77/100 SECURITY SCORE

Certificate Information

Subject
CN=paviliontechnology.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
January 17, 2026
Valid Until
April 17, 2026 76 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
04:77:8C:50:84:1E:29:B9:59:AC:86:A6:F3:9D:A6:29:EC:90:1A:9E:25:63:AF:CB:BA:53:30:85:96:7B:7D:3C
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
paviliontechnology.com

Other domains in certificate

arthacademy-links.4thpointer.in
lwdgo.acaisoft.net
acctools.co.uk
t.almeraim.com
calendar.altech.ph
app.anchorwallet.ca
ua.anima.help
appclick.me
autonomouspay.ng
carmen-yannik.beimler.ch
invoice.blueballoon.io
bookingroad.com
brasslogic.money
www2.bs-factory.jp
campingberlin.co
carshare.ninja
lights-out.chrismitchell.name
www.clcgiving.online
www.cloakspace.co.in www.selvainfotech.co.in
www.dalltech.com.br
plmgroup.deskbooking.app
www.diegosanmartin.com
app.digiworks.it
www.drumlessonsleeds.co.uk
ecmm.day
staging.mobile.ednalabs.com
enkeltv.no
www.escueladeterapeutaschile.cl
web.eyefile.be
www.ezkoray.com
fdtigermaster.com
app.foxwayapp.com
app-link.fpass.jp
www.georgeshawtoilethire.com
link.getonform.com
www.gniex.com
backend-dev.greenhillcapital.be
pay.hastee.com
www.hnzkstudio.com
www.insideisrael.fm
admin.kukunamkeen.in
letsstudy.io
www.lezoomer.com
www.manpreetdesigns.com
masahirohayashi.com
www.max-estrem.com
mein-aramark-restaurant.de
minddigitala.com
app.mobappcreator.com
www.natejennings.com
www.pipeline.nkportfolio.com
dashboard.noknokgroceries.com
sim.octigo.pl
www.ofree.us
own-recipe.com
kds.preprod-tastio.com
app-prod.prixm.com
dev01-link.propertyloop.co.uk
www.pubman.ch
test.radlfahrn-dahoam.de
triskeltours-dev.randori.be
auth.readwok.com
dev.crm.rebatehaus.com
renemccaine.com
www.rpiwellness.com
sachsoft.com
view-us.seens.io
shijuukara.net
shoptoria.net
shreecharan.tech
shusmo.io
softie.dev
www.ssbuffingworks.com
www.qa.starkeytelehear.com
dev-app.stebam.com
app.structuredpracticejournal.com
studiobustles.com
dev.stundenzettel.digital
app.stunlo.com
www.taisirgroup.com
tcanary.com
www.teacapps.de
www.tinhlaikep.com
tiscade.com
ski-trip-calculator.tune-nest.com
www.tuzi.kr
tyfy.services
union-bauzentrum-hornbach.eu
exchange.demo.uniqgiftvoucher.com
outlook.unir3mote.com
www.uskitchen.net
varisofa.in
app.venleycapital.com
viqmedia-agency.com
virasadigitalpartners.com
www.winzup.org
red.wirke.se
go.xoxo-app.com