Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=magic.audio
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 11, 2025
Valid Until
March 11, 2026 69 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E0:E6:95:FF:6C:80:A8:C0:79:BD:4B:D3:12:20:B1:28:E7:45:B3:EC:A4:AE:9C:1C:F1:D3:DF:5A:E9:11:DF:01
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
medacus.com

Other domains in certificate

18point-event.com
activaenergia.es
agitly.com
www.aidocumentmaker.com
www.arith.app
atrasado.com.br
app.bankio.co.uk
www.bardeko.in
bci.lu
app.beetel.xyz
go.billmagic.app
bitcoininaction.com
dths.bluecoltan.com
www.bluexpressve.com
staging.bobbll.com
www.booze-feed.ca
www.borreliachecken.se
cambridgeworldschool.in
cecen.ar
assets.centrorivadavia.com.ar
www.cheq.com.br
link.chilindo.com
ciratechnology.com
circuitobh.com
panel.clickscape.digital
www.edaun.co.id
codekelvin.com
www.codewithsamuelson.com
www.coedify.com
comercialluizinho.com.br
dbox.com
downhomeviews.com
www.drainlabs.xyz
drlihikeren.com
www.ethanensminger.com
go.mimic.eu.org
fanya-todolist.com
app.fazendacoffee.com
www.feedontime.com
fixy.nl
dev.fncapital.ca
fullstage.app
www.globelaxy.lv
gowoodside.com
grad-rent.com
graphbud.com
www.helpinghandbehavioralhealth.com
domingen.heydanno.com
bkeep-hive-page.hostabee.com
humacit.com
www.hyrovault.com
iconstel.com
info.digitalse.ikea.com
inefai.com
ipathsystem.com
www.gomoviesx.is-great.net
jacytc.com
jespergustafsson.com
www.kayarevive.com
kwiktasks.com
linkzy.app
lisa.lisareddig.com
littelboy.com
kaizen.m1studio.co
madrang.com
magic.audio
mangolgroup.com
www.measureshub.com
nailsandus.com
nicktoa.com
nupav.com
onlinea.pl
openperiod.org
zhiti.org.ua
dev.ottaaproject.com
staging1566.panl.co
wghf.philanthrosphere.com
api.photozen.gr
pinfinity.in
app.piscino.ca
ksm.polkashots.io
www.rakennuskuivaus.com
mlresearch.rebag.com
refineai.tech
san2beerelli.com
schlott.ai
www.seedtoshrimp.com
www.sigollc.com
simplerio.com
stannedialysis.org
suranakliye.com
thewireframebook.com
unlimiteddrywallsystems.com
upshotech.com
vaekstviaviden.dk
www.velvarskynapadnik.cz
app.waseda-onodalab.jp
whatsscore.com
www.zaraz.digital