Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=ducnguyenit2.id.vn
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 31, 2026
Valid Until
October 29, 2026
74 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
70:10:44:AA:6B:06:F1:4D:9C:00:38:6B:0A:87:2E:DA:51:9E:C5:2F:14:B9:16:DD:DD:84:6B:0A:0D:CE:6C:D8
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
kvdhanya.dev
88world.co.kr
alimemonrealestate.com
allanwattier.com
www.arokyayoga.in
atsphysique.fr
www.balajeero.co.in
barn-resorts.com
www.barn-resorts.com
live.beholdit.pt
beutelracker.de
www.biddebuy.com
brahmaverse.ai
bridgehangoutapp.com
www.butterplup.com
bymas.cl
carrynumber.com
clearflowdrains.net
cogitoergodata.com
gapp.crosscat.jp
www.danhendricksgamedesign.com
dawtodawn.com
specialized-group.deskbooking.app
certificaciones.diazar.com
uikit.diskito.eu
ducnguyenit2.id.vn
erp.elawyersbd.com
elitevending.llc
finessapp.com
app.finnihealth.com
url.firstfly.app
fuzzytrip.com
dev.gigwizer.com
glowpanda.life
golfliveutah.app
goocab.com
gorilla-sport.de
homeleafstudio.app
www.homeleafstudio.app
howmuchdoispend.co
icmimargiraykara.com
www.iholda.com
www.indora.app
sub.integrolaw.ru
motogestor.jeffersonfreitas.dev
jjcinematics.com
kiga.kitanga.dev
kiteoslo.no
kvonovo.com
dev.peec.labcare.cloud
lapukron.com
www.app.learningsuite.io
limeapp.my
clawlaunch.linkpc.net
lsoc.dev
lumyz.com.br
www.malabarherbals.com
mamatanourish.com
marketratestoday.com
minabiswakarma.com.np
firmware.morningstar.io
dl.murapay.id
admin.musicwala.net
my-lebonsophrologue.fr
www.myenjoyhealth.nari.net.au
newstart.one
on.co.ke
app-primaprix.overview.one
panyaconsulting.in
www.pypa.cl
www.radio1chile.cl
radioso.dev
raebar.com
www.rainmaker.school
www.revoltage.io
rexlawpartners.com
app.scaf.ltd
serik.dev
www.singinglessonsswansea.co.uk
smile.sonrisadental.in
www.spandc.co.th
pages.stayopn.net
stefanprokop.cz
test-espace.studely.com
styre.app
swarg1995.com
themotioncanvas.com
www.themotioncanvas.com
timeprice.me
www.tobiasbecher.com
accelerate.trainiapp.io
tryonoid.com
www.tryspell.com
valevntine.com
riceland.vibeia.com
weunion.media
interactive.wizes.co.th
workoutfromhome.app
www.wybe.app
yessicasd.com
Other domains in certificate