Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=mock.whiskay.dev
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 26, 2025
Valid Until
January 24, 2026
75 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
38:37:7D:B9:0F:20:95:E2:9A:39:80:4E:C0:22:95:00:AD:6A:11:D4:F0:9D:26:CC:A6:B5:4D:B9:B3:94:BD:2C
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
mann-kann.ch
afterglobeautyco.com
alvinhkh.com
www.anthonyfermin.com
appliedinnovationexchange.com
thetastestory.ashishji.in
astrocolt.com
scanner-lens.app.atlasv.com
app.automealplanner.com
www.ballparkvisits.com
walkathon.bamrec.com
www.bonhamupholsterypeterborough.co.uk
brewgig.xyz
bstsecurity.com
hkhs-app-link.cccdihk.com
www.champygames.com
choikokhou.com
chennai.yazhdroptaxi.co.in
spinsoft.co.th
invite.creme.com
daeunpark.com
daretobesquare.org
dev.findash.dataequinox.com
www.davestauder.com
www.deepanime.software
element.delooye.com
cca.denniscalazans.com
www.derm-ai.app
bestellen.doener-kevelaer.de
www.dox.cl
drroshanchildortho.com
www.excelfamilycare.com
glosolan.apps.fao.org
dvptst-link.feliznet.jp
www.filmcraftstories.com
www.fretboard-navigator.com
ftscorp.ca
www.goranmarcan.com
guildpactapp.com
post.hcw.one
hellocheck.in
joeandeunice.hitchd.com
www.homeandoffice.biz
controller.intrihub.io
ishu-nivu.com
itinerarydoneright.com
blossom.itsyourdayofficial.com
jamesmilton.ie
jayzenergy.com
hidden-secrets-forms-api.jenniferwadella.com
www.johnnastos.com
www.jvlab.dev
kamzinkzone.com
kirtikumar.dev
ga.leadchat.com
www.letterstokatie.com
docs.lightmap.de
emp.stv1.locobear.com
tienda.lucerolozano.com.mx
mayiai.tw
lost-items.mesbro.in
app.moving-motivators.com
www.munaldi.app
nesoyonspasraisonnables.fr
nexontown-link.nexon.com
t.nexxtmove.nl
www.nununc.com
kallakurichi.onewaydroptaxi.co
perambalur.onewaydroptaxi.co
pudukkottai.onewaydroptaxi.co
www.oster-cundinamarca.com
beta.patrontekotp.com
muddle.petrichor-software.com
poweroptimus.com
c.praktikum.click
auth.qeoxy.ai
quidam.co
riype.com
ram.rizaasset.com
www.roadtekclassaction.com
seehwagreen.com
senko.cafe
bestellen.smashburgeressen.de
studioludens.com
bodavictoryjeanmillette.swanmoments.net
synuz.com
taxi-kininarushi.com
thomasawaldorf.com
resume.trackfood.ai
uittechnosolutions.com
piedpiper.stg.unthread.io
www.vinotintosmlb.com.ve
www.vylastudios.com
www.web3client.app
www.webucate.com.au
www.wenyuan-zhang.com
wetirol.at
mock.whiskay.dev
papershare.xzmobi.com
www.yaisana.com
Other domains in certificate