Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.nanoid.app
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
June 24, 2026
Valid Until
September 22, 2026
41 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
0E:E7:78:B5:E4:BF:E4:D1:D2:18:99:07:3B:6A:71:A3:19:6E:B4:41:9F:0B:3E:BD:5B:FE:59:C3:CE:18:99:7C
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
formula9racing.com
simple.417.cz
454motors.com.br
aardhika.com
palace-dev.academytrial.com
adorable.co.il
apmabogados.com.ar
asapient.com
avarsas.xyz
contracts.axsar.com
bkfasd.it
blokit.app
www.sistemas.borigenbetzel.com.ar
app.breederconnect.app
mmk0.businesspackage.co.kr
www.calmnest.co.in
celebration.cgcherrypick.com
charakakarawita.com
qr.cistcore.com
clinicguard.com.au
cncinox.com
codenames.lt
financas.coliseunerd.com.br
covid19-livetracker.com
admindev.crewtimer.com
qravo.cslade.space
davecourtemanche.com
pb.devopssolutions.com.co
meli.distrisuper.com
duke-app.com
easyeconomia.com.br
econ-sense.com
olympics9.eestec.ro
tulipmania.elimlevy.com
www.emilyheric.com
www.epilazionelaserravenna.it
gainer.felis.ovh
fftecnoia.com
www.fishpet.app
super-cab-hub-test1.us1.fleet-dev.com
dashboard.foodly-app.ly
www.genicawave.com
hanneshermansson.com
www.hdcbrasil.com
www.hidelike.com
holdmyspot.dk
reuben.honigwachs.de
hopemissions360.org
www.janbondage.com
joentfoods.com
joltline.com
auth.kawaiku.blog
beta.keadatabase.nz
fsummit-portal.kerzz.com
khatm-dua.xyz
www.khatm-dua.xyz
rewards.kidsaipro.com
www.knotyweddings.com
konferencja-ktb.pl
volunteer.ksug.ai
docs.latd.ai
localminds.io
www.maker.ar
matheusia.com
smlouva.medic-car.cz
medservis.com.tr
www.merlinglobalstudy.com
www.minimalist-games.com
www.misturagastronomia.com.br
www.nanoid.app
www.app.newfoundland.vet
aurora.nexusweber.in
demo.onezero.com.np
investhouse.partnerhub.co.za
www.pitangaprefabricados.com.br
playhooked.com
portillopavingmd.com
stage.ppya.io
procurios.app
tailored.prognos.se
puzzlegt.com
notification-panel-demo.qlub.cloud
tools.quiltt.com
qwehub.com
www.rallycrosskart.cl
www.rksagency.co.uk
news.russelldunphy.com
apps.serifgunenc.com
simpli5y.com
skonta.it
solarquote.site
staging-system.t-order.jp
www.theaxe.agency
www.triomet.in
api.uveye.dev
kla.vandermey.us
timeline.veniceprojectcenter.org
plataforma2.xglobal.com.br
xlsx-exporter.com
www.zawada.art
Other domains in certificate