Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=codingexpress-rnd.ca
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 26, 2026
Valid Until
October 24, 2026
67 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
81:C2:B4:AE:8C:A6:86:17:92:B7:78:A2:E1:A6:8C:9F:E5:03:84:D7:38:5B:26:42:32:B7:F3:58:7B:CD:4A:37
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
gestimmo.cc
www.a-tratter.com
www.aarondruck.com
sicollection.advocatively.com
reset.affordablecare.ai
www.annelids.io
qa.apini.cloud
apulianintelligence.com
members.arubaqualityseal.com
link.back2back.org
link.bebunk.com
link.betterhalf.ai
bhasagrid.in
admin.bookhada.com
l.cabbalr.fr
chalkmenu.app
web-stag.checkd.it
www.clariceejoao.com
dev.cloudlist.be
www.codegrove.co.kr
codingexpress-rnd.ca
computerassistant.app
www.darassalama.com
darty.games
deepthinking.app
doylecentral.com
drx.rocks
aslanattorney.easyapp.co
www.eliasgonzalez.dev
exx.dk
auth.film-time.com
app.fitnessai.co
geldwissen2go.de
www.gettruckdispatch.com
www.girosv.com
sms.gitstel.com
www.goodygood.co
v2admin.heartlinehk.com
hindvahealthcare.com
hitsofjax.com
homeally.org
homeloansbymanisha.in
howiesplace.org
staging.hoxby.com
hacksprint.hsrsolutions.co.in
kiosk.ingka.com
intellipromote.com
inveyst.in
invictaconnect.co.za
scott-rpg.iterativeconcepts.com
www.jacksonkuzmik.com
jltc.com
kingsacademy.us.com
landsraad.app
laywu.ca
www.liandarenovation.ca
www.lifecodify.in
evs.lutonmedia.com
magilhub.com
www.newvrajsign.com
www.ourbonfire.com
paroli.io
book.pharmachoice.com
go.piccle.in
plantdirty.com.au
admin.porous.ai
proteus.vc
psifernandamartins.com.br
quinoto.app
www.raub.net
www.resoluttech.net
links.portal.ridealto.app
www.roger-mir-min.com
www.roundrobin.pro
www.shivgarjanapratishthan.com
cms.sickdevs.com
staging.psu.smart-campus.app
sombrero.co.in
www.spirus.app
ondemand.strongbodystudio.ca
swastikphysiocare.in
www.t-a-r-s.com
accident.test.tada.dev
www.tawings.com
terrado.live
textnotes.app
tramitesmonica.com.ar
truecomfortsupplies.com
under-control.app
unicornsurvey.com
versus-experience.com
app.vidatrilegaltche.com.br
vmhit4409.id.vn
was-ist-ai.de
wisesplitter.in
dev.app.xave.co
xbg.solutions
bagruyot.ynet.co.il
yufw.dev
app.zloviewer.com
Other domains in certificate