Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=protostartrading.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 19, 2025
Valid Until
March 19, 2026
68 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E3:E8:F6:C0:20:B8:FB:0A:55:51:94:06:09:5B:DA:DC:92:7C:77:5F:EE:D5:14:6E:4C:13:F1:D5:88:17:82:92
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
knight.ventures
new.members.76.life
www.africasunrise.com
alister.dev
angelclaim.xyz
www.apb.mx
arcs.app
atmacametall.com
search-it.belindawelte.de
bizce4islembolgb.com
api.brickmania.net
buildingahero.me
keralapublicschool.co.in
coctelia.app
www.bhawanakharel.com.np
annyeongkorea.cydratech.com
danielwegener.de
dentocarekol.in
admin-stag.diva.vn
minesweeper.e-edev.de
lifegame.e-onlineservice.com
comunicacao.enricomisasi.com.br
dist.fontproofer.com
www.fundamentalknowledge.net
www.sandbox.gestio.school
app.ikspesialisten.no
inboxdl.insuranceinbox.in
portal.jicando.com
johnl.net
link.joinsherpa.io
jorgeportfolio.app
jpg.studio
kabaal.online
kabaal.tech
rh.kanoma.fr
www.inzetlog.katalysatorduravermeer.nl
kihon.fr
ladireccte.org
baocao.laixengay.com
upjr.lapieza.io
linvo.app
help.luna-x.com
manaspurti.com
app.manufi.io
konzepte.maxentwickler.site
maxhoving.nl
dev.mdopix.com.br
www.mdopix.com.br
renewing-member.memberwizard.com.au
mhgroup.online
munevveryokus.com
netherguild.com
www.nubofy.com
auth.nuvano.io
www.omkar.dev
dociddemo.onymos.com
www.panomixstudio.com
www.papabearstories.com
paramountmotors.in
app.payprz.com
pear-cast.pearsports.com
magurobcn.pedidomovil.es
pipetek.io
www.pixawise.com
www.playbook.lk
poochhooch.net
portfolio.ppnyy.com
www.pressonpower.co.za
protostartrading.com
puntorojoproductora.com.ar
www.redlands.dev
remoteduelcompanion.com
roka.ventures
www.rutulgandhi.com
breakbreeze.servicechai.com
green.preview.shortwave-staging.com
www.shuttle-inc.com
skillikz.in
slurbs.net
laposte-app.speakylink.com
colors.stephengordon.ie
atapi.swish.nu
app.switchai.nl
www.taxhub.io
programadores.tgiserviciosinformaticos.com
www.thegentlemanstudio.com
thejewelleryshow.in
thestowellcenter.com
twilane.com
unccflowerhunt.org
ux-casa.com
varunpandey.net
waitdone.com
link.walking-cat.com
app.waltr.in
wannabeyourdog2.com
www.whichplates.com
wall-monitor.wolftech.no
recipe-book.zacharyjbaldwin.com
robinhood.zhixiangren.com
Other domains in certificate