Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=auth.songbrio.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 29, 2026
Valid Until
October 27, 2026 83 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
20:18:C1:09:EF:C7:70:EF:63:FD:0A:B2:17:54:B7:DF:0B:9C:39:29:9E:F8:A8:F6:C6:80:90:CF:FF:BD:3E:CA
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
masdar.dev

Other domains in certificate

www.ailogocreator.site
pdcatch.is.amplifiedit.com
dev.aplano.de
apostoliceritrea.org
bachatmarket.in
backpattutoring.org
bdhidraulica.com
dev-cda.bens-groupe.com
courses.bezkoder.com
stg.bipod.fit
www.bpotecnologia.com
www.casloeffen.nl
www.portal.catsulogistics.shop
www.cherylasteele.com
manager.civitime.com
auth.classchat.cc
my.classroomapparel.com
comparacompras.com.br
www.comunidad-vecinos.com
consultores.red
cottonspace.com
markmywords.criscorrea.dev.br
admin.crush-words.fr
davidhicks.dev
dexcalidraw.com
www.ecomdyno.com
eraimotihaskovo.bg
erikohlen.com
fanorcan.com
olympiadregistration.fide.com
forbes.tools
plates.gelin.one
getclerked.com
gotticket.pa
haricareer.com
healthplugpharmacy.com
p.hxmspace.io
admin.ime.bo
infyni-kids.com
ipboavista.com
kansai2-lp.jafplaza.com
app.storybert.jakob-fuss.com
tribe.jasir.dev
kushkushitsu.jay-productions.com
store.kasoft.vn
admin.khamvong.com
store.kumunua.kr
lambunao.legisled.com
www.mallef.com
maloha-chinese.nl
english.manhnpc.com manhnpc.com
metalparts.hu
en.metaplanet.tech solution.metaplanet.tech www.metaplanet.tech
mitrho.com
msellerchart.com
multimarca-cundinamarca.com
www.muontelescope.com
musicplusfood.com
nass.im
nateperkinsmakesthings.com
artistos.nishaad.art
eye.omen-audio.com
join.opencouple.app
www.ovochef.it
phillydu.com
pinkhamtraveler.com
embed.podkite.com
dev.presentation-upload.com
proguru.jp
ieteikumi.rdks.lv
redforestal.com
www.refeel.com.ua
www.registryimdo.org
hyperlocal.rehov.net
remishinehealthcare.com
pepsico.remotestate.com
soccerlegends-link.rhizatech.com
riffthegif.com
www.righteouscharity.org
stage.rvive.app
resume.sam-redmond.com
shivcontrol.in
shore.lk
uat.snowjoe.com
solitaireplayfree.com
auth.songbrio.com
test.pics.sprpic.com
spskidz.com
stefanveispennerup.com
www.teaganskitchen.com
www.tenery.cc
admin.the-window.nl
tombridges.dev
ales.tomcal.cz
trolll.org
play2.wingames.world