77/100 SECURITY SCORE

Certificate Information

Subject
CN=batak-online.appn.app
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 17, 2026
Valid Until
October 15, 2026 75 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
DF:34:D9:48:79:8B:F5:5A:F5:E9:94:80:8C:66:DC:CF:2C:0C:4C:FB:15:E7:3E:8C:2D:39:74:E6:31:5A:26:FC
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
live.aliensbrain.com

Other domains in certificate

abdussatterfoundation.org
tap.abrhi.com
ahlicitacoes.com.br
www.albsoft.ca
www.antelys.com
antelys.it
batak-online.appn.app
kultgodesign4.automationtech.hu
bangtangallery.online
bitfish.hu rag.bitfish.hu settings.bitfish.hu
bmstructures.tn
burakbeyzayiseviyor.com
www.cassellacc.com
cbytwo.com
civil-exam-prep.com
club-afemec-handball.org
coach-thato.com
www.colorwear.tw
admin.conectarhortifruti.com.br
reviews.criel.de
crosschq.lat www.crosschq.lat
www.derotterdamsezeemeermin.nl
www.dkglobalai.com
eleventeen.tech
everest.energia.app.br
energokalkulacka.cz
faceley.app www.faceley.app
focusflow.tools
gamingytec.com
auth.globalwebmarket.com
glorixbd.com
gomarafon.ru
painel.gondolize.com
dev.grandchaseidle.com grandchaseidle.com
frakt.heidenreich.no
houckcre.com
tn.icysun.fr
in-depth.app
entregas.jamvdriver.com
jawned.com
jjdivisorias.com
kimiacar.com
laposova.eu
lavlandsantana.com.br
lazharbouachai.dev
www.lumie.click
admin.lunafal.com
manuraanuhas.me
www.maplevalleyschool.in
quantumwriteros.mathwaveweb.com
mavericksvc.ca
www.mesiba.fun
comisiones.modelodem.org
muros-jimeamel.es www.muros-jimeamel.es
nexlane.info
northernhangar.com
nxtca.in
omran-october.com
ortopediapianezza.com
auth.partyponygames.com
pmot.com.br
pran-ai.online
primetickets.co.za
www.projetecgroup.com
prompthub.cloud
www.proskillit.com
quokkaquery.com
admin.razincraft.xyz razincraft.xyz
www.resosynth.com
romefreight.com
senseijepang.com
servelife.co.in
shenzhenrobotcombat.com www.shenzhenrobotcombat.com
my.simpanan.app
console.smartrails.ch
sokol-usluge.mobi
www.sportsmarketmakers.com.br
xvsophiarequeno.swanmoments.lat
marketing.techinnovatelabs.com
www.thankgod.website
admin.ticosp.com.br
twogates.ai
uat.unitedrivals.com
urklnews.com www.urklnews.com
useclaimright.com
veritascapitalofficial.com
tpeg.vexonet.online
www.visodent.ro
vlashshop.store
yearonpaper.com