Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=johanbrinch.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
January 28, 2026
Valid Until
April 28, 2026 86 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B0:79:9B:AA:AE:DC:46:88:83:38:53:7A:65:08:2E:6B:E0:A4:47:77:36:A6:9D:58:B0:6F:79:24:49:D2:30:F5
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
knjpartners.com

Other domains in certificate

www.2r1k.com
www.610slug.ai
www.8partcombo.com
abstrakty.com.mx
www.ancient-world.co
www.appsforbb.com
easyinvoices.avnirexhepi.com
beautyjob.app
www.blausm.app
www.bonestudio.online
admin-demo.circonomy.co
commandes.collectifensemble.com
firebase.workinghouse.com.tw
gdemo.compilorama.com
www.crumbprint.com
www.cuadorlaw.com
cypher-group.com
www.datasent.com
speedo.denolk.dev
wautix-test.devbeebit.com
www.eeccontractors.com
dsign.executive81.com
microblog.felipefm32.com
uatims.finncub.com
www.finplaninteligente.com
app.foreveryng.com
fortum.ee
www.forvandle.com
link.gapizza.com
getzesty.app
gmptrack.com
dynamic.gorevel.com
app.gravity-cloud.com
gtemperor.com
snap.hamid.tech
www.heavygo.com
au.hemisphere.digital
mm5-3d.henteko07.com
hfssadikoglu.com
link.hypehype.com
jayrajdevelopers.com
jeerany.com
johanbrinch.com
inventory.johnchristophersantos.com
www.kards.co
kesiflerdunyasi.com
keynotecast.dev
keystoneskipatrol.org
kikakushare.com
kingdomk9training.com
www.knk-richtfest.de
taskall.l1ght.app
www.ladylp.com
lanceiros.com
dev.letkee.com
licensingcuracao.com
localkuya.com
spanningtree.lucask.dev
madchasselures.com
bestellen.maerchenwelt-essen.de
mahsa-mahdavifar.com
melty.date
miamilakespermits.com
mizunocustom.com
www.nobioffers.com
docs.orthophinance.com
staging.paco.cool
lpc.peerly.app
popkode.fr
piggybank.potatoma.com
projektwporzadku.pl
rattidisentina.it
rcd.cool
www.react-rainbow.io
recreationdevelopers.com
www.rubendelaiglesiapregal.es
myportal.salem.edu
www.serviciosnotarialesnj.com
simplicitycomic.com
siniscape.com
hauniv.snapmentor.no
ira-express-inc.solerabank.com
armory.solestial.dev
symposiumindia.com
wordpuff.syntaxpunk.com
thefoolstarot.com
www.thehumancloud.org
www.thewheelist.com
thrivemind.app
www.tunes.blue
ulkaone.com
gigpig.versori.com
vibescommunications.com
vinayagacrackers.com
vksportsacademy.in
nutrilloauth.waafi.ca
wequil.app
www.whiteoutclimbing.com
iconicmints.wsjbarrons.com