Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=justinnguyen.id.vn
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
May 02, 2026
Valid Until
July 31, 2026
83 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
6D:6B:EA:CD:B7:2A:11:6B:74:5E:B3:EC:5C:D2:2B:61:5E:14:A9:E1:BB:79:5C:B9:11:30:67:0D:4D:F6:98:A4
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
next-step.mx
customer.2tick.it
www.aaempreendimentos.com.br
patrimonio.adbrasil.org
www.aditisolarpower.in
aerorbis.space
devadarshan.ajbj.online
www.akali4.hu
aleytheya.com
shield.algoresearch.id
khaled.alherbawi.work
autolupa.com.br
demo.axoneme.io
badprinter.net
buyvsrent.balanyc.com
bugunneizlesem.com
callofdutyleagueapi.com
chunlis9jahub.com
www.chunlis9jahub.com
clothz.online
coletta.app
credito-bportugual.com
caixacontrol.cyberius.com.br
taxi.cytim.dev
czztec.com.br
devmike.online
portal.ditch.com
www.emergingexchange.com
bombers.encert.cat
www.erenlertakvimi.com
eslinaestetikkirklareli.com
feichen.surf
www.feichen.surf
gamer.felis.ovh
flutueapp.com.br
app.geosync-ict.com
gestou.com
gridbee.app
gsvcode.nl
partner.velocity.higgsiot.com
holofoil.fr
hopzytrade.com
hosannanotary.com
intelligentactuaries.com
www.investhome.pl
www.jiatai.surf
ae.jinnote.dpdns.org
jscomunicacaodigital.com
justinnguyen.id.vn
www.kaplinski.ca
www.keystonecement.com
domus.kreakodo.com
linhnthust.id.vn
www.maixing.lol
auth.marabiz.com
xpunge.markatlarge.com
mining5000.ai.kr
police.mistsec.com
www.mythicalcitygames.com
nailmatch.xyz
dev.tree.ndunak.co.za
www.netolc.com
newsbase.store
logistics-crm-v1.nglogiclabs.com
logistics-crm-v2.nglogiclabs.com
omglinkyman.id.vn
www.pavilaw.co.za
pulseproductmanagement.com
panel.pusula3d.com
rekhandco.in
www.rmglobaltech.com
rohithao.in
sanjaygidwani.net
www.sanjaygidwani.net
meridian.scephiro.me
sdelectricidad.com.ar
www.sdelectricidad.com.ar
app.seifenmanufaktur-allgaeu.de
appclass.sevengreen.co.id
www.skillbridgetalent.ai
my-law-portfolio.skillupsolutions.in
www.speakmeettravel.pl
www.sportellobalneari.it
sundaysunset.info
tamlearn.com
www.tamlearn.com
taskall.com.br
timelift.app
trackforce.in
app.valera.systems
veora.io
verienv.com
vibeglobally.ph
clube.vivabemagora.net.br
swimtime.vojtech-netrh.cz
lilo.vsu.edu.ph
internreg.xgroups.in
www.yunamind.net
yunamind.net
zhuanyan.lat
Other domains in certificate