Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=noma.com.kw
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 12, 2026
Valid Until
November 10, 2026
82 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B9:EA:65:FA:2F:82:41:B3:2E:4D:D1:07:8E:22:B9:A0:33:43:10:90:58:3B:BF:0C:DF:EA:3E:47:8E:6D:5B:26
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
noma.com.kw
18net.my.id
www.1aindustrial.com
diamond-freshfit-test.3dcloud.io
addm.ae
fretu.aimcomely.com
alcontabilidade.cnt.br
links.alcontabilidade.cnt.br
www.alcontabilidade.cnt.br
api.anilemata.com
atelierpe.be
vagasei.atherion.com.br
app.baseroo.com
brainrotcubed.com
airesearxhlabs.bsrsdigital.in
byronhinterlandharmony.com.au
calvlab.com
catcortex.com
auth.cheftaina.com
citali.com.mx
portal.cogbias.ai
portal.staging.cogbias.ai
www-test.cogbias.ai
dynamichy.shop
spiaggiami.eleutheria-hub.it
www.elfaisal.de
feinskey.com
www.feinskey.com
fishermensacademy.com
icrkk.freetoolbox.asia
blackbook.gen.co
goconverge.app
granelegantetequila.com
gxgamehub.online
www.healthmentorai.app
hebrewalphabettrainer.io
homemedkit.app
www.joye.app
www.karachay.com
points.katuflow.io
geld.keeman.info
pharmacy.keen.llc
www.kiki.com.ng
kxp.consulting
londonskate.uk
www.lumenworks.org
marta-sebastian-figaro.pl
www.math-lab.jp
www.mathquizily.co.uk
www.extbursary.medics.academy
michelepizzeghello.com
dev.ipermit.mightybyte.us
mindbootstudios.com
monetector.com
www.noovasac.com
auth.orqilo.in
owen-dj.be
www.owen-dj.be
plantillasamigables.com
360.portalnoronha.com.br
protechautokingsport.com
provenika.com
vypar360.quickjobalerts.in
quinlan.ai
app.ramottowers.org
refaccionesnin.com
www.refaccionesnin.com
auth.rentolite.com
retirely-finance.com
www.retirely-finance.com
riograndelimpo.app
www.robait.net
rynk.dev
samuelsendzul.co.za
www.serfugames.com
seshion.org
instasave.shadow.net.in
api.shiloh-systems.com
demo-2.smartof.app
smush.buzz
www.smush.buzz
sparko.studio
spinecentre.com.hk
summitstudyapp.com
www.summitstudyapp.com
tecnomark.cl
app.teethera.com
www.teethera.com
mis.teknohama.or.tz
thecurrykitchen.com.au
machinelearning.theorygenerator.com
tumemora.shop
www.upreview.cloud
vocon.shop
wappgpt.com
app.watein.app
store.xrnet.tech
wishlist.yash1th.in
wishlist.yash21.tech
zaironinternational.com
Other domains in certificate