77/100 SECURITY SCORE

Certificate Information

Subject
CN=app.statera-hs.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
February 01, 2026
Valid Until
May 02, 2026 87 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
0E:69:2C:5F:EA:68:49:F0:F8:B4:28:A5:53:A8:77:B3:28:12:67:32:B7:19:44:72:ED:BB:42:43:30:03:FE:A8
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
lar600.deepinc.com.br

Other domains in certificate

someoneneeds.abetterdomainna.me
www.antoinelaberge.com
www.apttick.com
www.auto-boutique.de
www.bingotown.fun
www.bonzi-avocat.fr
unavailable.casinomaxx.ph
www.casloeffen.nl
www.cirjunior.com
www.creativecubsindia.com
cryptoeasy.io
ee.ctwd.com.au
steed.danwilloughby.dev
www.derdle.com
www.dhahiahscaffolds.com
docteur-aurelie-delos.fr
docs.face2faceweb.com
familyfirst.page
ganando.app
www.gardencitycarpentry.co.uk
www.gemanor.dev
ginafrias.co.uk
www.clientes.goboxusmx.com
gojskoj.se
www.gomc.construction
firebase.hashclients.com
www.hbhm.org
www.healthtree.org
www.hopsa.be
humanbingo.net
spk-immo.imogent.com
invita.id
www.ipfestore.com
www.itsjustjarvis.dev
app.jessie.ai
www.jordancoinjackson.com
l-epargne-salariale.fr
lennaik-desir.fr
stage.player.lumiere.is
finex.meevi.app
mondexcard.com
repair.mypartsmart.com
app.novolugar.com.br
clickspeedtest.ntman.xyz
pix.okaytopay.com.br
author.paper2publish.com
patiententransport.org
www.philip-putnam.com
phymol.eu
www.playtime.page
posix.store
publifetesting1.dev
leweygrenoble.order.pulp.eu
quiktalent.com
api-dev.qwikla.com
logistics-agent.rcloudsoft.app
app.rentbook.com
ric-building-abbreviation.apps.richku.com
rolandorodriguez.dev
www.rydan.dev
www.samuelsmock.com
www.sanskarmedchal.com
canary-conference.ui.sceenic.co
projects.seyon.dev
www.shivanshvij.com
www.solquima.com
app.statera-hs.com
support.stereofy.com
suprahub.org
www.swanbiotx.com
bodaalvarezgodoy.swanmoments.com
stockit.sysquare.com
fenbilimleri.taahhut.com
equanimity.terkwood.farm
tftgroup.com.au
beta-radical.thatdogmachine.com
theblackbox.app
www.thecraftedpour.com
thekrois.com
www.thinkofme.us
thoughtignition.com
www.todzee.com
ttm-mep-cloud-qa.firebase.trimblemobile.com
www.troubloo.com
info.uiscanada.com
uitranslator.com
ukonpower.com
order.userlook.co
community.vidtao.com
www.volition.one
www.wasap360.com
www.whiteangelpublishers.com
winxie.dev
evdev.wonder-sys.com
www.work-ark.jp
tasks.yuvachang.com
app.zerolongevity.com
ziani-auto.com
www.zidanpk.com