Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=drumlessonsbirmingham.co.uk
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 04, 2026
Valid Until
November 02, 2026
48 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
79:F4:4D:44:33:60:73:C0:C3:F5:90:0C:96:8C:EB:58:C0:9A:E7:C9:D6:CB:10:6E:C4:5C:B8:22:DB:9F:8A:78
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
jd5.nl
10numaralavas.com
adityaratna.com
aedp-israel.org
alnujaidilawyer.com
apexvibe.shop
arwaknots.com
arwaldextreme.com
trace.as-a-service.dev
avnir06.fr
www.bachrony.com
demo.belotechbh.com.br
bescontabilidade.shop
www.bladderdiary.app
bingo-owner.custom-overlays.com
dmswift.com
www.dmswift.com
drumlessonsbirmingham.co.uk
estrelasolitaria.com.br
www.eventmaster.jobs
gammaenterprise.org
gatrimon.cafe
auth.pre.ai.gostudent.org
wordquestprc.graphiccity.in
hadithna.com
hawamish.sa
heizentech.com
henahome.app
www.henahome.app
www.huuvio.fi
app.vaco.danieli.prj.insideapp.dev
isgsorular.com
www.isgsorular.com
www.it-entreprenorerna.se
resume.itcyberworks.com
jensklemets.com
www.jensroger.com
joefkat.com
kaedoki.xyz
study.kakomonquick.com
kbmtoiture.fr
carnale.keepod.com
khmoviehub.site
club.kourtz.co
laborer.app
lambdalab.com.ar
lingolinetranslation.com
www.littlecrayonschool.com
lokly.org
www.lokly.org
www.lovaagritech.in
luludoha.com
luluhyper-market.com
files.mdrahat.com
meeyatech.com
mkprimepaintingservices.com
www.mkprimepaintingservices.com
www.mmig.site
myclub.bar
myfamilytree.at
www.myfamilytree.at
nraspanien.de
oklan.tech
openstrokeicons.com
orbitmedcare.com
www.orbitmedcare.com
www.pragati.enterprises
www.pteshark.com
www.puravidadistribution.com
www.puromotorgroup.com
workday.putrisinu.com
salesmentorai.online
www.sausank.no
clean.sb0.tech
scifoegc.org
www.sffcargo.pk
sintornstudios.com
www.sintornstudios.com
www.skgovind.com
somethingabouttsunamis.com
app.stacked-pokertracker.com
dev.stacked-pokertracker.com
streamer.fan
www.streamer.fan
supportgenie.help
tammotion.co.za
dailymath.techmondis.com
ironlog.thunderstackai.com
tractask.com.ng
uabacm.org
aamma.unikuaa.com
unlock.com.qa
velocitigroup.co
www.verviscomex.com.ar
auth.viiu.me
villakhufupyramids.site
www.viverbemestetica.com.br
volupo.com
status.walkack.com
app.wavehunter.pl
Other domains in certificate