Open Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.gdk-consulting.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 17, 2025
Valid Until
February 15, 2026 82 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C4:F1:D7:8D:D9:23:3B:EA:67:4F:0B:67:BF:E9:3F:46:C0:CD:20:D8:EA:E3:07:10:70:07:87:66:00:90:EF:B3
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
maddie-lee.org

Other domains in certificate

1lavanderia.link
www.9ten.biz
abbit.co
acouture.net
www.adivinaque.com
www.agamagizhan.com
qr.albert.health
ancomex.mx
andyzqli.com
subscription.aparoo.my
imagination2024.artandculturehk.com
grace100.augmentedrealityjamaica.com
auth.bakonicafe.com
dashboard.barcodenumbers.com
test.user.bharat.id
chaincard.co
www.cherrych.net
codesymphony.tech
connectme.work
app-next.crosslog.life
culturehub.team
cyalabogados.cl
dalfiorentino.london
clasificados.diariodelsur.com.mx
vtt.dicehorizon.com
admin.drop2droptaxi.com
stage.app.aeghome.electroluxmobile.com
empiresystemshomecare.com
entquiz.com
tongue-twisters-tagalog.fedmich.com
www.fruitbeast.com
ganpatihospital.org
www.gdk-consulting.com
hcoesonepat.org
incentivize.me
vutg-de-testing.input4you.be
devtest.insightsforprojects.com
biz.instapoints.com.mx
www.jinluactor.com
josephmalam.com
k-method.ai
keepler.co
ktern.ai
lauritaipale.net
law-ful.de
lifewarelab.com
lior.lol
lukul.ca
www.lzz.me
www.mendleinpharma.com
prod-programs.moregooddays.com
mundoantiprohibicionista.net
myrempla.io
www.neexo.es
padelchamp.app
panini-art.club
pfeilgift-welt.de
portal.ping-culture.com
push.piota.co.uk
posble.posible.in
potluck.click
precioscamaronecuador.com
ua.programmingmentor.com
www.prosperai.tech
quebrantabirras.es
resumemyjob.com
www.ropesout.com
petcare.salmansayeed.com
sbierp.org
app.silsnp.net
snapdoc.online
sockguild.com
link.tabify.soundworks-ai.com
www.spaceagelabs.com
bc3.taxsem.com
teacellar.app
tedsamaha.com
www.thetridentfamily.lat
thevillagelibrary.org
www.quiz.thpent-global.com
thunderboltelectric.us
test-v3.tecore-client-cdn.timeedit.io
positional.trewartha.io
tub1.work
twincon.org
dev.undobtn.com uat.undobtn.com
valkcablecareplanner.com
valkcablecareplanner.nl
vitaledge.fitness
playgo-dev.vonder.io
vsdinfo.com
store.webm.me
wipple.ai
witchai.app
yodview.ai
links3.yuyoapp.com
zapotestock.app
zenalyz.io