Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=elaunchpad.org
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
January 23, 2026
Valid Until
April 23, 2026
84 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
5B:C4:E5:7C:A2:52:76:51:B8:01:04:8D:F3:E0:3F:5E:E2:A3:F9:BB:A5:05:C1:9A:E3:77:CC:8E:09:09:E6:08
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
notetrainingnow.com
woodmark-cert.3dcloud.io
aisw.de
alqode.nl
app.apier.dev
accelerate.ariaavis.com
atelierlenteur.org
auth.fazo.bet.br
www.betterquest.io
notifications.breethly.io
buysamuivillas.com
cairothemask.com
cartel.rent
www.cernosickasance.cz
maskin.clau.io
spp.cloud-fs.net
theplantman.co.il
7webs.co.in
attendance.ecampus.co.in
icards.ecampus.co.in
quiz.ecampus.co.in
mud.concepts.app
carnitasuniversidad.corntech.com.mx
www.craftbyte.net
milo.dabustudios.com
dapps.ltd
das-portal.immo
www.dnlogis.vn
dotktech.com
www.dragonaingatlanok.hu
hc2.ec3.tech
cxhub.ecosystem.life
elaunchpad.org
dev.evofit.org
www.excogito.info
ios-support.facesapp.pro
national-cab-traveller-bugfix.us1.fleet-dev.com
www.gatly.org
dashboard.geniusrepair.it
corelink.getami.co
getstarforge.app
www.gocadu.com
golatkazan2.com
www.groove.ng
shortcuts.happergy.es
helsinki-malmiairport.fi
api.hive.properties
ingeniemosjuntos.site
jami.ltd
justsayhi.xyz
www.katerepaci.com
app.kopeka.id
kurushiba.com
lcms.space
levoro.ai
doc.m2live.io
app.maciejsobiepanek.pl
admin.mapulator.app
aed.mattschlosser.me
mayrenia.co.uk
moemamotors.com.br
mts.li
nbldms.nablasol.net
vts.naxongpshub.in
www.newagelidia.com
www.nuyonu.net
www.offyear.net
www.overnightdev.com
paaza.app
www.pasteldawn.com
login.payperfect.in
pbwealthy.co
www.pomodolce.it
prayerpoints.app
remont-kryshi.kz
renkul.com
rockquest.org
saitechengineers.net
stakehouse.cash
donations.sunya.app
www.supernovaencoder.tk
www.suvincos.com
bodaarevalovilleda.swanmoments.lat
bodaguzmanbeltran.swanmoments.lat
tbint.org
staging.grow.thoughtworks.net
trackitapp.io
corp.true-seekers.co.jp
firebase.tuki.top
www.ucws.co.uk
vetera.digital
vett.app
vortifymedya.com
vtutor.jp
www.walker-technologies.net
bingo.web.id
weberlolz.tw
kids.wumbox.com
yotevendo.cl
zvuk.app
Other domains in certificate