77/100 SECURITY SCORE

Certificate Information

Subject
CN=maisonbkk.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 26, 2025
Valid Until
January 25, 2026 62 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D4:C8:33:BB:36:BC:EC:A5:44:8D:EA:D1:FA:07:60:44:D8:FD:E9:EF:7E:39:62:F8:98:27:D3:79:71:0E:26:E3
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
karasuma-factory.com

Other domains in certificate

2013.jeffreyqua.com
depot-offre.aquitanisvente.fr
whatsappi.asocte.com
atlaspropertyrepairandmaintenance.com
banwibu.jp
panel.barbershoptokashiki.com.br
best3bot.co.uk
bfirst.vip
apply.buildyourcareerwi.org
painel.carbee.top
mint.chiroos.xyz
www.clear2105.com
ataysi.com.tr
1010psy.com.tw
webapps.celeritas.com.uy
creativejob.app
www.cyclopsdefense.com
thgpropiedades.dataprop.cl
dclonline.co.uk
www.deh.ie
docmaker.nl
admin-dev.doyumeibo.jp
development.dreico.net
rafadistribuidorkione.edsys.com.br
eetuctenka.cz
share.farmyng.club
sudoku.fawesomegames.com
meet.flasko.tech
kickbase.florian-zug.de
foodjobs.app
github.tube
hi-project.org
www.i-bc50.com
iibelieve.com
itconsults.online
rqam-cbd.jec-digital.com
jerusalemtemplestudyradio.com
jewellersday.com
jitsi.support
www.kareandkure.com
kciinteriorsltd.co.uk
korekcie.sk
laverdine.ca
lexfile.app
admin.beta.lode.one
loopcraftagency.com
group.lotoquebec.com
re.lychee.pro
maisonbkk.com
manutenzione.software
tienda.mercadopulgasusaquen.com
www.mouly.com.ar
movierulzapp.wiki
mslb-intellisoft.co.za
admin-stage.mungernagarnigam.org
www.nephrogo.de
nikolaluxuryescort.online
www.nm-bytelab.com
nossodivorcio.com.br
simulate.stg.novafutur.com
dev.ommi.io
opvakantiezuidlimburg.nl
payment.payfaci.com
qa-pharmacists.pharmercure.com
www.pro-menage.ca
www.probuilder.ca
yodantique.pukky-it.com
qseal.tech
www.crm.querypro.io
www.rc-chess.com
www.roubanoureddine.com
sikur.rumahamal.org
playlinks.rummyculture.com
schooldirectory.online
securityjob.app
sharmapiyush.it
sm-all.app
chula.smartsellcr.com
test.souissi.eu
www.storychime.com
language.subrammiles.com
supollofresco.com
xvjulianajuarez.swanmoments.net
sn2room-dev.swift-it.se
crtcheck1.task-connect.co.jp
www.theatomconferences.com
thecapitalalliancenetwork.com
www.tibble.io
tirexsg.com
tradeaivision.com
tungaoke.com
www.ucca.edu.au
urbancollectables.co.uk www.urbancollectables.co.uk
uxionlab.com
verdad.com.au
volkscompras.com.br
appbusiness.wi.th
www.yensi.homes