77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.getaiassist.app
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 26, 2026
Valid Until
November 24, 2026 88 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
04:08:66:57:FB:B5:BC:33:5B:F3:F9:AD:91:6C:FC:EF:F8:7E:6B:33:9F:A2:EC:A0:C9:CC:26:D8:BB:59:32:B1
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
letterpost.secondchoice.one

Other domains in certificate

acornstooaks.healthcare
renter.advokat-t.no
renter.advokatt.no
akp48.akpmakes.tech
alpha-transport.jp
www.anoidapps.com
anyalidova.com
pro-test.apf-france.com
www.appbru.com
brooksrecleague.com
www.bsasouthskills.com
budgitude.com
buscarrastreamento.com.br
callmebeardo.com
www.carecircle.co
chimerising.com
cochiseroadside.com
codeblenders.com
cooljot.com
creatutorneo.com
culina.ca
www.daayada.org
dasistan.com
dddinterior.com
deltaroboticsinc.com
finance.devqsoft.com
dormendil.com
dragonexpress969.com
dresslouder.co.il
dronepilotcanada.com
ethanandellie.com
eu-taf.com
familycastermans.com
dev.farmly.id
fcbaythornpharmacy.ca
fgasesoresdeempresas.com
frigyesklima.hu
gekidanaousagi.com
www.getaiassist.app
gething.com
www.globalize.io
graycoding.com
web.gruposdowhatsapp.com
healthsyncx.com
www.hibaconsultlimited.com
www.hickmananalytics.co.uk
house-bud.com
academy.indefini.do
auth.insightfil.com
instademox.space
intekelectronics.com.tr
jagtog.co.za
jupiter-brilliant.com
kimhirano.ca
lalankr.in
ledenbeheer.lastpost.be
learngpt.in
lmhgroupltd.com
lubricentrobotta.com.ar
auth.lumifin.co
mantheum.com
admin.metrontech.com.br
app.minhtritravel.com
moirarte.com.br
www.mypartsmart.com
admin.mytripmate.club mytripmate.club
www.nailvial.mom
nasthetics.com
ninforge.xyz
oconsul.com
partner.offlinechallan.com
ohsheit.com
www.beta.planosoi.online
www.pray2prayoptions.com
profiserban.ro
www.ramiroscerra.com
rewardaether.xyz
qa.portal.s4biz.co.za
marvelus.saddlerockgourmet.com
linkapp.sandesh.com
sayasoftwaredevelopers.com
sealabsprogram.com
srisktex.com www.srisktex.com
dev.supadha.org
dev.superordinary.v1.test.superscope.ai
digi.sviamiprimonraj.in
libro.todossomoslideres.com
discover.trendingsaround.com
twy.me
www.v25inc.com
vi.vacancy-filler.co.uk
www.vaneops.com
versaoalpha.com.br
vivaahnaa.com
www.whiteorchidrentals.com
yunche.shop
ziweischolar.life