Open
Cached
·
just now
78/100
SECURITY SCORE
Certificate Information
Subject
CN=sikhi.co.in
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 07, 2025
Valid Until
March 07, 2026
88 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
60:9A:A7:3B:87:CE:3B:92:5A:23:64:35:BE:79:FB:0F:80:0D:A3:98:9B:36:17:12:51:F2:EE:9D:F3:DD:E3:19
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Weak
require-trusted-types-for; report-uri; object-src; +3 more
require-trusted-types-for 'script';report-uri /_/DurableDeepLinkUi/cspreport,script-src 'report-sample' 'nonce-TlR7x8MxYvoQYqnpTPzkrg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DurableDeepLinkUi/cspreport;worker-src 'self'
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Present
ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Significantly strengthen CSP directives
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
link.inut.vn
pages.9score.net
adamctj.com
v2.anfragen.additive-apps.eu
app.adventurecurated.com
esme.aimcomely.com
checkers.alignitgames.com
www.alkahestia.com
amiprojects.io
standup.apxor.com
go.arkd.me
postofficescoin.us-east-1.aws.aurosoftware.net
bbi-fit.bbinsight.com
www.benmillhouse.com
www.bluepigeonapp.com
lite.botslovers.com
aqua.bryly.net
www.app.bymegroup.com
api.careerfairplus.com
www.catherineoakes.com
sikhi.co.in
codegenietechsolutions.com
colorad.io
reekariyer.com.tr
skedule.counselvise.com
crypt-olio.com
www.cultivatemakers.org
daybyday.app
admin.dealtru.com
www.delta-software.ai
domu.plus
login.cientificos.sanluis.edu.ar
www.eisenmatrix.com
app.emotii.ai
eudynamystech.in
www.face2faceweb.com
farby.pro
launchpad-stage.fastor.ai
www.fleetdispatch.app
fnflk.com
fredmanders.nl
gastrodelivery.de
getfittl.com
www.glowpuzzle.co
www.erp.glterminal.com
app.staging.go-2-work.com
www.admin.goboxusmx.com
academy.gohacking.com.br
lupa.grupoprospecta.com.br
guitarlessonssolihull.com
hagaloencasa.co
www.heycor.co.uk
home.hopelessromantic.style
iamsajithk.com
da.instant-help.de
ms-access.prod.invita.gmbh
www.irmos-cloud.com
www.jeeb.li
jeevalifesciences.com
admin.jilpampanga.org
dev.jots.ai
khodakovsky.com
talent.kpconsulting.fr
tip-gg.kro.kr
admin.lavillahospitality.com
lunsara.com
makanyu.com
app.medhack.com.br
miki-imai.com
miseror.com
nikkiyeboah.com
nochegames.com
candidate-mvp.offerdox.com
www.olorin.tech
oolab.co.jp
paperlessgl.com
pochitime.com
rapbattle.online
staging-link.repocket.co
www.salvetat-infos.fr
sapporo2020.jp
savelli.app
frenyz.skybilling.app
refer.socaloca.football
api.sokontokoro-factory.net
spacewedding.ru
husafell.stokkur.is
storedata.app
teltapp.no
dev-admin.thecliq.app
share.thumbraise.com
stagingadmin.topnotch.club
lnk.trendaro.cz
bgc.truecreate.io
game.usecyan.com
cliente.viacertabanking.com.br
app.wemanageyoursite.com
www.customers.workeo.us
app.yannbourrel.fr
live.your-scores.com
Other domains in certificate