Open Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=markit.education
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 23, 2025
Valid Until
January 21, 2026 59 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B2:D3:0D:5C:2A:A7:AD:86:99:B9:3A:D6:69:3E:A5:16:33:B6:CE:82:CE:30:97:7B:D6:07:82:5A:B3:88:62:04
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
ncdatastudio.es

Other domains in certificate

abaixodezero.net
bestellen.alanya-kempen.de
angelasette.com
www.arsense.app
artesfera.it
bicycle-facilities.com
highlights.bitsbox.com
judge.buglife.fun oj.buglife.fun
www.carmya.com
autosport.carpoint.agency
digitaldreamworks.co.in
yasinkaracan.com.tr
auth.hj3.cyberhaven.io
www.danlowe.dev
www.dfsshipping.com
djlatscho.com
www.djmconstrucciones.com
dxdriving.com
eigentrax.com
www.eminencemsmeawards.com
sge.energisa.com.br
www.esnault-virey.fr
www.evmaker.net
www.fedd.dev
firsttimeaircargo.com
app.fitit.ai
devfest17.gdgahmedabad.com
www.gelartapp.com
transparenciaproactiva.monterrey.gob.mx
www.gym-bug.com
gysite.in
www.hotelneelkamal.in
induscalci.in
iz.life
dashboard.jankalyanam.in
link-yiu-tung.jec-digital.com
kingtattoos.in
notes.kkrehl.de
lgx.fan
link.mamalyfe.id
markit.education
www.marzouka.net
meuvizinho.me
midependiente.com
minerva.live
auth.minutewhisper.com
docsignfergarcia.mirmit.es
mrhidir.net
myemrys.com
mylesjp.tech
www.mytexpert.com
links.nala.com
www.nexumlegal.com.mx
nrbschoolofexcellence.in
tenkasi.onewaydroptaxi.co thiruvallur.onewaydroptaxi.co thiruvarur.onewaydroptaxi.co thoothukudi.onewaydroptaxi.co tiruppur.onewaydroptaxi.co
peterfrohlich.info
pmvxb.online
pond.gg
app.portao3.com.br
dev.proper-ly.com
dashboard.protect3dpads.com
raimptech.com
turndry.randomfact.com
snow-white.reev.group
development-test.my.remarkable.com
rhp.is
ribsa.org
roya.marketing
admin.runmyservice.com
auth.samaalthawaf.id
sarahandfrank.party www.sarahandfrank.party
demo.scanalyticsinc.com
shebu.me
skpp.in
smallstartups.dev
solutionfornextgeneration.com
beta.stepfood.com
app.taption.com
tejimandireferral.com
tenfortulsa.org
thibault.studio
www.tokisushi.es
tracyxliu.com
www.truetech.com.ar
trumanandjessica.com
comotion.turbosbir.com
twobuttons.games
app.waitinglist.dev
wantapps.com
whatscampaign.weasydev.com.br
t.woov.app
xdroppro.com
www.yujenlin.com