77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.snipdle.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 13, 2026
Valid Until
November 11, 2026 84 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
11:5C:BC:FE:47:DB:BE:A2:B7:C5:CD:B6:52:23:9F:0F:E2:09:00:A9:A3:03:18:02:E1:1B:CD:DB:6C:2D:A3:88
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
pages.weareflo.com

Other domains in certificate

link.anguard.ar
apps-dev-lab-ecs.jp
arkoinad.com
www.atwookievents.com
aufzug-simkarte.de
meiki.ayainvst.com
burgertower.barako.tech
compulselegal.chatleadspro.com
crew-sync-pro.com
www.cyqo.tech
app-dev.deeddelivery.com
devilscience.com
app.dinerama.com.br
www.mp.dlorders.com.br
ductrung27.id.vn
duongduke1708.id.vn
jam.dwarfstar.co.nz
www.electronicakabah.qzz.io
www.elevenpower.in
production.uws.evenly.io
www.fidato.services
novamed.filokar.com
fmaxfashion.com
www.garrettj.dev
www.gazelledriver.com
www.gmt4master.com
g.goplay.com.tw
card.gp-finance.co.il
staging.admin.photo.harimau.run
hemmalaget.se
infactis.infacto.cz
www.jacobkelderman.com
www.jantana-ural.ru
jetlagapps.com
www.keveattassut.com
ml2.klev.org
login.knox.digital
alpha.mail.io
clinic.makesensedht.com
www.makkalmedai.co.in
www.maximerochedy.com
mkjodhani.com
moohle.com
moonio.app
quentin.muckensturm.org
www.nteam.buzz
genshin-todo.ojisan.dev
p12y.com
www.pagame.com.co
www.pengwin.com.br
www.pianotiles.site
console.picker.salon
wellcommobile.piticommerce.com
www.plastics-designer.com
www.preppinbee.com
primex-logistics.ee
www.psychosoftwaresolutions.com
raphus.co.uk
www.rentverse.in
peter.retro-ink.com
richmindset.app
clients.rokustudio.com
chess-highlighter.rossalexandra.com
api.rsbpct.com
dmsdev.corp-internal.rxo.com track.rxoconnectperf.rxo.com
stocks.ryan-info.com
www.ryanatevstudios.com
www.samcrochet.dev
www.sangserene-house.com
serafinmed.hu
inventory.signledger.com
simulatedbio.com
www.snipdle.com
app.sokuyaki.com
stefangeorgescu.com
admin.studely.com
sunforge.studio
swimcoachapp.com
www.sylvainferret.fr
tamostudy.com
tashbetz-family.com
techarchgrid.com
telionhealth.com www.telionhealth.com
www.tradefairadvisors.com
ultimateandco.com
unavictimade.com
unfurl-connect.com
www.valueddrywallandfinishing.com
firebasetest.visiopartners.at
vuhuutien.id.vn
support.wataboda.com
www.way2id.in
app.wearable-technologies.com
wenyuar.com
www.xrsns.com
yewonbiz.com
clubapp.yourclubmate.com