Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=mankinds.net
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 05, 2026
Valid Until
October 03, 2026
51 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B0:0B:07:3D:D7:6F:3B:2F:E8:B2:B7:4C:AE:AA:57:4B:69:90:BA:67:CB:89:B3:92:F8:DF:1C:78:D6:CB:C8:96
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
miandi.shop
www.abbeylectalse.com.ng
console.angainor.ai
www.bahamutsoftware.com
beauty-lab.mx
wallet.bitfinity.network
staging.crm.blockframes.io
relay.bluewings.in
hi.cashx.lk
www.chordassist.com
projects.colorhub.online
auth.colorroom.top
m.creditea.es
www.dannycellpower.com
danwei.shop
dec6.in
dimnik-ai.at
admin.dirtybirds.band
www.eggsklusiv.de
powerbank-agent-test.energic.sa
app.enimas.co.jp
developers.enimas.co.jp
ethanbradley.co.uk
followthemission.app
fsnegociosonline.com.br
gary.paris
georest.ge
dump.godlycow.org
www.gozetech.com
www.haribusservice.in
comparison-staging.homebox.co.uk
preorder.hotwax.io
fil.iansa.fr
www.imoveisjardimsaocaetano.com.br
izisurf.store
www.izmirtasimacilik.net
elopro.jardelmessias.com.br
junzeng.shop
www.junzeng.shop
www.karen-joynson.co.uk
katapromo.store
kelvix.cool
www.kelvix.cool
vuefire.khoi.app
kroatie.pro
www.likehim.app
locallyapp.shop
lorelink.com
makefriendsonline.online
mankinds.net
noverbal.mejoresequipos.com
mesbro-religion.mesbro.in
mesuena.online
laa.mightybyte.us
app.monument.nyc
mrdiamond.com.tw
muhammad-alsharafi.sbs
www.muhammad-alsharafi.sbs
nanfuinter.shop
www.nanfuinter.shop
nestrahub.sbs
ng.is-a.dev
ucin-docknow-dev.onymos.net
lctrh.paco.app
stage.petstar.link
hidoe-data-reports.pmcollab.net
poshaksharen.ir
ua.programmingmentor.com
qingqiinte.shop
www.qingqiinte.shop
www.racehub.io
www.rmals.org
web.sangfah.com
sanka-store.net
sesta.study
shenggong.shop
www.shenggong.shop
signacare.co.uk
budget.souravdas.dev
muzil.sssolve.com
app.stage-kira-internal.com
backoffice.stage-kira-internal.com
bridge.stage-kira-internal.com
beta.tpv.stratya.com
sweetoothpastry.online
dev.admin.takeaway.mk
auth.testmasterhub.com
app.thaihomes.in
yellowumbrella.tiffanyangeles.com
www.tijmenvangurp.nl
triviagame.co.uk
tvujremeslnik.cz
www.typingbanana.com
venkatraman.site
dev.virtualman.ai
www.yiliuint.shop
yiliuint.shop
www.yu.software
dev-yu.yumitos.com
diary.zatsuzen.org
Other domains in certificate