77/100 SECURITY SCORE

Certificate Information

Subject
CN=dev-app.stebam.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 21, 2025
Valid Until
February 20, 2026 88 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
78:A9:44:3E:88:36:A0:00:C9:41:DF:A6:3E:91:C0:C4:3F:01:21:CB:EC:6C:74:AF:C3:0A:58:8C:A1:B6:8E:99
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
lincoln.firepermit.online

Other domains in certificate

arthacademy-links.4thpointer.in
setup.wizard.aivie.ch
alanayoub.dev
t.almeraim.com
app.anchorwallet.ca
updatetravel.andyafk.com
calendar.anjafritschi.ch
appclick.me
bitokatsu-yapinc.dev
bookingroad.com
bpsit.bpsdoha.net
menu.caffeitalianomantova.com
campingberlin.co
www.characterplan.xyz
agents.allsolution.co.in
app.dapani.gr
design-systems.dev
plmgroup.deskbooking.app
portal.stage.doc.cr
ecmm.day
staging.mobile.ednalabs.com
cdttu.edu.vn
correios.empresti.me
www.escamboapp.com.br
www.escueladeterapeutaschile.cl
estamoscerca.uy
web.eyefile.be
www.ezkoray.com
fdtigermaster.com
findakirana.com
app.foxwayapp.com
link.getonform.com
www.gniex.com
graph.com.pe
www.greenchip.in
backend-dev.greenhillcapital.be
harpnote.net
pay.hastee.com
www.hnzkstudio.com
www.issdonline.org
jalaw.fi
embed.jambam.net
www.jotthis.org
www.knieszner.pl
www.kosmosphuquoc.com
sonorous.krone.studio
mobile.parnassys.lexlibris.nl
tokensale.madnetwork.io
bachtrack.mahlerfoundation.org
www.max-estrem.com
app.mobappcreator.com
www.mullet.town
www.mynavrang.in
publications.adap-2017.nastad.org
www.natejennings.com
portal-dev.nebula.org
internal.nextgatecapital.com
www.pipeline.nkportfolio.com
dashboard.noknokgroceries.com
beta.ocartao.online
own-recipe.com
dashboard.paladindrones.io
gibberish.paresharma.in
app.pedrs.org
www.pneu.md
luxury.prosperme.in
triskeltours-dev.randori.be
auth.readwok.com
dev.crm.rebatehaus.com
renemccaine.com
www.reve.rs
www.richardengl.de
www.rpiwellness.com
sachsoft.com
mathsclub.samicharity.co.uk
app.schluessfach.com
www.singlaslant.nu
softie.dev
www.ssbuffingworks.com
dev-app.stebam.com
app.structuredpracticejournal.com
app.stunlo.com
tack.one
tcanary.com
marathonapp.tcsnycmarathon.org
www.tinhlaikep.com
ski-trip-calculator.tune-nest.com
twiddlemeister.co.uk
union-bauzentrum-hornbach.eu
www.vaplayer.com
www.vertigocreativo.com.ar
viqmedia-agency.com
www.wapleystables.co.uk
wasei-golf-korea.com
xcan.me
go.xoxo-app.com
apostaonline.xptoconsig.com.br
youtube-hub.com
zlo.me