Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=agenticminds.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 25, 2025
Valid Until
February 23, 2026
84 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
86:17:2A:23:AC:B7:9A:E0:20:EA:7D:66:BE:43:92:CC:30:43:90:B0:55:81:21:FD:E3:52:36:7E:CB:86:69:38
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
inoselrapor.com
agenticminds.com
merchantsbank.aghedgedesk.com
www.alphoenixdesign.com
www.amenconference.com
www.andreassavva.com
survey.appzi.com
app.artnresto.com
ngskampongchamadmin.auxswot.com
uat.auyea.com.au
haku.beautycounter.com
www.bencarrental.com
www.benharrison.dev
blog.bintern.com
test.app.biome-hub.com
canary.callistoflight.com
app.carbmanager.com
enti.check-cantiere.it
www.ebooks.chessvision.ai
chulocoinonsol.com
cuenta.citamatico.com
admin.claimscalc.com
clairebeauregard.com
closedcaptionunity.com
zelige.co.il
www.coderblog.dev
www.collagebattle.com
user.convercus.io
corequ.com
www.crypface.com
darkimmune.com
horizon-dev.darkstarsystems.com
deepshotai.com
www.devinireland.com
divyan.info
www.dlnr.dev
app.dthlivetv.com
old2.dytechinc.com
e-hcfa.com
lp2.easyinsole.com
www.eurobeantraveller.com
logos-quiz-philippines.fedmich.com
festivaldocafe.com
nft.goingtospace.com
www.goody.ee
app.gtraders.de
game.guidaevai.com
headsup.hockey
api.hellokms.com
www.htmlhandbook.com
topgunrewards.incentable.com
iograft.com
www.irisqu.com
www.itanbir.com
www.itsshubhaofficial.com
jackeddeveloper.com
www.jldcounseling.com
www.joannasimpsonmedia.com
juliane-und-denis.de
www.kahma247truganina.com.au
kodlash.com
kouhobi.com
kwekusmoke.com
partner.loadbroker411.com
marchmadnessmc.com
mavran.com
mikeglueck.com
app.mocklets.com
staging.mssassetworks.com
www.mycopanda.com
mypkweb.com
go.nametaggle.com
nearbyfresh.com
nevercheckabag.com
niveshchakra.com
auth.nkowaokwu.com
test-func.noneho.com
www.onlinetestyap.com
t.othercooked.com
www.peoplebyinitials.com
www.picks.com.br
www.plushtoi.com
www.vyvoj.predplatenaelektrina.sk
cogasucre.pujasweb.co
qtecmultimedia.com
quoteninja.co
raylabz.com
redandoford.com
www.rewrittendesign.co
charter.ridezum.com
rosadeldrac.com
saveyourstyle.com
sisubastasinmobiliarias.com
quickscan.stolwijkkelderman.nl
stylizt.com
swingrennes.com
www.transfabrica.com
business.openmob.yodelit.co
biz.zlto.co
www.zwem.band
Other domains in certificate