Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=link.staging.choicesmarkets.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 05, 2026
Valid Until
November 03, 2026
62 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
85:93:1D:D8:8B:E2:F0:63:B5:88:86:DF:F7:FD:6D:BF:AA:8D:07:92:4D:40:77:B9:13:A8:1E:7B:29:D8:FA:50
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
jainrubbers.com
privacy.abe3.net
alcantara.is-a.dev
allways.global
amazone-de.com
appexnova.com
www.bich-bauelemente.de
kokobloko.brinias.eu
www.candie.land
link.staging.choicesmarkets.com
silview.choshg.com
auth.climes.io
auth.clinodoc.com
delakorbooks.com
dengekapi.com
e-techne.com
ecentrumai.in
app.ectrl.ch
luke.emmacanhelp.com
www.endangeredclub.com
enlightenflow.com
questions.examind.io
b2b.favstay.com
finovate-tax.com
www.fresscott.it
gagantransport.com
www.garagenotes.app
dashboard.getnabd.com
getnabd.com
grocsale.com
groupeprotectronsecurite.com
halalliving.info
harryzook.com
order.hawaiidesignworks.com
www.hillshousehotel.com
affiliate.hokimtam.com
dev.twi.hrappsys.com
dcx3.inventures.cl
jamesnorton.design
www.katiemarple.com
hanrecipe.kbeathub.com
www.kematim.com
app.kundappen.se
laboratoriodentalsalva.com
laurahayas.com
lise.me
www.lovablenotes.com
luxvet.lu
www.madugangaboatsafari.com
dd.mdanielk.com
www.mezegmodels.co.il
morelprotocol.com
mvpbee.com
n-drive.site
nammawesternghats.in
www.nansfi.com
playground.neoprismlabs.in
noteplore.com
staff.staging.ordaap.com
dev.oyifa.com
ai.packagejs.com
www.patrikhrmo.sk
www.pickpackcar.eu
prakriti.info
www.prismawerk.com
pullgain.com
pvmodisha.in
rajmotorsofficial.com
paqf1.rb2k7.com
reinigungsservice-stange.de
www.cloud.rgateway.it
ruansiqiao.com
customer.rxoconnectdemo.rxo.com
sahajgaming.com
static-page-staging.salary-hero.com
sashesgh.com
saudegest.com
sausagewallet.com
app.seskhonaenergy.co.za
tools.skywayclassics.com
www.spheon.com
www.sr-woodworks.com
stoacademy.com
suadev.com
link.sandbox.tbn.co.th
textopia.lat
www.theeuwes-it.com
attachment.theorygenerator.com
thepourpro.com
typespeedai.com
ukrsolutions.in
admin.utstudentrewards.com
vesperasoftwarelab.com.ar
app.vvcarts.com
westudio.dev
winkpass.com
yadori-inc.com
www.zilights.com
zilights.com
zufatech.com
Other domains in certificate