Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=emlynclay.co.uk
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 07, 2025
Valid Until
February 05, 2026
83 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F1:A7:D7:1A:29:70:58:72:DC:AC:F0:9E:02:0B:CA:AD:B3:08:D0:73:B2:36:B8:63:B8:BC:77:82:7C:DA:DE:4E
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
agencia.synergit.cl
constructora.synergit.cl
energy.synergit.cl
marketing.synergit.cl
modern.synergit.cl
8794.imoreno.dev
absolutehrsolution.in
accintech.com
www.accintech.com
play.adeptly.ai
ai-align.it
diff.amerkovacevic.com
ansuzraidho.com
docs.api3.org
img01.badmintonalley.com
blomstermakeri.se
get.bondit.app
bouncedaily.in
www.buildvibe.in
birthday.bullyinthebox.shop
ciascore.site
oguzhan17promaxalabildimi.com.tr
conduct.chat
pizzaburguer.corntech.com.mx
www.cruzhacks.com
auth.delern.org
devcon1solutions.com
diamindstudio.com
www.diamindstudio.com
movies-spa.dimitargegov.site
dizzymoonprofile.com
aabb.eletechautomacao.com.br
elzenmusic.com
www.elzenmusic.com
emlynclay.co.uk
felipemarx.com.br
admin.fototrans.in
fototrans.in
gemusegartenmissal.com.br
www.getbillx.com
gift-umusic.com
glassbeesolutions.org
demo.growincloud.site
helloaakash.com
tasha.heysalad.app
hudsonansley.com
huntthenight.com
hvbode.com
bcard.idminegocio.com
www.iletus.net
mozaikplay-stage-3.ischoolconnect.com
itroomsolutions.com
www.itroomsolutions.com
jkelderman.co.za
jksolutions.gr
dabble.jpcreekmore.com
www.jro-jmcs.com
www.justinwright.io
www.kit-solutions.de
learnchinese300.org
leija.se
alva.m1studio.co
maquinatextil.com.br
meins.me
moviescripter.org
mumbetti.com
nwcon.fi
omap.gg
staging-admin.oresalo.com
www.pianolessonsoxford.co.uk
pickuick.com
www.pickuick.com
pupzik.com
qwikpercentagecalculator.com
www.raxar.dev
rivierewater.com
rolizaappstore.in
www.sarojatransport.in
skaia.ca
preview.app.socialife.ch
spectrumfabrications.ca
winterhawksbingo.sqwadhq.com
ssmadvocates.com
www.statekeralalotterygov.com
stjo.farm
admin.beta.svpernova.io
bodanathalieytristen.swanmoments.lat
tfcgym.in
widi.timebali.com
ts21innovations.com
tungstenfitness.in
tungstenfitnessclub.com
test.turborad.com
turkish-shop.com
visualmath.academy
www.visualmath.academy
whereiskevin.com
www.winfield-dental.com
r.wisey.app
www.yeehi-global.com
Other domains in certificate