Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=comforterslifechoices.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 03, 2026
Valid Until
December 02, 2026 79 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
DC:CC:FA:75:BF:4F:46:93:A2:17:3A:CB:4C:2D:D7:99:54:1B:5F:55:E7:13:C5:16:93:4C:68:3F:06:3F:54:42
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
nl-apps.com

Other domains in certificate

fanatee.12traits.com
abccltd.com
www.acetennis.ie
affilatenetwork.co
affilatenetwork.com
affillatenetwork.com
afilatenework.com
afiliatenetwork.com
cloudnetkit.ajbj.online
alburycleaningservices.com
alux3d.com.br
takuvuq.anagraph.io
andreaalarconpropiedades.cl
stage-kwsc.asani.io
www.assetequityscan.com.mx
auto-lavetka.if.ua
www.backpic.app
bidniz.co.za
www.blonie.com
app.bonik.in
bunderhof.net
www.bungalovgo.com
www.cardigemini.com
cardinalknolls.com
id.caynensukien.com
charliestedman.dev
comforterslifechoices.com
correndocomraika.com.br
www.crescentflare.com
app.devuapp.com
apps.digitalattitudes.com.au
dolomitcode.it
app.dtinto.com
ettarracoffeehousebandra.ettarracoffee.com
www.eunnovate.eu
fabrilnet.com.br
www.task-manager.frontback.org
auth.gachaspot.com
get-tapp.co.uk
auth.gignav.io
guilhermebarbosa.dev
www.huygensoft.uk
portal.icibot.com
features.joebad.co hair.joebad.co
www.joinwell.care
jokesfor.net
www.kartonagen-weber.at
zebrabox-ch.keynexis.com
system.kingssecurityeg.com
auth-co.kzlogin.com
agentboard.lundervold.com
melhoresrotas.com.br
mentalmercury.com
www.midatlantichomesolution.com
milkdromeda.dev
modecamikke.com
www.mohalkos.com
www.monibeen.fr
multibos.uz
musicbunker.life
nyvora.pl
packs.openwop.dev
www.ospniezywiec.pl
console.platcel.lol www.platcel.lol
mappa.rallydelmatese.it
www.rambongmuaythaigym.com
dev.rebekah-flora.com
db.recent-dentistry.com
reggischristianwedding.ca
app.riffstash.com
www.rosenbauers.com
www.sartecsoftware.co.uk
searchperformance.co.uk
admin.seasonalbrewing.beer
segeventos.com.br
sharehome.biz
shramsathi.com
somafizyoterapi.com
spacepolo.com
www.speerstravelclinic.ca
preview.springpod.co.uk
stoopteam.com
superdent.online
swahealthmd.com
time.synpulse.com
tam7t.com
uatweb1.assessments.teamleaseedtech.com
tebahchurch.ca
www.themoodycollective.com
tibetanjeweler.com
tpltpodcast.com
voltexnova.com
www.wantroba.com.br
ecommerce.wareclouds.app
www.wolna-keja.pl
www.workscaler.com
doc.zaack.io