Open Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=test.qfix.ai
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 23, 2025
Valid Until
February 21, 2026 89 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F9:42:31:F7:6C:7C:71:C4:1E:44:53:A7:39:08:3B:7D:D4:9A:AE:38:A6:33:AC:53:83:CA:AC:1D:8C:D5:90:38
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
patrickflorian.com

Other domains in certificate

abdimohamud.com
www.company.aganhealthcare.com
sm.aguasmarquenses.com
business-onboarding.allariamas.dev
app.altforce.com.br
altraders.nl
www.amiloz.com
www.angioplasty.me
www.arielmagbanua.com
mazda-staging.autoroot.ca
cms.baddi.link
balpas.com.ar
blindtest-admin.banan4.com
barfieldjr.com
blykas.com
www.bnjmo.com
bobbybricker.com
app.breyty.com
www.brmill.com.br
cappibola.com
file.cat4school.de
explore.chainwiser.com
cookies-khaw.org
staging.cryptorates.ph
mismatch.daleonai.com
curious-cornhuskers.danielnoon.info
dunacruises.hu
us.f5wc.com
fillmyprompt.com
www.flyingdog.club
share.forstecho.de
www.gaia-next-gaia.com
gehu.dev
gruntly.co
www.gtstats.info
www.guessumwordum.com
flash.hellospaces.de
hkelektro.cz
stage-www.hoaready.com
l.insurepro.com
kibervarnost.si
launchpad.killioncorp.com
kitap.email
www.krzysztofziembla.pl
admin.levietgroup.co.nz
www.loooter.com
ebanking-link.lukb.ch
gestor-dev.meupetshop.online
www.mobaofone.com
sante-service.mobileo.app
mrxplatform.com
naamjapcounter.online
redeem.neoufitness.com try.neoufitness.com
nexavora.com
nickbr.com
nicuwhiteboard.com
www.northernthinkers.in
openstreamflow.com
ottercolor.com
techtrends2020.outdev.io
peasapp.com
download.perceptium.app
pixelynt.com
www.projectslearner.com
www.prumand.com
test.qfix.ai
www.quantifiction.net
quitable.co.uk
raviduttaluru.com
auth.relasiconsulting.com
lp.resperate.com
connect-ng-invoices.rxoconnectint.rxo.com
sam-munro.dev
satyavrat-shastri.net
dev-seller-lite.sbox.shop
scj.io
sisis.com
demo.smartviewmd.com
dominican.solomonschariot.com
spacemonkeys.net
sparklightpayasyougointernet.com
www.sparkwallet.io
stephanietuerk.net
teddystocks.com
thesmilestore.in
www.thetardyfuturist.com
app.thuttu.com
tig.fyi
reloinsight.trcgm.com
tuesdays.dev
clubkine.turnosweb.app
www.twrconsultoria.com.br
www.unlimitedcrypto.co
vibes.bio
www.vksportsacademy.in
web.vts4u.in
welcometomygarden.org
dev.wheremightilive.com