Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=funaisoken-crm.homestation.jp
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 25, 2026
Valid Until
November 23, 2026
85 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
00:BA:2F:64:FA:F1:22:C9:71:6B:F2:29:22:88:64:FA:0A:C5:2B:A6:55:4C:F2:AF:D9:95:60:5D:EF:EF:63:C1
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
haoding.buzz
037hd-movie.online
abrahamk.in
www.amat.me
amirsalterations.com.au
anahaulage.com.au
blacksailstreaming.com
bluephone.co.uk
phjkdfygsdvb.buruemasmu.com
www.caylerchicks.de
www.cdnunited.com
ceri138.org
cheftogo.com.br
www.coretech-egypt.com
crazyface.it
www.curromarin.es
www.solarspot.ecoprojektant.pl
www.edugoo.org
eopseum.com
expressway-towing.com
www.fengning.lat
www.fetanx.com
fractalinstruments.fi
www.galvanize.me
qr.ginnify.com.co
goyang24.co.kr
www.grooming-mimos.de
www.hdcommsolutions.com
heatlabs.lat
funaisoken-crm.homestation.jp
www.huangya.buzz
www.icucplus.net
dev-engage.idtapthat.us
impermeabilizacioneseconomicas.com.mx
www.inovhy.com
iterumfoods.xyz
producer.ivistream.com
www.j88.kr
jethiyahi.com
dataship.karmarine.net
krp.karmarine.net
hunde.lauraundmarcus.de
scanner.lealklub.gt
learnprogrammer.in
linhuo.lat
www.linhuo.lat
liquixtrades.com
smc2.morgansolar.xyz
moonspay.mymoons.pe
admin.nav8eng.com
nemus-group.de
www.nestandnourish.app
admin.uat.omcare.com
app.oregonsys.in
publicaciones.parquesnacionales.gov.co
pedidosjp.com
ezcardsholder.penzigo.net
bestellen.pizzeria-rossopomodoro.de
postdata.poligrama.mx
portio.work
auth.preplinc.com
radzikowskik.pl
area51.regulars.so
portal.robocek.org
royponce.com
www.royponce.com
face-classify.rukshan.net
sarojtamangyonjan.com.np
cards.sbdev.in
app-beta.scenarioapp.net
manuals.sewardpolice.us
www.sillysketch.com
spotzparking.com
cpwrol.state.co.us
siroki.statsearch.team
www.tagomanagement.com
www.tamami-higuchi.com
recurso.theframework.digital
www.thesardul.com
timelesscapturefilms.co.uk
www.timelesscapturefilms.co.uk
tkpay.xyz
tthankdt.tech
vautro.com
link.veracityprotocol.org
enterprise.vette.io
vincentlau.rocks
goindigo.visa2fly.com
test-app.vitafyhealth.com
vowcanvas.app
www.woodstocknet.org
www.xiaobu.autos
xiaobu.autos
www.yesdiadem.hair
yesdiadem.hair
www.zemagrup.com.tr
www.zenithdigital.tech
www.zhiweijie.shop
www.zhuocuo.lat
zhuocuo.lat
Other domains in certificate