Open
Cached
·
just now
80/100
SECURITY SCORE
Certificate Information
Subject
CN=edutechs.uk
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 31, 2025
Valid Until
March 31, 2026
69 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E4:89:3F:49:D9:E2:4A:15:0E:6E:3C:7A:23:8B:AF:4E:56:43:32:AE:38:F3:37:FE:CA:0F:2A:06:49:75:CC:99
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
Wildcard CAs
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • You have authorized 6 CAs - consider limiting to only the CAs you actively use
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
Subject Alternative Names
100 domains
pcplanetnorte.com
www.3hpartners.com
ask.iiserb.ac.in
admikamp.nl
agnidipto.xyz
www.appinaday.com
badges.world
bdsynaptics.com
www.bettergui.com
www.bhif-tm.ly
bloomville.shop
adm.bluve.com.br
bombuwalaconsultants.com
www.bombuwalaconsultants.com
www.cloudyword.com
link.codeyou.link
www.coinfloe.com
valkiria.com.ua
dde.staging.admin.convercus.io
coronado.crcasas.com
danielkrafzik.com
davidgordon.dev
dictionary-a195e.com
blog.xderyoumu.dpdns.org
edutechs.uk
payments.elancelearning.com
www.eregulus.com
esclien.esstudio.cc
adm.evdc.com.br
keim.flocca.dev
nps.fourthfloorcreative.co
link.geebli.com
billing.goruckit.com
www.gpi-code.org
webapp.immodesttrivia.com
predictai-dpworld.industry-ai.com
www.investorcashmanagement.com
www.ioioi.uk
joebieber.dev
juristapaligs.lv
identity.justmote.me
kalloelektric.hu
kyledev.cc
pantalla.laacademia.eus
www.lafrun.com
linfieldfarm.co.uk
www.luiscoding.com
app1.luqrtests.com
www.manufacturingpro.com
share.mero.school
mfvotes.org
mineraiflux.com
mizomusicfestival.com
extranet.monclub-basket.com
www.moperating.com
mylifedictionary.com
style.niftic.agency
marketing.nuzzlet.com
link.oitr.jp
www.okydook.com
battle.othellonia.com
paravida.com
community.playskytear.com
insight.presageapp.com
yeninesil.proaktif.org
www.prorenovationsedmonton.com
www.proximatech.co
www.qrcodey.com
qtometa.com
item.rakuten-sonpo.co.jp
clue.random11.com
rawlk.com
momo.real-shopper.com
www.friem.rgateway.it
sahaypay.com
www.sarathonline.com
satan.website
zana-research.sathiyaraman-m.com
www.seaspiremaritime.com
www.securitybestpractices.com
sharedtask.com
simsekteknikbeyazesya.com
s.sn-wn.com
www.spaily.com
sybau.art
tabernacleagchurch.com
bkiaccounting.tallyfor.com
task-erp.com
thecatholicnetworks.com
topkiffer.com
topnurseagency.com
upload3d.xyz
vegcrust.com
resgatar.venuspodcast.com.br
pay.vibra.one
wacre.com
walkman.pro
warranty-keeper.com
rescuedesk.wasserwacht-utting.de
waynetjy.com
Other domains in certificate