Open Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=link.buystars.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 10, 2025
Valid Until
January 09, 2026 58 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A5:EE:3C:2F:7B:44:AB:77:0C:62:7A:1F:6D:5D:C7:7A:BA:1B:48:F8:EC:FA:15:CA:03:1C:A1:70:9B:8D:8A:0A
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
michalbargenda.com

Other domains in certificate

3dprinting.biz
a-paxz.com
acruxsolutions.ca
activitystreak.com
link.airvuz.com
ajamalkhan.com
albertschwartz.com
www.alexandrenadal.com
antelope.rocks
congresoyexpocotelco.appsiste.co
www.arslanyakup.dev
www.atlasreality.xyz
backlinks.bako.co
beulive.com
app.afg.shopifyapp.bigblue.co
tools.bit-univ.jp
blankdisplay.com
uat-admin2.bluuu.co
app.boldermoney.com
soundvafest.bracelit.es
briancoppoladesign.com
coordinator.businessenergyawards.ie judge.businessenergyawards.ie
link.buystars.com
www.chally.in
championfertilizers.com
miranchito.clau.io
intranet.clicksmile.com
www.papayaholidays.co.in
twoday.co.kr
puntofacil.com.ni
app.cometelapp.com
entrant.constructionawards.ie
bahia.crowtec.co
firebase.blackwaterbay.cybrary.it
daily-sword.com
skullwise-test.devbeebit.com
drinking.cards
www.dyslexiatutoringnz.com
echitect.com
pipelinegame.eficode.com
emrekaansurgun.com
ercunlocker.com
wayklase.eskwela.app
ethiopiapatriots.org
share.fanpage.com
fantasystatshub.com
fpsyndicate.com
fyrlabs.com
getbap.com
bernie.getzoyan.us
globaldiscoveryhub.com
hexeway.com
horizon-education.ro
hru.chat
applications.staging.hummingbirdtech.com uploader.staging.hummingbirdtech.com
juniors.app
www.kaeru-app.com
kyriakos-papadopoulos.com
anilao-site.legisled.com
www.lomboloband.com
www.magnit.space
app.manabity.com
mcmorrow.surgery
ds.melle.io
moodengkaia.com
www.mypaidbills.com
nobux42.com
otakujs.dev
www.ozdemirbatuhan.com
pathwaycscolleagues.info
www.pearldropschoolpune.com
entrant.pharmaawards.co.uk
www.piyushpaliwal.com
app.plugfy.com
produvar.de
progmester.hu
dev.psybitcoin.com
www.pulpobrand.com
static.pzbuk.pl
qibdo.com
admin.dev.qrizo.app
raahtech.com
pulse.rarepetro.com
patreon.remoteforslides.com
app.resolveup.io
retrospect.co.za
revs.express
sb-4you.com
taazasabji.com
notify.terrvio.com
therangersfoundation.com
thundercabokc.com
www.transcribe.com
skillstree.applab.unc.edu
literature.usp.center
voyahtm.com
whichone.in