Open Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=itgviet.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 10, 2025
Valid Until
January 09, 2026 52 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
5D:FE:FE:DA:0A:10:08:77:7C:1C:00:72:FA:CF:01:4D:37:42:95:9D:F3:76:4C:45:D3:52:8F:29:A5:9B:C9:24
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
leita.app

Other domains in certificate

11521893.peerly.app
hamptonbay-cert.3dcloud.io
www.accelefreight.com
laep.sit.advanced-infrastructure.co.uk
www.akhmatovafilm.com
vorschau.aktivoli-boerse.de
www.alytosinc.com
amiteshmaurya.in
www.appsforce.io
puck.bettybuoys.com
www.binarybrust.com
bitnevis.org
bomdrinks.com
boxtagapp.com
chanonmanojit.com
chekhealth.ca
www.christianbiblestall.com
www.cinabellis.ch
www.reached.co.in
tracking.lng.com.sg
test.correctpropertytax.com
crmthermoply.com
crossroadscenterfrederick.com
www.curtisapps.com
auth.actis.cyberhaven.io
www.daily-kids-activities.com
dariakurdyukova.com
www.ehaus-elektrotechnik.de
www.everydaypoem.app
fenomenos.org
test-academy.filio.io
auth.flockfinder.co.uk
www.furgosrio.com
schwarzit-hire.get-ikigai.com
groundbreakingsolutionsllc.com
m.guc789pg.bet
att.hereplusnow.com
hotcryo.com
corsi.ibisoft.it
www.ignacioaraya.cl
itgviet.com
jonnygonzalez.dev
www.junaid.wtf
keopromos.com
lgreennav.com
awa.lithodomos.com
www.lovemybunskitchen.ca
www.magvig.com
menus.malagaprofesional.es
manoburguer.com.br
app.mefluence.com
books.mesbro.in
mozan.io
app.musculy.com
mycaregateway.com.au
www.nronix.com
observatoriobanano.com
cms.orux.tv
kiln-helper.ourhouse.org.uk
www.pierfrancescosoffritti.com
pmbhatt.com
otodeger.polenotomotiv.com
admin.poojaprasadam.com
magic.posible.in
toggl-webhook.powerfront.com
proedem4x4.ru
www.quirkylabs.ai
portal.quranbook.app
www.pagos.radarentacar.com.ar
www.rectifya.com
paddlers.registers.cloud
reklamger.com
ledx3.roest.com.au
staging.scouthub.app
siete.top
www.solvix-ai.io
speedrunmusic.net
srihariharantraderssivakasi.in www.srihariharantraderssivakasi.in
www.strifemanagement.com
www.subleaf.org
www.supernovos.com.br
api.tabsquare.com stag-generator.tabsquare.com
www.tabu-fy.com
tacode.dev
app.taxagile.io
telerehab.one
google.thaipcsupport.com
accounts.coometa.tooly.fans
aruna.turnosweb.app
store.ulgebra.com
uthere-partners.eu
www.vinosperonistas.ar
vishnusanthosh.com
vntdev.eu
vtpdev.com
wesbeard.com
img-resizer.wunderkind.co