinder.com
qrcafe.ps
riicco.com.br
dev.roundu.uk
rsvpready.com
www.sharemymd.com
sitios.co
www.skiptoncamerata.com
slgrainsfs.ca
sparkle32familydentistry.com
links.superplan.at
www.suzanneraaijmakers.nl
pedidos.telotraigo.app
thirtify.site
alpha.timothyjordan.com
www.trickyleaf.com
servicios-test.veridico.cl
virtual-akihabara-web.com
vspot.co
demo.xinsere.com