77/100 SECURITY SCORE

Certificate Information

Subject
CN=innoventurex.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 24, 2025
Valid Until
December 23, 2025 45 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A8:CE:05:4F:8E:AA:D4:3F:3D:35:84:F0:4E:DC:A8:F9:03:5C:EC:A0:6F:A8:E8:49:8F:F7:5C:FF:6B:73:F1:B6
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
oht1nahv.security1.io

Other domains in certificate

2amartist.in
4hani.in
8it.world
academia-dragonului.ro
ammelt.com
www.anvilproject.org
app.azimutis.fr
bcpps.in
bdsm-mistress-hannah.de
www.bendy10.com
www.start.biltapp.com
blaulichtplaner.app
bluuweb.dev
verify.bobbll.com
www.borogove.app
btsafe.in
www.bureauofinnovation.org
www.cciyc.com
checkout.certifysimple.com
www.cetinkaya.me
legal.chronwell.com
www.climarc.com.br
www.cloudmallstyle.com
codeheroes.cz
landing.consultorianavarro.com
www.defendxtechnologies.com
order.int.dinewitharia.com
dishshot.com
www.dogukanyilmaz.dev
short.dreampay.com.br
app.drivees.com
alpha.e2community.org
www.eatonomy.co
electricworkofnyc.com
cdn.farefirst.com
floridamortgageprocessing.com
foder.fr
mi.geia-app.com
adm.grandcentr.al
greenchip.in
content.greenqms.com
www.hootdoogs.com
devstorelink.hpplusdev.team
www.hyderabadwithheart.org
iamshaz.live www.iamshaz.live
innoventurex.com
app.ivanooo.com
www.jansen.digital
jantolentino.dev
kraemerconsulting.com
www.lukef.me
marcocrank.com
michaelblonsky.com
minimalprojects.store
todo.mymondo.yoga
www.nadirdev.com
nokaandco.co.jp
dev.octalpus.com
okotoki.com
www.olabbio.com
www.oshih.com
online-test.pardock.dev
partypass.pl
auth.phuket.run
staging.pornpen.art
reemfarooqofficial.com
www.reformasesquivel.com
reward-stizen.com
propuestasdeservicios.rocajunyent.com
rosmarinengineering.com
sandefjordproteselaboratorium.no
www.schoolkarts.com
reminder.seb-noirot.com
segmentop.com
axon.sell.design
sherdeepai.com
signup-dev.shuttlecloud.com
autofacturador.sinube.app
app.smashpark.com
www.swappit.com
auth.tabnine.com
www.talenticatree.org
link.technuttiez.com
www.teresacharlin.com
thesimpleinformatics.de
tiruvannamalaitaxiservice.in
tocadojota.com.br
alpha.trycarbide.com
dashboard.tungstenpixel.com
www.tyhopp.com
backoffice.ulearn.study
unitycareorg.com
venuewalks.com
altasciences.virtooally.com
weightliftingdata.com
www.xlsandblasting.com
yidamoxitech.com
yuru-camper.com