77/100 SECURITY SCORE

Certificate Information

Subject
CN=kitconsulting.app
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
June 20, 2026
Valid Until
September 18, 2026 41 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E1:11:71:B9:AF:13:48:24:91:CB:49:5B:39:14:7A:C9:B8:47:8F:B7:1E:28:61:3F:98:57:D7:6E:D1:0D:3F:AB
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
meiravcatering.com

Other domains in certificate

berichten.11yearsafter11.nl
kairos.7even-app.com
acaprimex.online
superbo.acerpay.asia
www.administers.in
staff.airportthai.co.th
aiworkflowtoolkit.com
amadusilvabah.site
apichoice.com
www.appvictoria.com
www.appvictoria.net
asani.pro
www.axiom-it.hu
pagos.benditat.com
bonnel.mx
www.businessautomationsolution.in
tools.campese.com.br
www.cestaconsciente.com
chikri.store
www.clarapetra.com
clareamentocaseiro.com.br
distribeaute.clau.io
cryptoflowapp.com
www.dbmensenorganisatie.nl
demariapropiedades.com
deployforward.dev
lp.dianeticsnederland.nl
doffee.shop
app.dornellesconcursos.com.br
dostavkiplus.com
dsheils.com
www.frame.duurzaamwonenbon.nl
heat.dworzynski.eu
e-scopics.com
www.ellevenempilhadeiras.com.br
gestao.emmovpro.com.br
eventscaff.pl
finda.cloud
finisherwall.com
foodbid.bid
dev.lms.foresthillschool.edu.kh
app.foxgraos.com.br
corporate.fsclub.az
gamecounters.com
getblackarrow.com
joi-dev.goodbaton.com
app.link.goodpharm.kr
www.greenhorizon.buzz
www.hofstra.co.zw
221bbs.ietevit.online
intentifylabs.com www.intentifylabs.com
jamesmichaelstudio.com
powerkeys.jklm.co.za
jollygo.tw
staging-update.k-9apps.com
l.ketolist.org
kitconsulting.app
histutor.lifove.net
link.livelife-log.com
w4h.liwalabs.com
babel.ck.lozd.com
lscorretores.com.br
maviyildizrestoran.com
auth.memoflow.net
circle.midjdeal.com
moemisto.ks.ua
moneymap.pl
www.mslb-intellisoft.co.za
lp.waillet.nocastudio.com.br
www.odafy.com
www.paccesadvogados.com.br
patelaravi.com
pedalponderings.com
app.preanestia.com.br
precisodeti.com.br
reportshieldapp.com
www.rivapapa.com
rosariovivo.lat
o1link.sejongsmartcity.kr
votorantim.sigaonline.com.br
skeleton-inc.jp
125th.skkudramaclub.kr
www.soapboxessence.co.za
www.softsolab.com
www.takerootabroad.com
tams.tanktainersa.co.za
tarockieren.app www.tarockieren.app
admin.tmcloset.com.br
staging.touchway.com.br
crm.trustagent.io.vn
twojasprawa.com
staging.campus.ia.up.ac.za
www.uttercash.com
cloudcam.viethas.com
www.villamagnolia.eu
www.vornix.co.in
geulgram.withwho.co.kr