Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=baskose.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
June 19, 2026
Valid Until
September 17, 2026
47 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
AA:48:AB:E9:7F:EA:B5:29:4E:DD:E6:53:1E:D4:57:C9:EF:8A:69:29:E6:5C:2E:9F:C0:3A:7D:7B:FA:36:BD:B5
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
mch-digital.space
3plbids.com
www.ahaevent.org
antyapp.com
www.avenuestrategy.com
www.axomrefurbisher.com
baskose.com
bccmthailand.com
www.bdzinternal.app
recipe.library.brewfather.app
www.brsth.com
budgethub.ai
bulutangkis.app
www.cafepetriqor.com
www.calkicker.com
www.carlosmedinacarranza.com
carownerapp.com
dev.dashboard.checkfirstapp.com
chema.co.za
colondelgado.com
www.combinativ.com
cometonwa.com
www.dagobertoviloria.com
cn-stg.dialogueframework.com
doraedesignz.in
www.economyx.ai
eduinda.com
istoc.edukamu.fi
egyptvista.online
campaign-blocks-staging.gassets.emarsys.com
extremeai.net
www.fiftynine.app
swabhimaan.finncub.com
www.app.firstday.tech
flash24.com.ar
www.flash24.com.ar
www.fortunabd.com
futurecitizens.com.au
insurbot.getlychee.link
dev.ggx.app
gni-asia.net
www.gracechristianpreschool.com
www.groupheadshots.pro
www.grouplist.app
guiadeluzespiritual.com
guillaumelechevallier.org
harvesthub.autos
www.hendryt.me
ibrahimfatihtaner.com
andri-tetiana.invito.link
www.iragazzi.com.au
itsnotyouindustries.com
www.jacobgrodman.com
r.jornadadamonetizacao.com.br
www.kavyakunj.com
dps-bom.lecien.com
lexplr.com
www.litgamers.org
mad4run.com
www.mapocaco.com
slp1.template.merdekatech.com
minetworking.com
parent-feedback.myxplor.com
nightroost.studio
nostr.com.pl
npscards.com
octoplux-dev.odeo.com.au
okke.okenavi.app
olelohawaiioe.org
padmajagraphics.com
compra.pago46.io
www.pandodev.com
peaksoftllc.com
app.ph2.io
plusbo.at
crediagora.quitapay.com
rebeccaandmatthew.co.uk
remoto365.com
www.rspasientes.com
connect-customer-ng-admin.rxoconnectdev.rxo.com
serveboost.app
www.sghindi.com
chatroom.sigmashine.com
admin.skipsourcedata.com
spindisplay.pk
structeron.com
test.supermama.academy
staging.supersimplebracket.com
mambo.survive.bet
t-con.co.uk
takisoft.com
thelogbook.app
journal.trick17.it
trygetpaid.app
tsumuchan.app
unfoldingstories.app
wearefundify.co.uk
yat-api.com
studentos.yhatch.com
dev-app.zentility.com
Other domains in certificate