Open
Cached
·
just now
80/100
SECURITY SCORE
Certificate Information
Subject
CN=edu.face2faceweb.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
January 17, 2026
Valid Until
April 17, 2026
88 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F0:21:23:A3:EC:63:83:25:1E:F8:65:5A:FC:E1:7C:AD:4B:9A:C2:56:D3:3E:D3:3C:51:CE:94:2F:2A:FA:7E:F3
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
Wildcard CAs
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • You have authorized 6 CAs - consider limiting to only the CAs you actively use
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
Subject Alternative Names
100 domains
nodeshifthq.com
www.nodeshifthq.com
www.admin.100words.org.au
app-eu.ai-receptionist.com
eu.ai-receptionist.com
chatrmaps.aluu.me
www.app-fenix.com
bigroy.life
auth.blazeclick.com
d.care.me
l.caresoft.vn
charteronesolutions.com
pilotdocs.charteronesolutions.com
kiosk.done.co.il
www.behefa.com.ng
kodai.com.tw
www.lite.concursos360.com
dev.dealcircle.ai
www.duiardal.se
eduloanzm.com
erepa.co
edu.face2faceweb.com
fantasygolf.io
demo.felixxgroep.nl
kurse.fittracks.de
flat-ah.eu
www.florizing.com
fosylabs.com
www.geependigital.com
support.getrevibed.in
www.giancarlolamberti.com
www.go-risk.org
dokokara.goga.jp
arigovo.hexml.net
crm.hypergro.ai
www.tailieutienganh.id.vn
idecasa.mx
app.radio24.ilsole24ore.com
www.init-power.com
instituteoflifescience.in
app.itinexa.com
www.jeffsheffieldart.com
pkplzen.jiricech2059.com
www.joe-bowers.com
josemauroadvogado.com.br
www.kbbsuite.com
keficiente.com
lacrossewatch.eu
www.lapastelidog.com
levimed.se
matsuzaka.lfv.jp
beta.internal-manager.loplat.com
www.lottmann.me
ctf-netlify-build-app.maker.tech
stock-plan.metalogos.site
track.mobile2000.com
link.test-app.mojob.io
store.molecularinstruments.com
app.my-helper.ch
mydietitianmama.gr
nutraworks.io
esc.onsurity.com
app.opportunityfeed.com
www.pamisa.net
pavankulkarni.com
lp.pbscred.com.br
sass-export.plentycode.com
guide.radtera.com
www.rafaelmatsumoto.dev
ratiomonitor.app
rcs.games
www.rezvip.ro
admin.richproperty.in
rockymountainmacabre.com
www.rust-cursus.nl
saenuruki.com
saliventures.com
www.saliventures.com
alkhobar.satahalfaraj.com
www.sgklass.com
www.shaunjacks.io
shreymaan.com
ym-app-qa.site-ymobile.net
installer.solarhub24.de
my.soundflow.org
insights.staging.spaceknow.com
labs.specularo.com
tangomusica.com
da.taxsat.com
apidocs.tcat.app
ems.tranzita.com
www.trekkersclan.com
troyservicesgroup.com
fb.tuankaihei.com
www.vedantaspain.com
vrvenkatesh.com
app.witful.com
wolferwedding.com
www.yohannes.it
uatextension.zynix.ai
Other domains in certificate