Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=gcfaexam.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 30, 2026
Valid Until
November 28, 2026
73 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
23:2D:5A:CC:02:4B:4B:C2:C6:BC:D2:43:54:E2:04:CC:D0:69:18:78:7C:3F:10:F2:09:BF:03:6E:32:D5:94:E5
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
getapps.tech
www.aidenpais.com
aionplanner.com
kinggoatfarming.aishopix.com
www.alexyork.net
cutedge.anujbusiness.in
bdf-trans.ro
www.boethos.cl
app.brakespoon.com
cheadle-institute.co.uk
www.clearnotion.live
cntoursntravels.com
connectivalabs.com
www.cultura-rium.com
dnj.art
dosescribe.com
dotlabs.lv
stock.dresshala.in
www.drrajivsingh.com
easegut.com
edersonloccatelli.com.br
animalmania.edsys.com.br
passes.eliteeventzpune.com
www.furandfoundth.com
gcfaexam.com
www.getcloudotp.com
holzmanufaktur-karwowski.de
www.holzmanufaktur-karwowski.de
auth.inquizitivo.com
www.insurableai.ai
www.iqraquranapp.com
app.isimmobil.com
kademiq.com
kanvilgrand.lk
profile.karaage.saitama.jp
persona.khalilpro.net
console.kukerja.id
bestellen.levante-restaurant.de
lievora.fr
life-line-car-recovery.com
locacaorapida.com.br
www.masarib.co
mathgameswithsnake.com
medfiles.in
mi-estilo.cl
mizoramnightteer.com
www.moneyhorizon.co.uk
mpfoods2018.com
www.mpfoods2018.com
musikkbonanza.no
app.readmate.n-qube.com
crm.naaz.marketing
oureconomy.napp9.com
livedev.napztournaments.com
auth.nexxastore.com
nidusjunior.com
www.niroai.co
www.nerivo.noveriks.com
partssource-za.co.za
admindb.plantlink.co.kr
ads-player-dev.pontuax.com.br
powerpuffteam.com
www.pulse-ucare.my
rarugroup.com
www.realsupremeholdings.com
respiremama.fr
robomi.com.tr
comunicacao-develop.rogeriossantos.com.br
salvagecam.rollitinno.com
mta-sts.rophemedical.com
influencers.rta-moscow.com
www.salonli.co.il
manual.samileltec.co.kr
sanad-dz.live
scenera.online
sciences-numeriques.info
self-medication.search-maps.com
www.serdalma.pt
pcgaming-emu.by.servti.cloud
shanligong.rest
www.sriaadhicrackers.shop
stackdsa.co.za
www.stationnews.co.uk
swastikpolymersindia.com
www.swastikpolymersindia.com
tangzhou.rest
terrace.sh
travaux-mais-pas-que.fr
travellytrips.com
unigreekai.gr
utsavpatel.xyz
valix365.com.br
vertexzim.co.zw
viprecustomer.services
vurbis.market
ahegs.wiesoc.com
xunyi.buzz
gif.yearnings.xyz
www.yokeapp.co
zulu.video
Other domains in certificate