Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=docs.flightplanning.aero
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 09, 2026
Valid Until
October 07, 2026
56 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
47:C1:9A:D3:B0:28:4E:20:37:81:30:45:2E:E7:C0:6D:1F:BD:12:FD:64:C3:EE:5E:93:26:E5:C8:7A:8E:4E:AA
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
makeowers.com
landing.40use.com
acgfunded.com
adminvatchatxe.xyz
allegrezza.org
directory.amchurch.com
www.ankaramobilyakurulum.com
apartinator.ro
bidel.net
static.biocleanct.com
www.candyfighter.com
cnsa.cloud
cristian.io
dadaki.com
php-developer.dev-master.ninja
devtechplus.in
digineeru-lsoa.in
digu.io
www.donneincucina.com
staging.driver.com.ph
www.duna.games
app.dutelog.com.br
www.el-divan.com
www.enrichvoca.com
staging.explaintech360.com
www.dev.explaintech360.com
www.explaintech360.com
inmemoryof.fanciedstory.network
www.finestdoorsmiami.com
docs.flightplanning.aero
futuremindsfund.org
ganaconfran.com
www.giraa.com.mx
app.givling.com
gracieaj.com
www.gracieaj.com
verse.hatelabo.jp
booleantt.hazeapps.com
www.hceducontinua.com
healingpath.co.za
www.heyhazel.ai
www.hinmantechnology.com
hozon-gunsou.com
iaiwaf.com
ikey-p.com
www.infinittag.com
kreatific.com.au
auth.kriosm.sg
www.kropai.com
www.laundrykupang.biz.id
estates.leasera.com
leicestercarnival.com
us-qa.lgcloismartlift.com
libratec.com.br
physician2.dev.lifemd.com
lolita.fashion
dev.menu-7.com
gpstracking.mikejam.es
admision.minddo.com
www.morona-service.com
mytaxpoint.com
www.najahdawrat.com
netsights.dk
northernthinkers.in
nowtrektrading.com
nulgrim.com
ogt.me
lab.omicsboard.com
ooogo.org
x.orcacke.com
www.pureinfrastructure.com
raw-buff.com
reillyandcadi.com
rentta.fashion
rpsoftwaresolution.in
app.runorstay.com
sakuradynamics.eu
app.sayso-ai.com
search-api.p.silver-smok.com
sizeora.in
shelterbelt.sksis.ca
mobile.spaceshare.vn
stats.spurningar.is
statsimple.io
www.statue.se
securenote.suryainfoweb.com
synprobysisis.com
link.tempmee.com
test24.fun
www.theprrecruitment.com
tigris-guardians.com
tohumgala.com
trioenterprise.in
www.trioenterprise.in
uilaunchpad.com
dl.umindmentalhealth.com
vela-health.com
auth.veriport.visionarycoders.com
watermarks.io
word5.app
Other domains in certificate