Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=link-oi-man.jec-digital.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 23, 2025
Valid Until
March 23, 2026 69 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F8:17:FE:40:61:26:11:AB:79:19:FF:43:9E:C3:61:65:E9:9D:5E:A3:E7:31:B2:B1:FA:86:DF:9E:A9:FB:15:37
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
icmg-is.com

Other domains in certificate

aalbersai.nl
adarshnambiar.me
cybersecurity.adeptly.ai
www.amazingrace.vip
saudecomsabor.americanopolis.com
admin.dosbrosegypt.anyware.software
app.aplancoaching.com
uat-link.apollomatkat.fi
convertics.arlo.co
www.aureagustavo.com
autotitledirect.com
spkcloud.auxswot.com
hhd.bmgomg.com www.hhd.bmgomg.com
bootsgutachten-berchtold.de
camper-connect.de
app.cashwise.finance
web.alpha.chikoo.app
twiliocontrolhub.app.claudiopietraviva.ch
www.colejrogers.com
www.concepcioncodda.com
cotxesnets.es
covaliu.dev
www.crowdconnect.cc
density.so
digitalpaymentsolutions.in
dotech.app
www.drilbu.com
electrictheory.co
pit.frc5190.org
odoo.gets.cloud
energy-clean.hexabytech.com.br
harky.hopkirkclub.sk
webchat.hungnhb.dev
ijr.com.br
inoa.capital
jaspers-blog.net
link-oi-man.jec-digital.com
www.keinex.com
keithdesantis.net
nclex-admin.kingofthecurve.org
koigroup.io
kunalkr.in
portal-homolog.kwikledgers.com
www.lemus.app
www.leonardsoto.com
www.letscng.com
web-prelive.lifebox.net.au
alt.literal.ai
lorcanwellness.com
portal.luzdaserra.com.br
megaparrilladaargentina.com
www.mettle.studio
ballot-spsetia.stage.mhub.my
migtarjetas.com
quiz.moons.pe
old.futami.my.id
app.myvoteproject.com
kancilapp.neovasi.com
www.ninerasa.com
nitish.design
www.omcdev.com
www.onepotpony.com
orchestrate.me
minneapolis.profit.orderprinting.com
app.triunfo.photofied.tech
pickviagens.com
www.plantdirty.com.au
main.praniverse.com
qr-rawaj.com
www.quizplanet.game
app.reglantern.com
rocketeer.fans
saascredits.ca
r.scj.io
seidquest.com
singinglessonsexeter.co.uk
skillway.co.uk
softops.app
www.speedoo.app
srisaienterprisescovai.com
test.stagb.in
stgjellyfish.com
namakkal.supercabs.in tiruppur.supercabs.in
app.swapkaart.com
szarjatek.hu
l.taktak.be
new-prod.talent-alpha.com
www.thecolorfulcase.com
www.panel.thegentlemanstudio.com
www.thewellnessorchard.com
toddm.net
links.travel-stamp.com
triskil.com
miau.ursem.cc
www.winderful.co.uk
doc.wowdesk.jp
portal.wxeq.com.br