Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.travelaffiliatepartners.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 26, 2025
Valid Until
March 26, 2026 75 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
68:04:7E:15:64:20:70:A4:AB:E0:A8:2B:52:F4:27:69:8F:DE:11:00:7E:2D:09:C2:19:D1:BF:45:BD:30:A6:32
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
owlandscroll.com

Other domains in certificate

ablejapan.co.jp
dsp.admaxhub.com join.admaxhub.com www.admaxhub.com
rasp-dev.adssets.com
status.agechecker.net
ameergroup.dk
www.aseminar.ru
astorgafuentespieruccini.com
beacondrive.in
www.bgcmanila.com
email.bgjooon.app
route.bolsiyo.app
weather.boosters.company
www.bpcar.bz
budgey.app
id.carrot.net
carteconfituur.be
gcp-us-east1-19.dev.app.carto.com
examen.challengehub.lat
www.codewich.com
strumenti.cosmo.studio
deepcapital.ai
moofy.dgiapps.com
www.dietafodmap.com.br
langen.digitaf.de
duby.dev
www.etceterology.blog
eventvio.com
mta-sts.eyspa.cl
fmahub.com
gehrmann.org
demo-tesa.get-ikigai.com
ginnyhelsen.co.uk
esg.globalpccs.com
booking.healthcorner.be
homerehabconsulting.com
hornusser-urtenen.ch
hotelbooki.com
hristiyana-ivanova.com
hypnodron.com
residentlog.ianovir.com
jacktraina.com
diet.jetpackpony.ru
chats.kaadi.app
www.kaffeekraft.ch
kaledu.in
keepbox.app
www.kgavriilidis.gr
www.knutur.at
www.krassgeil.de
lime-tracker.com
www.lindenhatzolah.com
www.livekoora.vip
bridge.locker-token.com
lynk.design
mdkaiumhasan.site www.mdkaiumhasan.site
www.mindfulhealingappltd.co.uk
missioncall.app
musicrewards.com
muximaglobal.com
staging.mwide.net
www.ulem.my.id
nahush.in
nicolesullivan.xyz
nm-shop.ru
onsen-mania.com
orbismindstech.com
webstoreadmin.saz.org.zw
parkjiwoong.com
patient-statements.com
www.pkycurrency.com
pmcusa.org
pomerlist.com.br
processtv.art
pteno.com
amplify.redsols.com
nexusplay.rosatocorp.com
www.sbdevelopment.cloud
iotsphere.silicon-power.com
simonacozzolino.com
alpha-v6.spont.cash
swankeypankey.com
swistible.com
dev.about.sysmori.com
www.taxisanfelicecirceo.it
tempbuttonhq.com
timer.timesheet.io
www.tinkertech.dev
s.tnn.in
www.travelaffiliatepartners.com
trimonke.com
typebeer.com
www.usui.work
admin.wi-flix.com
xi-or.com
zarhatech.com
zenstudio.it