Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=bananabunksmirissa.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 21, 2025
Valid Until
January 19, 2026
69 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F7:CF:94:B3:F6:05:AD:58:18:2B:13:FA:0D:C0:AD:A4:51:1D:1E:9D:4B:4F:E9:F9:7B:FD:34:2D:B4:CE:67:61
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
frontend-specialisten.dk
ablakszerviz-gyor.hu
www.ablakszerviz-gyor.hu
agaplink.com
alsaeedmedicalcomplex.com
resume.daniel.alvarado.pro
www.apaitsolutions.de
arvadev.com
bananabunksmirissa.com
app.banyan.eco
bgcatalog.app
binhsonoceanpark.net
cacambas.chegando.app
chibodo.com
status.clerkhound.com
camlicalilarturnuva.com.tr
www.masterkuafor.com.tr
www.concuror.com
einvoice.cortiqa.in
cybersecurity-ai.eu
www.cybersecurity-ai.eu
www.deminsy.com
www.dikshavalah.in
donadalua.com.br
www.donadalua.com.br
anniversaire.lucie.dufleit.fr
elcardenalcincy.com
app.engrosappen.dk
tienda.erodistribuciones.com
featprint.com
foprex.com
rferreira.freeddns.org
www.fun60th.com
app.fxnotes.com
genautech.com
gotravelshow.online
admin.hatalabo.cloud
i-told-you-so.dk
app.immigration-check.de
ishughfreezefired.com
www.isomorphx.com
junkai.rest
www.junkai.rest
external.uc.kamitsubaki.jp
kapotakkho.com
kentcottagenuwaraeliya.com
labotechnica.cz
dive-apps.da.letsdive.io
lingtime.pl
lunexai.co
menuspace.online
painel-dev.mobilizei.com.br
bookingsystem.modulealpha.com
mirar.informacion.my.id
mymishn.app
www.mymishn.app
logistics.nanoguntechnology.com
www.logistics.nanoguntechnology.com
www.neppri.com
pettipettimirissa.com
ll-trainer.pirotech.fr
www.plasticulture-project.com
app.platora.app
locc.pp.ua
qupiu.com
qushxonaa.uz
reactbyrohit.shop
www.realitky.online
www.restinpg.com
samsoft.rs
www.samsoft.rs
www.sawag.net
sellevoll.co.uk
app.shiftpilot.co.uk
staging.insightly-archive.shuttersup.co.uk
simpfo.com
portal.soilslytics.com
soloapp.store
sosys.com.br
weddingbells.sourishmukherjee.com
dev.spot-sentry.com
metronome.stringify.com.au
dashboard.tailorai.tw
terhivanska.fi
www.terhivanska.fi
bloom.thamescatalyst.com
thesbtools.com
admin.tophuntertech.io
sys.u90min.com
www.universalcalculator.net
vanea.fi
www.vanea.fi
www.vesbeckhandyman.co.za
admin.videografonbudget.se
vyno.onl
webstudioexpress.xyz
w300.whazonk.com
it.world-works.co.jp
staging-portal.yurtle.co.uk
santiago.z01.be
Other domains in certificate