80/100 SECURITY SCORE

Certificate Information

Subject
CN=www.zhukov.lv
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 26, 2025
Valid Until
January 25, 2026 64 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B6:8B:C7:BA:E1:3C:28:94:8E:4B:6D:80:41:9C:11:92:65:14:5A:07:C4:14:65:AB:C3:9E:D9:93:AD:EA:DB:C9
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Basic
script-src; object-src; base-uri; +3 more
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Present
ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
launchpad.edux.one

Other domains in certificate

join.2stable.com
lowes-kitchen-visualizer-test.3dcloud.io
acharyatraining.com
admin.ag-kiosk.ovh
hbu.agint.no
agroexportadoraperdomo.com
rutas-espana.airhopping.com
www.alejandrogzn.com
alias.cards
www.allergy-pal.com
appmazeme.com
www.arkeis.tv
ateliertantine.com
awardwinning.fi
dev.blocktistics.io
test.caddiecertification.com
www.cahasmukhgogar.com
ccintl.cc
cgcmmap.com
app.cimma.dev
clcspace.cz
www.de-time.com.tr
www.themagictouch.com.ua
www.compensadosnn.com.br
console.compliancepal.eu
isp.admin.convercus.io
dev.converge.is
dev.1337.com.ua
shelter.dopomagai.org
www.ecomplus.app
blog.eeffoc.coffee
www.eficientis.app
drive.ejavec.org
ellahoefl.at
privacy.emoticup.in
www.fightstat.com
www.fwatc.org
qa-chatbot.gamewithservice.jp
howto.gigstack.pro
gotrace-dev.gochain.io
godreams.org
expense-tracker.gsconrad.com
guydecoration.fr
hammerzconstruction.com
helpmedoc.kr
www.hero-workout.com
www.idelab.com
www.jbio.co
www.jer.one
business.justpay.io
ezxhaton.kccricket.net
keynotestaffing.com
kone.laput.fi
rhythm-dev.lassio.io
auth.lehrer-bot.de
likelygood.se
health.luca-ai.app
www.luisbajana.com
marechercheimmobiliere.fr
app.mediaoxide.com
page1cookie.mymoons.mx
saudi.nationalday.ai
www.nattamelding.no
ozak.co
order.paleta.com.au
marlink.pensioenbij.nl
www.pensioenbijvlc-partners.nl
m.pge.link
link.picky.recipes
app-pre-prod.pixis.ai
play.pods.one
preronaindia.org
satyalegal.es
cdn01.saudiweather.net
shushuy.com
signpost.dev
www.simple1.dev
simpleclub.nl
partner.smartpayservice.in
www.soundinvestigations.com
ncp.stang.im
app.stockrocket.us
stscie.com
admin.studely.com
www.synth.sk
www.thebattingclub.com
int.alder-hey.thetraumaapp.com
www.tophatvideo.com
dashboard-preview-channel.trybe.fit
www.uneleap.com
www.useasycar.com
www.v-techno.net
dealer.vinsyt.com
www.werkstatterinnerung.de
wixadmin.wonkytech.net
my-test.yoshimoto.co.jp
www.youkno.ai
www.zhukov.lv
app.zibrowa.com