Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=jennmarclassaction.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 23, 2025
Valid Until
January 21, 2026
65 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C6:9B:60:92:7B:85:9C:40:80:DD:01:D3:C5:89:F9:14:AD:F4:B7:42:26:8E:0D:59:0E:96:EA:A5:C6:61:71:92
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
gokhana.dev
lab.123abc.com
tubepipe.africasunrise.com
www.anagogie.ca
annelids.io
www.anotherline.nl
apilab.one
arcusblender.org
athestia.be
www.atunicorn.io
auusa.net
www.bemeeple.com
bgconnect.app
tlm.bien.ltd
brazillin.com.br
www.bridge-it.ch
online.bulstar-ins.com
cellpm.org
chiefsne.ws
uat.astra.choozle.com
www.collingwoodcarl.ca
staging.applink.communoplus.com
app.courierexpressja.com
www.cynthia-song.com
pandrenthan.dv.in
emdr-connect.app
www.findsomethingthatendures.com
aialabtext.genielab.co
www.gis4schools.eu
pointz-test-front.glukynet.com
www.gptonvoice.com
admin.auction.holmasto.fi
bike.hydroindustries.dev
www.interviewquestionsgpt.com
jennmarclassaction.com
www.johannfeser.de
judis.app
jugbusters.com
www.kerstnachtdiensthasselt.nl
keystoneceramics.co.uk
manage.knewsales.com
krtechs.dev
kwa.dev
resultados.labysalud.cl
nadjakoun.latoure.net
bestellen.lavera-pizza.de
leejayschmidt.com
www.letiroirachaussettes.com
www.letsdindin.com
stagingauth.letsgetoffline.com
www.livestreamsvoortheaters.nl
lukereed.co.uk
mailmergedocs.com
mainga.com
portafolio.mashalladev.site
auth.mealfit.id
mikeparsonsink.com
www.miracl.net
muhammedjobe.com
www.murosta.com
numsters.com
wine.advisor.app.omnisense.io
oonelab.com
oryza.me
easyastrology.pawprintf.com
pukingrainbows.io
dev.rara.co
nozulu.bookings.ratality.com
ricardogarcia.dev
ringkes.com
monitoring-dev3.vks.secom.jp
sempreverde-lb.com
beta.sharedtexting.com
venuspublicity.showitbig.com
admin.showmego.io
dactymo.signerz.com
www.smartdisk.org
indt.smartprocure.co.za
www.snaplose.com
link.snowglobus.com
komeo.speakylink.com
sportscontroljrz.com
www.spreadshotstudios.com
ndscratchadmin.sqwadhq.com
stsquote.com
todo.tasha-emily-stenner.co.uk
s3.tdgi.us
spltr.theeste.com
perfstats.thirdkindgames.com
allocation.transformairports.com
www.tridax.lk
www.tureenventures.com
app.twilik.com
usky.ae
loyalty.vapox.co.uk
uat.voicex.vn
www.whatsupfinance.com
editor.wisibel.com
app-qa.zaigetech.com
echo.zitao.org
Other domains in certificate