Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=bearstoneconsulting.in
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 05, 2026
Valid Until
October 03, 2026
39 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
51:42:14:44:A0:B9:81:5E:FE:CB:CE:D6:2D:D1:8D:3E:9B:20:F4:70:C4:99:69:8D:FD:CF:3C:FF:A8:52:B4:DD
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
lp.bearcode.co.jp
202416992.id.vn
www.24hourplaylist.com
admin.365medical.or.jp
application.365medical.or.jp
mypage.365medical.or.jp
simulator.365medical.or.jp
accuratesystem.my.id
links.auk.com
bearstoneconsulting.in
birdcagetech.com
www.bisha.cfd
labels.blueringprint.com
calmjewelry.com.au
www.cantadukkani.com
carnect-crm.com
carolinaolivo.com.mx
cellplushn.com
app.cgair.com
chatandmoney.com
slmservice.admin.cizlot.in
www.commonthread.group
www.connectedmachines.com
documents.coprevencio.ad
tacticies.coreadings.com
www.beta.coursebooku.com
dermaprotecfilms.com
www.dionisiowebsolutions.com.br
pensioen.directict.nl
www.dmfollowup.com
dorinela.ro
drgabrielcadena.com
zerocode.duytung.vn
mia.e360.mx
gdlh.foodle.su
cs.fornestor.com
fplscrutiny.com
futurebrights.com
www.futurebrights.com
color-block-rush.fuwariworks.com
starflight.gagames.net
galaxiasonora.com
getmoulin.com
www.getshrimpiq.com
gigamow.com
healinghideawaymassage.com
humanixtechnologies.com
idoleshem.com
influyst.com
diretoria.institutogaiato.org
report.itsukiforestworks.com
www.jumocore.autos
kartaggen.com
www.kumunua.cloud
go-staging.kynetik.com
lankatechinnovations.com
www.laughmask.com
www.logosgumruk.com
loremquotesum.com
lugaresdeaprender.com.br
timetracker.makesoftware.uy
mariscosguayabitos.com
www.marprimevo.com
the.company.mikealicious.co.za
omkostningsberegner.test.monax.dk
m3partners.mvx-labs.com
www.m3partners.mvx-labs.com
mywellness-coach.com
navipointhealth.com
www.negash.co
www.nqobi.co.za
nstextilesandpoojacentre.com
roles.openeng.ai
www.outspot.app
pos.ovrion.xyz
www.ozmidia.com.br
photonhealth.com.au
www.pointonefilter.com
review.pordal.app
prashantsinha.com
www.precile.app
rabbitocrm.com
reach-cad.com
try.recallifyapp.com
portal.searchkings.ca
www.shatzki.co.il
www.skyms.co.kr
resume.souvikghosh.info
app.stanme.ai
www.t-order.jp
www.tactau.co
teamkaikei.com
www.ten8.co.in
www.thaivacationclub.com
app.vektos.app.br
pedraelamaadventure.vivabemagora.net.br
www.vivahika.co.in
www.webbyapps.io
test.matrimonioalebea.weddingonline.it
ordering.wikmit.com
Other domains in certificate