Open Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=enquiry.brandstokitchen.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 25, 2025
Valid Until
January 23, 2026 48 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
9C:67:93:64:96:69:99:FB:CC:99:A6:9B:E3:C4:8F:74:68:2F:DA:BC:66:30:DC:97:DD:E4:A9:0B:7E:47:0E:5A
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
open24seven.co.uk

Other domains in certificate

yca.ablebees.com
whiskeyriver.acuteplus.app
afrotie.app
stagingapp.ally.is
social-auth.apicafe.io
appily.co
data.arrakis.ai
portal.asruw.com.au
www.atxkungfu.com
auth.autotype.ai
bearandrye.com
bitpoke.cloud
enquiry.brandstokitchen.com
pgta.buildtrackgo.com
buraktokses.com
iusupport.bykamille.com
camberwellbarbers.co.uk
www.campanaparaiglesia.com
dev-kitchen-admin-v2.carolinafarmtrust.com
atendimento.cavastore.com.br
www.cip-app.com
www.grupocentro.com.bo
connormcintyre.co.uk
containitaz.com
stage.dentalxr.ai
app.dogfydiet.com
www.dotmodus.com
dth4.com
roomplanner.dwr.com
www.eesekashi.com
www.engeran.com.br
www.entur.no
fairmontstcamps.com
app.fintary.com
flarecollective.co
fmhr-survey.com
frontendowl.com
inbx.garciatech.com
gifionary.com
app.gig8.io
www.glux.de
jakobdreherei.gocad.de
ams-hachimonji.grosbeak.co.jp
hashtagsall.com
faxer.heav.fr
immo-max-aicher.app
learnvim.irian.to
jawns.us
www.jayjootar.com
access-control.joangargallo.com
admin.jrcreativa.com
new-auth.k-9apps.com
coimbatore.kishoredroptaxi.com theni.kishoredroptaxi.com thoothukudi.kishoredroptaxi.com tiruppur.kishoredroptaxi.com tiruvarur.kishoredroptaxi.com
www.laurenmeinhart.com
api.libretto.io
www.lundincast.com
machete.cc
staging.mendell.meds.co
memoriescode.com.br
link.miraiapp.io
modernmaker.io
moneytize.me
www.monsteroftheweek.space
staging.myloko.cz
orcas-valle.com
ovenfo.com
plan-my-meal.com
polyphono.com
www.list.polytechniccolleges.in
raccoonpress.com
app.rallypair.com
readm.app
auth.rebop.io
www.rocketshipmentgame.com
www.rooftoplabs.io
www.sfcodebase.com
www.simpleconv.com
www.simpleproptech.com
registration.smbe.skipr.ninja
app.smart-systems.co.uk
www.srcn.college
www.teevro.com
temple360.in
docs.procon23.thangved.com
www.timedonor.app
links.trysmartbite.com
www.unitconverter.fyi
app.usekaya.com
vuemastery.com
weresilient.com
whatsthefrequency.no
whitecodelabs.com
yasirfayrooz.com
www.zenmovelogistics.com
zuihou.jp