Open Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.discuna.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 25, 2025
Valid Until
February 23, 2026 87 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
98:81:44:6A:6F:44:6A:7F:2A:6A:E1:67:05:91:F9:0F:2B:F1:31:28:99:49:68:9C:93:60:F1:44:E6:42:23:FD
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
novelyai.com

Other domains in certificate

ihc.48s.io
agrolings.com
ahmedbouhlel.com
ai4ms.ai
airsofthub.es
allan-abere.online
ampoo.app
www.apirelease.dev
arjunacarztech.in
bazaaroapp.com
auth.bet4.bet.br
www.casadepeles.com
download.cinimajig.dk
clubedazo.com.br
yesha.com.ua
cravingsbyzoeoffers.com
bizcard-gocorp-cms.cube.id
cdn.dariazarebska.com
dayx.ai
admin.desoxidate.com
detailstraining.com
app-link-stg.dev-fpass.jp
www.discuna.com
qrcode.dlr-rc.disney.io
educeptconsult.org
eskaylog.com
ev-app.com
fietskluis-app.nl
link-dev.flextechdev.com
m.frenn.com
addjobs.futureflux.ai
www.gcodemixmaster.com
www.globalmask.vn
burgmechanics.gocad.de
grajwan.com
gurugramartco.com
radio.hajduk.live
hawkinsinsider.com
www.hempsteaddentaltx.com
highleveragehumans.com
highskyrec.com.br
www.hirstelectricalservices.co.uk
hugobergqvist.com
app.humantrends.co
www.ismetozozturk.com
jacobgeiger.com
jigri.app
www.johzu.com
jsconsultech.com
forms.k-9apps.com
kantormusic.com
www.kevin.tw
keyatechnologies.com
doc.kyotocoltd.com
dev.lawtrax.com
www.luciestrnadelova.com
luctatu.fr
marcopoloclub.ru
myword.dev
store.nextbots.lk
nezlabs.com
emart.nipunasewa.site
www.northwoodcamps.com
business.ordinow.it
questdiagnostics.org.in
www.pangola.co.za
perfa-solutions.com
www.pifgen.app
auth.price-tracking.app
questlineapp.com
reggaevib.es
www.remynder.co
app.restpoint.io
riskfi.network
links.rivigo.com
hub.s6.io
www.sasageyo.online
sbiltresse.be
app.schwaben-sonne.de
shrishtifm.com
www.sitarobinson.com
sloedp.app
spaceappindia.org
marinerscapshuffle.sqwadhq.com
sstm.cc
anne.strulo.net
syahmiabbas.com
ourshopping.syjang.net
synecode.com
et33.tcontur.pe
www.techlabbrasil.com.br
www.thecomparison.tech
therealglobal.com
prod-v3.tecore-client-cdn.timeedit.io
staging.tranzporter.io
stage.signup.thrive.uk.com
vargacsillabeauty.hu
velori.app
wgwcltd.com