Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=www.lei.com.pk
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 09, 2025
Valid Until
January 07, 2026
58 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
22:EE:4F:84:D7:23:D3:89:3D:18:E9:22:97:D8:03:52:DA:57:5A:38:12:9C:11:1D:6F:AF:05:39:67:45:66:86
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
nursing-digital.com
www.acthive.in
aeglepro.com
aleitatrain.com
clinic.alini.ro
alitecsolucoes.com.br
monitor.ambuexpress.com.mx
newprofilepic.appb.in
www.aquaroseirrigation.com
azpiazu.es
www.barkdigitalmarketing.com
giggle.bizoo.cloud
poultry.bizoo.cloud
borbalo.ge
www.bossauto.it
www.campaignhand.com
casperzandbergen.nl
ciarand.me
app.av-pro.co.il
www.lei.com.pk
wolf.computoespacial.com
crexis.org
www.devruivo.com.br
www.docrobin.net
wfm.link.drivs.io
firebase.dziola.pl
ecorpin.com
eeny.io
qareport.eminingtech.com
fiviz.page
www.fosterphi.in
www.fredericci.com.br
fridg.app
www.fuskiapp.com
holidayslopes.games235.com
www.garbanzo.fun
gc-deco.fr
www.getsalah.in
www.guriguru.com
ecuador.heroesencasa.com
humankind.tokyo
inspeer.app
app.inventoryboxapp.com
irvotes.com.au
meowmory.jalowell.com
giffindor.jermytan.com
cdn.josephtmaher.org
www.kanagrid.com
quiz.kavinschool.com
kegelstreams.com
kiffgo.io
www.kifutown.com
wedding.koidewolfe.com
app.kyokushinprofi.com
www.leondejuda.com.co
gifu.linx.live
location-mahdia.com
tyc-global-dashboard.lsceco.cloud
ipdvhml.magalu.com
www.maxaffinity.co.uk
www.mcdelivery.nl
about.mentorme-online.com
app.menuninjas.com
mistybits.com
supervisor-test.mytwido.com
packingcuyo.com
www.pdfquickfill.com
stage-control.picks.com.br
zk.pixereum.io
playasinteligentes.es
polarpoint.fi
www.primeventuresalliance.com
www.prosandcons.dk
golf-app-staging.radgolf.com
reelpicker.com
www.rentnsale.com
run4lives.org
samcor.in
the.semkins.ru
api.servicesdtk2.cl
hdemo.smartin-hclinicos.com
titan.spacemaster.io
b2bevents.spicexchangeindia.com
stalaverse.fi
video.swandoola.com
www.tabi-o-ji.com
taviea-wakaranai.com
tdc-admin.tech-scheduler.com
techwarstory.com
assets.theatozclasses.com
thepelstengroup.com
www.thetemperatureatmyhouse.com
launchpro.tutorate.com
gbeans.tyrlen.org
www.urbanspace-fashions.com
online.valiakoonambaikulathamma.com
l.vexatech.net
app.visionsciencelabs.com
coach.wehelpteams.com
www.wongle.xyz
Other domains in certificate