77/100 SECURITY SCORE

Certificate Information

Subject
CN=stg.epex-album.re2fe.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 30, 2025
Valid Until
February 28, 2026 87 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
6F:04:2F:63:22:63:00:E2:16:70:0D:E7:79:93:AD:FB:C9:32:6B:47:02:36:A8:2A:E8:34:3E:01:35:ED:03:50
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
lavchat-user-styles.lavenirapps.co

Other domains in certificate

abhinavranjan.me
gtd.agustinallamanocosta.com
app.aitalks.cl
www.angelstrail.com
apnatcher.com
appsinfinity.com
auth.arcade.software
autx.net
babantu.com
battleplan.uk
bayatechllc.com
casarural.co.uk
hcp-webapp.qa.clipboardhealth.org
admin.lowcars.co.in
www.hermiso.com.my
pricelist.combimix.com
cornerstone-builders.net
www.dbaonline.com.au
decartrade.com
dejavu.science
www.depaulathleticscamps.com
www.dylanvarghese.com
emarcotte.com
www.enemiesofthepeoplemovie.com
www.ennellgroup.com
ephwords.com
eredimonticelli.it
faithinafrica.org
figure.gallery
flordeldia.com
gcip.dev.help.fnzsupport.com
foxmitigation.com
app.crm.gcunit.com
www.gossippartyboutique.com
hbu.gmbh
www.howmanydayssincefsuhasbeatenuf.com
hs-lepus.com
hydropneumaticonline.in
preview-dev.interplay.io
law.ixorax.com
dl.jazztv.pk
staging.klearly.com
kodybyte.com
ling8.co
dev.localbuddy.co.uk
dashboard.lugus.digital
www.lutreeco.com
pathfinder.madhive.com
www.marcbaiges.com
bangbegin.meander.media
yorksandhumber.partners.medics.academy
ak-marines-data.merthincloud.net
www.millerkrish.co.uk
mohammedhassanlatif.uk
www.mouldtechsol.com
nanwani.in
nativealien.co.nz
go.niyama.academy
www.notfalltag-heilbronn.de
icici.app.onfinance.ai
onlydigitals.in
orkanx.com
www.owefoundation.org
apply.pod.insure
prayersend.com
dashboard.promopromo.be
stg.prooface.net
psicologiareversa.com
quest.mn
radartechnosoft.com
stg.epex-album.re2fe.com
www.recyclingpioneers.ca
www.renderobjects.com
www.ripariansoft.com
sageg17.com
app.sanchoai.com
www.santuario.travel
academy.sestrasolutions.com
www.shalomfuelportal.com
www.sharemylocation.org
simgepanjur.com
skillnav.in
smart-pet-coverage.com
somex.in
auth.stylecarousel.com
bodadiaznerio.swanmoments.lat bodagrijalvasalinas.swanmoments.lat
www.swipelab.com
www.talentrom.ro
tinyd6.games
www.truzen.com
inv.dev.usemason.com
i.valerahealth.com
vivinatural.com.ar
go.wanderoo.it
wondersofwater.com.au
openmob.yodelit.co
yureto.com
www.zenblends.com.ar