Open Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=ogtss.net
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 15, 2025
Valid Until
January 13, 2026 52 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
44:86:7F:BF:56:8D:80:AB:3B:4C:24:32:5C:2E:3D:1F:27:13:FA:67:AC:DE:91:32:98:F9:C0:CA:DA:ED:3A:69
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
justincellona.com

Other domains in certificate

utbildningar.adxtocare.com
alexeyrodionov.com
service.alko-garden.nl
pats-peak.get.staging.alpinemedia.com
amciedtech.com
artemmind.com
augmentedcoach.com
barbaralandro.com
www.be-raad.be
bhavanx.com
www.bibfabrication.com
playful.biutthapa.com
www.blessedcareagency.com
breakfastandbusiness.nl
camejohopital.com
bigquery-demo.carto.com
hp-apis.chesedridge.com
www.classyub.com
tangoai.colia.com
portal.probaby.com.my
app-redirect.md-fashion.com.ua
cleaning.hitek.com.vn
huis.cyph.dev
darwin.djtechware.com
devplatforms.elevationai.com
fleetbot.ai
app.flowshopper.ai
dl.fotmob.com
admin.freshclothes.app
app.fusionamspro.com
diplomadigital.galileo.edu
gearhub360.com.br
getcalculus.com www.getcalculus.com
kurumsal.getluvu.com
www.goobycoin.io
www.groundspros.com
www.helloheartbeat.com
iamidae.com
ilusiongaming.com
irmak.dev
jobayerislam.com
justinluce.com
karin.love
www.kdotechservices.com
konohakoders.com
lajosandaustin.com
latoile.io
layco.tech
lenoirstore.com
www.lesludopathesnantais.fr
content-fb.lettucegrow.com
lifegez.com
littlebrainiacs.com
www.mapflat.com
martincaringal.co.nz
max-wallet.maxonrow.com
go.mediat.app
meetide.com
megapeorsonals.com
mercedespasco.au
michealfahim.com
auth.debug.milkywire.com
mypalace.online
mysommy.com
nashvillelessons.com
netkode.in
ngophuongthao.com
ninjarises.com
nirmiteedesign.com
ogtss.net
oilika.com
reputation.optiscorer.com
playchipless.com
pocketlands.com
www.quinto.studio
quref.com
randomname.cool
red-apple.website
ding.salteadorneo.dev
sami4apps.net
admin.seni.mx
www.sidebae.net
forfiza.simplicityhead.fun
facyle-app.speakylink.com
www.sportest.app
squidsync.com
api.supersuporte.app
swazitrac.com
www.thezealot.ai
api.treetoplearning.org
cms.ualabee.com
auth.uiblocks.dev
etoken.visity.app
vyvazil.cz
waddleworks.dev
wedding.wetzel.work wetzel.work
demobo.wexsel.com