Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=campaign.trueli.me
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
January 13, 2026
Valid Until
April 13, 2026
87 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
29:0E:95:69:4A:2A:EF:94:A4:EA:94:76:1B:BA:7E:68:A5:DC:1C:1D:14:80:A4:F3:79:5C:78:F0:52:06:35:0F
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
getvitalloop.com
0c0de.com
acemybusiness.pro
adcotomasyon.com
mercadaodasroupas.agendafox.online
www.aixgencore.com
www.alejandrotiria.com
alphanumericretail.com
play.ambimusic.com
angularidades.com
livefire.astronautlabs.com
www.baodaily.store
best-pr-tracker.barin.app
beesoftware.pro
bernardotavera.com
www.birthofapsychedelicculture.com
bizventure4.com
blackholesandcrenellations.com
bordgo.no
www.bridge4cause.com
app.callbuddy.dk
caranchoaerodesign.com.br
auth.casamejor.com
www.tan-doo.co.il
fixit360.co.ke
crushnasty.com
dev.dehesa-partenon.es
dicomtransfer.solutions
health.digitalliberia.com
dingyi.rest
www.dingyi.rest
dunnsfarm.com
www.easypdftools.app
www.ellenandbertie.com
www.epochai.org
cinergi.fusionict.com
accounts.fxnotes.com
pay.assurant.gr4vy.app
unitai.gravick.com
gregsimon.dev
haldrob.pl
picker.hamzaashrafi.com
advent-of-code.inova.si
www.isy-garten.at
qr.izona.store
backoffice.ka-ching.dk
kayouwear.shop
kovidnevnik.rs
panel.laot.cl
g-star.lfv.jp
lifeandwellnesscenter.org
junosearchpartners.business.lifebrand.life
ljssouthfloridarealty.com
panel2.lobbo.eu
www.maxmagroup.co.za
anhemfood.meligroup.vn
www.miraclechoicegame.app
www.moderntechsolutions.pro
myinventorydashboard.com
www.myinventorydashboard.com
partner.niora.health
www.osama.sh
www.ourvitaminc.co.uk
chess.ozdinc.org
pinapromo.co.nz
app.poclab.com
www.institution.pspkdevtest.net.au
eastech.qudsys.com
seamless-demo.relm.digital
resinedge.shop
riftdashboard.com
www.riftdashboard.com
www.saboraprimeravista.es
salesmechanics.ai
app.sarapassaro.com
savetovalisterazgovor.com
digestra.shapus.com
simplefund.me
dev.siyanetha.com
game.skyerchannel.com
games.skyerchannel.com
shop.skyerchannel.com
skyerchannel.com
slimmer-af.nl
socreative.org
www.solcall.com.au
solity.se
spicycut.com
sztukakrolewska.pl
ticket.technables.com
www.thegoldstones.uk
torquelift.fit
campaign.trueli.me
vegaspread.cloud
www.vertexchain.world
www.virtus-ai.com
vivienenglish.com
app.xy.domain2025.work.gd
www.yu.software
zentrity.app
Other domains in certificate