Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=minimumstrength.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 28, 2025
Valid Until
December 27, 2025
43 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
6F:1E:85:F4:99:83:17:CC:D9:29:65:99:05:55:90:95:AD:95:6A:CB:0B:F5:AD:49:EB:D5:67:B4:68:DA:CA:8B
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
mikemiwha.com
abbatecalzature.it
kontaktyv.ack.ee
tictactoe.algorithm-net.com
www.belogant.com
platform-products.blmbastion.nl
www.calinciupei.com
www.callumwright.com
connect.campable.com
www.clearpro.mx
melkassa.cloudns.be
www.transmitter.com.tw
page.comico.la
link.coompras.app
www.creatorc.io
daweibayu.top
rds.daygroup.ca
dev4life.org
mobile-app-cms-dev.digitalgdi.xyz
solitaire.fawesomegames.com
seller.fidelizzare.app
docs.ft-crm.com
admin.fundacionsaludsiglo21.org
geller.dev
clients.greecommercial.com
www.hapsonlabs.com
www.hearthenotes.com
www.hellourent.fi
www.innoforces.com
student-demo.ischoolconnect.com
jsp.io
www.kaynakkardesler.com
kelbcoin.com
kincei.com
www.kipabits.cl
admin.kjoks.no
ktwapps.com
lenastravelingcarriers.dev
club.letsflowwork.com
appv2.linkshot.io
www.lumenspaandlaser.com
mahmoudkamel.com
www.mandux-t.com
mantra-daily.com
suporte.manycontent.com
markhamtaxi.com
jitsi-azure-dev.memoriadev.com
mindwing.dev
minimumstrength.com
ligas.mision.education
dev.myfuel.network
app.mylemonade.fr
nashod.com
auth.qa.next-audit.de
staging.studio.orai.io
super.ovwrstudios.com
app.padlr.se
profiling.penhaligons.com
app.plantista.ai
platform.playersvote.com
sso.preczn.com
qua-n.site
retailgrip.com
dl-stg.ringitgames.com
rkblawcollege.com
www.rod55.com
roorkeeonline.com
runxact.com
cfw.rxcx.au
santekotturi.com
seamlezz.com
merge-queue.shemarlindie.com
shineepoxy.com
showroom-fub-ag.ch
udacitycompanion.shubhamprakash.dev
siftstats.com
sirancheevi.com
sli-assessment.com
app.smart-noise.com
caceres.gerenciazap.smartmidiasdigitais.com.br
www.pos.soltechcorp.com
cccc.sowl.to
www.startgamenight.com
www.stellaresidence.com
studentlife101.com
www.superfan-ai.com
techtitles.com
thegoldapple.com
login.thekrazycouponlady.com
twocoffeys.com
schema.typesync.org
get.unlimitedbiking.com
rstd.upskillscenter.com
xardiant.com
xclusivlux.com
stream.yasb.app
you2academy.com
admin.youtabox.com
www.zerxe.com
links.zurifertility.com
Other domains in certificate