Open
Cached
·
just now
90/100
SECURITY SCORE
Certificate Information
Subject
CN=internationalstemacademy.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
January 18, 2026
Valid Until
April 18, 2026
85 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A7:F5:4F:58:F1:6E:81:BA:42:13:4B:D4:AE:FD:97:07:88:68:E7:5F:78:B1:FC:48:7A:8F:27:E3:DE:4C:6E:AE
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=31536000; includeSubDomains; preload
Content-Security-Policy
Basic
default-src; script-src; connect-src; +12 more
default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://telegram.org https://*.telegram.org https://github.com https://api.twitter.com https://identitytoolkit.googleapis.com https://*.googleapis.com https://*.firebaseapp.com https://apis.google.com https://www.gstatic.com https://*.walletconnect.com https://*.walletconnect.org https://cdn.jsdelivr.net https://unpkg.com https://cdnjs.cloudflare.com; connect-src 'self' https: wss: data: https://*.googleapis.com https://*.cloudfunctions.net https://api.github.com https://*.firebaseio.com wss://*.firebaseio.com https://identitytoolkit.googleapis.com https://telegram.org https://*.telegram.org https://securetoken.googleapis.com https://*.firebaseapp.com https://*.walletconnect.com https://*.walletconnect.org wss://*.walletconnect.com wss://*.walletconnect.org https://ethereum.publicnode.com https://bsc-dataseed.binance.org https://polygon-rpc.com https://arb1.arbitrum.io https://explorer-api.walletconnect.com https://relay.walletconnect.com https://api.web3modal.org; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://unpkg.com https://cdn.jsdelivr.net; img-src 'self' data: blob: https: https://www.gstatic.com https://*.walletconnect.com https://*.walletconnect.org https://api.web3modal.org; font-src 'self' data: https://fonts.googleapis.com https://fonts.gstatic.com; frame-src 'self' https: https://telegram.org https://*.telegram.org https://oauth.telegram.org https://t.me https://apis.google.com https://*.firebaseapp.com https://*.google.com https://*.walletconnect.com https://*.walletconnect.org https://verify.walletconnect.com https://verify.walletconnect.org https://secure.walletconnect.org https://api.web3modal.org; worker-src 'self' blob:; media-src 'self' blob:; object-src 'none'; base-uri 'self'; form-action 'self'; manifest-src 'self'; frame-ancestors 'self' https://secure.walletconnect.org https://*.walletconnect.org http://localhost:* https://*.pages.dev https://*.vercel.app https://*.ngrok-free.app https://secure-mobile.walletconnect.com https://secure-mobile.walletconnect.org https://api.web3modal.org; upgrade-insecure-requests;
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Present
accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), cross-origin-isolated=(), display-capture=(), document-domain=(), encrypted-media=(), execution-while-not-rendered=(), execution-while-out-of-viewport=(), fullscreen=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), navigation-override=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), web-share=(), xr-spatial-tracking=(), clipboard-read=(), clipboard-write=(), gamepad=(), speaker-selection=(), conversion-measurement=(), focus-without-user-activation=(), hid=(), idle-detection=(), interest-cohort=(), serial=(), sync-script=(), trust-token-redemption=(), window-placement=(), vertical-scroll=()
Recommendations
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
optimoney.app
albums.311.com
4cgt.com
aaradhikapumps.com
airfieldsupply-stores.com
akshit-ki-ho-gayi-aish.com
andrewchu.ca
arorahonda.com
www.artistali.in
banaru.com
basavagroup.in
www.bcare.baby
www.beautifulbrains.app
beeplink.com
angels.bikematch.de
www.bizzysrl.it
client.dev.boutiq.app
account.businessenergyawards.ie
bzeen.app
www.ckinsella.com
app-2.commo.dev
www.constantagames.com
www.dealflow.app
link.digiisocial.com
usce.ios.edu.rs
play.evystage.dev
link.foodaholix.com
fukusin.dev
gapparatus.com
gauntletapp.com
dev.myadblock.sync.getadblock.com
www.getmetastream.com
goodnessbreath.com
gustavoavila.dev
hassanaltombakti.com
portal.hausvalet.ca
humacrentals.com
iconnectcabildo.com.ar
imaginationchildcare.com
indianriverradiology.com
schedule-management-app.ing1989.com
internationalstemacademy.com
ixii.app
justinjoy.dev
kantineapp.nl
kawabatamotors.com
kerandsoos.com
kkrswellnesscenter.com
lalohatianfood.com
votations.lematin.ch
reybanpac.lernit.app
dev.letspointit.app
lettinggo.ca
www.libertyjs.com
magodhomestay.com
www.malibudance.co
markwong.dev
menuzone.ca
privacy-policy.mhsoft2000.net
mmelis.com
demo.myphotopal.shop
nemolatam.com
www.newcnewl.com
beta.petitbus.com
phuritchaya.site
pixelgenesis.ca
pradhyumnaag.com
productbases.jp
quentinmontella.com
www.rawrevolt.com
rop.gg
sayikrali.com
schedulyzer.com
seaclear.co
sebastian-os.com
shipgrande.com
simple-invoices.com
my.sippy.cloud
sleeptimer.app
kenya.solomonschariot.com
beta.soluneo.com
www.soundgen.app
sparkspite.com
dev-admin.speakylink.com
stockgenie.co
lab.surwww.com
tellmebriefly.app
thiagopuche.com
www.toolabs.com
tophatvideo.com
tourdefrance-galway.com
landing.trcellappmath.com
www.vitaminpilot.com
www.vyomr.in
brain.webcat.app
westdaledragoncourt.com
www.winquist.ca
data.yaki.app
www.zappsite.com
app.zentility.com
Other domains in certificate