77/100 SECURITY SCORE

Certificate Information

Subject
CN=c1.n06.dev
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 06, 2025
Valid Until
January 05, 2026 43 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
4C:2D:5A:40:B4:2A:D0:3A:A4:49:F8:A3:22:45:C1:5C:70:F1:BF:74:98:1A:F3:9B:8C:12:5D:C8:00:C3:FF:C1
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
habitatconstruction.ca

Other domains in certificate

www.adiktiv-technologies.com
connect.agilefox.app
amgen.anuvabio.io
axonpain.in
bernatowicz.dev
blockhacker.io
www.bpdad.me
payments.buksa.app
cardgifty.app
careseekers.care4giver.com
akoya.chance-store.jp
operator.staging.check-up.biz
clipdeo.io
cmplmnts.com
www.codebravo.tech
www.coder-bot.tech
www.ischool.com.tw
daihatsu.at
dalala.app
diddo.es
portal.digicardkey.com
diilihaukka.fi
edh-life.com
tradeforgood.equix.app
www.escaperoomwaiver.com
cheer.eventos.tokyo
failradio.be
www.farmaciadeguardia.app
forum4uhc.org
geekconvert.com
ig.getblood.com
www.graycar.consulting
hardikparmar.dev
hiremybuddy.com
www.skruf.holdirdeinengewinn.com
app.holidu.link
hollowapps.com
hurricanemap.org
app.imogent.com
impex.app
indestination.store
billing.italkpttweb.com
iverson.dev
qa.jetsetlovers.com
deals.jucy.com
www.kernelpanic.app
www.app.lobbyspace.me
www.loremquotesum.com
www.maledettigiochi.it
www.marke.digital
www.mediacreationtechnologies.com
medicolle-stg.jp
millcreekanesthesia.com
thesis.mln.li
testing.monitoro.app
motiorehab.com
app.mrright.net
itsolutions.msbe.co.za
quiz.murarinayak.com
myraneuro.com
www.mzansimostwanted.com
c1.n06.dev
noodleandsprout.com
dpa2020.notaproblemforlong.com
docs.development.noyo.com
viewer.panoroll.com
pickviagens.com.br
bestellen.pizza-etto.de
pradi.in
premium-club-asu.com
gl.bookings.qos.tech
www.quickmaths.online
www.rgautam.dev
robinsonmasonryllc.com
www.schenkel.dev
schrudde-wegener.de
sibylsystems.com
simplechat.fun
sowl.app
www.spadeworkresearch.com
www.stepstonesupport.org
sunnovishealthtech.in
pp.tanara.tv
www.td2.app
trackauthoritymusic.com
trackerbin.com
truewebsiter.in
www.umbitanadeleches.com.co
auth.unifii.ng
link.stage.vetster.dev
vivek.ooo
wellness-supplements.ca
demo.ebrochure.whizzstar.com
admin.sso.criisp-preview.wholesaleinvestor.com.au
winrootmedia.com
prisonescape.wolvesinteractive.com
dev.wopta.it
freshvoice-webinar-dev.workshop-live.com
pvm-staging.zoiclabs.io