Open Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=jaqu.in
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 16, 2025
Valid Until
January 14, 2026 63 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
44:D1:F1:2D:CA:85:94:5F:39:34:E3:57:7C:CC:DE:1B:0C:AC:40:55:69:A6:E7:58:C8:6B:56:76:FA:1B:5B:67
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
nookdb.io

Other domains in certificate

www.17thdimension.com
www.303madison.com
hon-modular-test.3dcloud.io
alexhy.com www.alexhy.com
animeshchakravarty.online
apostaninja.pro
www.apricote.co
www.barcliffx.com
app.beapper.eu
app.bimascolombia.com
saidtejeda2012.biz.st
www.bloombawarchi.com
jamscout.bracelit.es
chuskitchen.bryankchu.com
exam.buitientuan.com
app.calizy.com
bsides.capitale.dev
cceconsulting.co.za
www.co-sign.ai
futureblog.mandipkk.com.np
karwan-e-asra.com.pk
futebol.comounexperto.com
admin.dailytenapp.com
keds.dardan.tech
kallakurichi.eacabs.com
eastgrand.co.uk
einweisungsapp.de
evont.pt
fumepix.com
dadjokes.geekhole.uk
washer.getemit.com
www.gorillasports.sg
worth.habeck.co
m.hapipozyczki.pl
harmonycalmsgiant.com
prayer.hillsongconference.com
iamtragichero.com
associados.poolpedidos.ibo-solutions.com
idfcfoundation.com
jaqu.in
jmbastida.com
www.jorlor.us
k2staff.kangarootime.com
kroniksystems.com
www.kvna-stats.be
paul.lammertsma.dev
lianehotel.ro
loreum.network
maneesh.tech
api.worldhub.mbase.dev
setup.memorycube.dk
metripay.live
mindybots.com
www.mkline.co
www.mountplan.fi
able.next-audit.de
www.nix-detailing.com
onepercentdeal.com
app.oposas.xyz
www.picoz.co
www.pngenterprises.com
poconorestorations.com
link.prestoq.net
www.punchitbru.xyz
ranjithviji.com www.ranjithviji.com
recrootbridge.com
repl.info
www.rodafacilsadecv.com.mx
sabasa.no
www.seckler.org
www.seferovic-trockenbau.de
www.sendmebox.com
www.dev.gdpr.seriously.com
join.shv.com
silbar.nl
campus.sirajulhuda.com
smitharia.com
solacemanagement.com
invite.sparkello.com
www.spartapps.com
svetehno.ru
swingdanceseattle.com
app.synkro.co
ww2.thedatatype.com
www.trudosys.com
app.usedesigntokens.com
usetemplat.es
tra.vel.cc
ui.vnetwork.dev
www.wellmap.io
dx.whiskay.dev
winsautos.in
tradepilotcore.work.gd
radar.wunder.io
www.xylwin.fi
yashashomestay.com
yen.fish