77/100 SECURITY SCORE

Certificate Information

Subject
CN=farhanaaktar.co.uk
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 15, 2025
Valid Until
January 13, 2026 48 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D6:15:FD:31:24:03:A7:76:84:DB:75:E0:AA:DC:CA:10:11:5D:11:D0:9B:9A:EF:66:BA:A9:0B:8A:B3:57:D4:64
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
pages.app-staging.c-rayon.com

Other domains in certificate

ai-agent.active121.com
akradservices.com
www.anagoesyee.com
askquickbites.com
www.astonich.com
avintr.com
hcs.backpackfordrive.app
bazardeturismo.com
www.beespilot.io
sulun.bel.tr
bigg-foot-games.com
www.boegballen.nl
page-qa.brokerbay.ca
canvs.app
careduct.com
gincana.cesisonhoinfantil.com
preprod.chroniclebot.com
aljassim.claudion.com
rollcall.clockwork.ws
www.codeatorium.com
codecycle.com.br
commalert.app
sttdongluc.congso.com
app.convergeretail.com
degenmerica.com
digiguide.ch
swfornoodle.dimorder.com
portafolio.dylandata.site
eqliquid.com
ness.ezly.space
farhanaaktar.co.uk
providers-directory.findmymethod.org
firewidget.app
mirho.flockim.com
fluento.ai
beta.flywheel.autos
erickayma.gaedet.com
geovanecavalcante.com
preprod.geovinum.pro
sorh.gescom.nc
www.getdona.xyz
getrealexperience.com
pro.gosweetsgo.com
gsp.id.vn
indcommerce.mx
jamesjquinn.com
coding.jyhs.kr
keepitsix.com
kuakka.com
linusthorsell.com
sh.livearf.com
simulate.logifuture.com
reweigh.ltl-xpo.com
old.masterlistai.com
mazapancerezo.com.mx
app.gastroview.med.br
hoetespri.medieteknik.com
meetsalty.com
meowmatchr.com
www.millennialsprime.com
www.moistchameleon.com
toserbaonline.my.id
auth.myur.app
dashboard.mzcf.org
www.notiz-app.com
onandoffagency.com
www.onewaydroptaxi.net
partypooper.am
patricksharpe.com
pemaquidpress.com
www.pertaminainvestorday.id
cua.philanthrosphere.com demo.philanthrosphere.com
ai.prayogeek.in
auth.printmeup.ai
app.publinote.xyz
hangover.quickpass.app
recantosavana.com.br
revelations.vision
rminternational.in
www.roastme.fun
ai-clicker.rudeboy.dev
rukinix.store
plinko.runaway.games
www.sdholdsworth.co.uk
shafwa.space
share.staging.skroote.dev
bodahernandezfuentes.swanmoments.net
syclops.dev
app.tablechamp-dev.at
www.teachaids.org
play.theawesomegame.com
sviewer.tri3d.in
www.tully.page
virajsavaliya.in
vscreen.co.za
yijidangqian.xiti-digital.online
yusufstudio.tech
www.zwip.be