Open Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=core.thetutorlancer.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 26, 2025
Valid Until
December 25, 2025 39 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B6:71:99:7B:E0:1C:60:3F:7C:C8:C0:93:F9:08:91:A0:4E:16:73:4C:C4:73:64:55:EA:C2:0F:F3:3E:E8:55:15
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
magicos.co

Other domains in certificate

a1globalcs.com
allz.best
astitva.site
bcbe.ca
my.bewitness.world
app.birezervasyon.com
biscuitwalaevs.com
signindev.blueprintcorp.com
www.bomai.io
www.booksmyshrp.com
calbo.io
links-bewell.carebook.com
carniption.com
aakritityagi.co.in fitkirti.co.in
www.configware.com
www.creedthoughts.blog
d-enc.com
www.d3riva.com
daivalogix.com
deftly.tech
deminsy.com
www.dinotify.com
links.porsche.drivercopilot.com
www.dunati.com.ve
eduvrsxr.com
eluwaan.com
englisheditorapp.com
hochzeit.erkenberg.info
www.espacioidealec.com
www.etheware.com
eyd.dev
factoreal.io
web-ci.faks.co
fluffyalpaca.club
kvne.fndrsng.com
avaya-staging-ideacloud.forgedx.com
music.gokul.xyz
hagel.app
hubord.com
beta-1.app.ibscoach.org
fusionma.impactwrap.com
inkaron.com
www.jaymamta.com
partner.leapspace.in
www.legotomia.com
www.loopmobile.io
www.mdeeq.com
metashark.llc
mightyscape.in
mike-albers.com
invite.moneyclip.io
apis.msgerbot.de
help.neftx.com
www.newaddons.com
affiliate.nextbest.ai
stg-firebase.noin.shop
api.norby.live
pa-sase-uat.qa.appsvc.paloaltonetworks.com
rdtorresfm.pampa.com.br
app.pave.com
www.pawelpaszki.com
www.phng.de
app.picturegrammar.co.uk
www.pineapple.news
dynamic.plkey.app
vertex.portfoliolink.co.za
www.preschoolkit.in
workshop.readyforkindergartenidaho.org
www.saaanvik.com
sampl.us
qa.sarathienterprise.com
sdwisetechs.com
admin.se-bayern.de
sharjarealestate.com
skud.solutions
students.smarterlabs.tech
webappdev.soft-g.net
spatecovers.com
www.speakingathome.de
amberleaf-v3.studiossolution.com
sunnyclosetapp.site
svppi.org
syne.one
taga.works
pro.thecarepluz.com
core.thetutorlancer.com
a.wotapopup.tipple.xyz
blog.tooljet.io
tradt.co
transakauto-rennes.fr
www.unityimaging.net
www.usachincommunity.org
viaslab.com
visiltech.in
www.vsoest.net
www.xencorpit.com
www.yokoy.at
www.zeugnis.codes