Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=app.chessteacher.in
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 19, 2026
Valid Until
November 17, 2026
89 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D1:9D:F6:36:41:A6:0D:72:3E:EE:7A:CD:80:02:8A:5C:DF:72:D0:B5:C7:7F:F0:21:62:55:5B:B4:04:7F:59:07
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
itsafeatureitsnotabug.com
www.7sachen-freiburg.de
www.airfresh.solutions
rutas-espana.airhopping.com
status.airshot.io
clubmanager.baizebook.in
www.bimoficinacriativa.com
cephasco.com
app.chessteacher.in
clickworks.co.za
xm.coplay.io
google.corq.studio
turnitin-hub.cursorflow.top
dnd-tools.net
empatichealth.com
www.ersonmotors.com
ac-services.eslamashour.com
explore.photos
fotoceramicabidese.com
fumenbook.com
gasflowhn.com
link.gavl.com
www.geniusfederation.org
golfparalavida.org
dashboard.gtoybox.net
haqtech.net
open.hookle.net
fulfillment.hotwax.io
houseoforphelins.com
www.ikkronos.bg
www.inapps.io
auth.inspirtag.com
interestingmachines.com
blog.kaceres.dev
www.kibytes.com
gradle-kotlinize.kusik.net
auth.lehrer-bot.de
lepaapp.com
www.levelupcv.com
lifebeat.pro
malahovsky.net
www.mantenimientoenalturasbrago.com
www.massage-langebaan.co.za
numerology-map.mihi.dev
auth.mockrocket.io
force-us-app.moj.io
www.mrskimsgrill.com.au
classroom.mynotes.org
menu.mynuutheapp.com
dev.nearestschools.com
nemesmarcus.com
www.neuroishpsychotherapy.com
dev.nightdistrict.com
swap.nothankyounails.com
www.outfitterr.com
paravoxia.com
www.paravoxia.com
kaizen-profile-dev5.pbcd.net
www.photonsolars.com
pointtoend.com
positivemovement.co.uk
imtiazalkabir.pro.bd
rachit.co.in
renthero.io
blog.rivy.io
rocketnft.xyz
chronomatica.rootdynamicsllc.com
roservicecenter.org
www.roservicecenter.org
www.ruchitsawalkar.com
dev.lab.salientmotion.com
www.merchant.scriptbox.ca
www.scription.ltd
beta.secid.mx
shortstay.pl
www.skanelag.com
smilecaredentalclinics.in
stephenfrancis.online
www.stitchandshare.com
bodasdeplatafranciscoyveronica.swanmoments.net
tabernavillalustre.es
techsolid.io
www.tejascoretechsystems.com
timebox-app.com
a.tjbsuperyachts.com
www.tjung.my.id
www.tolapp.fi
tas.tplus-asset.com
vip.trackdmusic.com
www.trakkar.in
tt-promotions.nl
u-d.co.jp
growth.vetterview.com
host.vilaruna.lt
svecias.vilaruna.lt
www.wanax.com
wastedtalent.rocks
splash.pwa.wonkytech.net
test.inmujeres.xprtcoders.com
soupresenca.xptoconsig.com.br
Other domains in certificate