Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=reflection.kristenkirkman.life
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
May 03, 2026
Valid Until
August 01, 2026
87 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
78:6C:9C:93:B1:42:D7:19:32:64:5B:08:CD:17:24:FB:81:18:AD:0A:21:7D:07:08:33:B0:61:C7:82:B0:72:34
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
heexsah.com
core.aesa.sk
ai-stax.com
amicaleng.sn
anasa.io
beta-01.machineshub.arcadehaus.com.br
beta.machineshub.arcadehaus.com.br
development-01.machineshub.arcadehaus.com.br
development.machineshub.arcadehaus.com.br
machineshub.arcadehaus.com.br
production-01.machineshub.arcadehaus.com.br
gbf.artle.games
awiddelivery.com
balanceonhand.app
bubbal.ai
bzkyapi.com.tr
cheapfax.app
cipherscalepoc.com
www.cmkoekelberg.be
word.cognivus.com.br
coppacocktailsgh.com
www.corsol.com.br
gestionmonotributo.cymaplicaciones.com
daucohanghoa.com
ephesustechnology.com
eskwela.app
evenskyfilms.com
www.executehub.com
client.invoicing.exiaedge.com
favorino.app
www.finovapak.com
finetailors.firerio.com
www.fitmycase.in
foodnfit.com
www.fractalloop.dev
www.gabitoapps.com
www.genezez.world
app.get-ramble.com
auth.getwealthrise.com
goldencompliance.com
guelpheyemd.com
www.guerrilladev.xyz
habiboard.com
hotelg17.in
invokeit.in
jackapp.com.br
jinrongyou.buzz
nexus.jiricech2059.com
reflection.kristenkirkman.life
kwikbundle.com
micro-cursos.labosquescuela.org
leastcountrush.com
www.lecouloir56.com
harvard.lordos.tech
maroof-travel.uz
gestio.massanet.cat
masterfullauto.com
miapppro.com
calc.minshoki.com
monarco.app
link.moxom-ye.com
connect.narayann.dev
nationstardigitalb.com
nokal.app
frete.oaxis.com.br
only1cent.com
ornamentdash.com
pawegio.com
quarate.com
ravensquareventures.com
sistemia.redacted.ai
redleaves.net
renterbooks.com
resettingworld.com
start.rivuu.com
robotpak.com
sb-oep.com
cse-idp.sdsforg.com
admin.seawareapp.com
simran-apps.com
sip-equipment.com
login.snowjoe.com
irata.softaware.fi
www.superfrits.nl
szylair.pl
technologybuildings.com
www.technologybuildings.com
thegmstudio.com
www.trilhamaster.com.br
trustioagency.com
vongquay.tuoitrungnien.com
ukiyoshopp.store
hermex.usama.ai
valion.dev
app.vetyz.com
www.vetyz.com
lp.webaca.jp
weddingdancetango.com
app.whas.dev
ziggy-road.com
Other domains in certificate