Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=test.ovf.gunasolutions.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 24, 2025
Valid Until
January 22, 2026
70 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
FE:67:4B:C5:D1:A6:DD:90:10:9B:86:70:94:16:56:7C:F7:C4:27:6D:6D:28:F4:93:62:F1:63:EA:91:57:05:98
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
icdsite.org
play.2248puzzle.com
www.agiletechnz.com
www.amparosec.io
link.andpizza.com
www.athavan.dev
examainer.audeering.com
audioread.com
site.azship.com.br
the-game.barneyb.com
admin.bowlingdaddy.com
www.bravosurveys.com
breadstand.us
www.brilloween.com
build-your-body.net
www.calm.fi
chezmoi.app
carlos.corntech.com.mx
project.dbox.com
auth.deeprisk.ai
www.defyrretyverovere.dk
devmarg.com
deltamedicina.drtis.com.br
dubinskociscenje.hr
stage-admin.eecertification.com
price-list.eventyrgames.com
imoveis.floripapremium.com.br
frankykohn.xyz
www.fstack.app
www.gannoncamps.com
www.garmag.pl
www.getfavv.com
portal.glomo.no
graphiainc.com
test.ovf.gunasolutions.com
aaa.guru-pon.com
shipping.havenbouquet.com
hbreaks.ru
heckle.app
foremonk.hitevent.com
hububz.com
infiniteaisolutions.com
www.intoxical.app
youtube-api.itxi.aero
scanmycard.jasongoossens.be
jaxkwill.online
jda-dao.org
sharing.jeju2ri.com
k2a-tsl.pl
kanjiwar.com
www.kardless.com
kaziks.lv
krebel.es
lonian.ca
www.msladmin.com
app.multis.co
professional-nail-spa.mybestsalons.com
www.myflightsportal.com
ndcrpf.org
pic-lottobayern.mentor.neccton.com
nikhililango.com
nnischal.me
parkur.studio
www.pigout.cloud
www.postrobcore.net
processmyrun.com
profboost.net
www.projectesg.ca
textil-medica.queliga.com
www.rapidx.bio
www.resumefolio.online
www.robsonmatos.com.br
www.sagisai.net
recuperasenha.salonsoft.com.br
testing.sarithasdesignerstudio.com
sbzlocal.pt
smartdriveonline.pro
www.softversal.com
stickerdesign.app
www.streetartmap.be
submeta.lol
swissdays.org
app.tasksmint.com
temps-studio.com
app.theitalianspace.com
tiptop.study
tribunessa.co.za
countdown.trickytreebranchtech.com
triplebrainsolutions.co.za
tms.trucksters.io
b.upw.li
www.vkt.fr
www.w3monk.com
whatgames.net
www.wizpie.com
wod.app
yes4motivation.yesmkt.net
www.yipyakreviews.com
www.yosuke-miyanishi.com
www.zarag.dev
Other domains in certificate