77/100 SECURITY SCORE

Certificate Information

Subject
CN=beta.stattracker.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
November 15, 2025
Valid Until
February 13, 2026 77 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
35:08:A4:1A:DD:31:CA:AF:85:1F:F1:5E:C3:BB:60:C5:CE:7B:4F:E0:FB:DF:E2:BC:16:E6:D4:21:AD:FC:F4:D1
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
knowat.consumer.nexious.co knowat.talent.nexious.co knowat.staging.talent.nexious.co

Other domains in certificate

gcl.0xharkirat.com
51apply.com
9once.com.mx
aadhihomefoods.com
abhilash-pm.com
accountsassist24.com
admin.2020.hyphen-hacks.com
www.bolanho.adv.br
aicode.fail
www.akashaveda.com
app.algoray.in
www.alvimfazio.com.br
amaartefitnessfest.com
www.ankit.website
architekturviertel.com
babylookslike.in
auth.bismamusic.com
speed.bytesizeds.com
collectiveintelligencenetwork.org
www.colorincoloradovigo.es
crossplatformkorea.com
www.dondecorro.cl
wadev.ekalsutra.com
exotika.mg
tipsters.feedinco.com
gautam-sales.in www.gautam-sales.in
app.dairyserviceforms.gea.com platform.dairyserviceforms.gea.com
www.gruasmontecinos.cl
hadicreciendojuntos.com
dev.hairssalon.com
homelover.blog
go.horde.app
www.hotelgirirajkathiyawadi.com
dashboard.inddigi.com
senseek.inklyre.com
instalibot.pl
sitemotive.istiakrahman.com www.sitemotive.istiakrahman.com
niyama.kalpas.in
kapilmundada.in
konelitestore.com
kunchal.com
fukui.linx.live
beta.liveresultater.no
nfs.my.id
care-dev.neuvola.com care.neuvola.com
qr.panpili.com
www.pharmalisterlimited.com
phatbite.co.uk
js.pivotsurveys.com
plandit.app
pledje.com www.pledje.com
singhshankar.pryzmity.com www.singhshankar.pryzmity.com
virtualmentor.redwolfreliability.com
refermyway.com
www.rfquo.com
www.richaux.com
oral.rougetet.com
www.rtharanath.com
applesstrack.rxoconnecthotfix.rxo.com
supergrow.saasmaster.org
projectregistratie.safetygroup.nl
app.scoremyresume.com
sglonelyguy.site
sitesafetyinsight.com
sito8943.com
app.countdate.sk5s.com
srinivasacaravan.com
beta.stattracker.com
stonehcapital.com
www.strolls.app
story.sunflower-of-courage.com
www.syncvo.com
lojas.tallusburger.com.br
confero.televic.com
staging-www.traveliko.com
blog.twittuh.com twittuh.com www.twittuh.com
uniqueevent.in
unluckycricketgames.com
vakyansh.com
signature.waffle.city
writestreak.team
www.xn--12c4b9ajh5aeu3bd5a1ki5o.com xn--12c4b9ajh5aeu3bd5a1ki5o.com
www.xn--hf-lcb.com
xn--imi-servios-u9a.cv
xn--lnen-qoa.se
www.xn--pigroupmekanika-n6c.com
www.xplooreze.in xplooreze.in