Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=joico.chitamhairsalon.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 19, 2025
Valid Until
February 17, 2026
88 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
3D:0D:E9:A8:FF:23:FE:2C:5C:28:69:DD:77:21:BD:47:A4:FF:17:D5:2E:51:F6:17:81:06:A9:A4:57:49:F2:A1
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
planebooker.app
acme-data-company.com
www.ajpdigitaltools.com
serava.allisonkufta.com
allstar-care.com
www.apparence.io
bariskaplan.com
assets.benwilliamson.org
www.store.blackpugstudio.com
blairboyle.com
chat.botslovers.com
brandon5.com
joico.chitamhairsalon.com
christianhymnbook.com
cloud9eventz.com
cnmluxury.com
codeclub.lk
web.controlpet.app
cyphr.co
test.app.deepedia.cl
pdf.diabtrend.com
diversityvisaprogram.com
timebox-test.donhubi.ch
merchant.dotvative.com
duskdigital.co
duttonautomotive.com.au
www.ecolandingmiami.com
www.emandoli.com
investment-challenge-dev1.equix.app
fangradesports.com
youtube.fattm.org
nascon.felporgetve.hu
filepick.net
finuanceapp.com
www.freehomepoker.com
www.gamaenglishacademy.com
getmetastream.com
gigboat.com
godawariinfraventure.com
dashboard.greenatlas.com.au
www.greenlinetrade.com
team.hashproacademy.com
imap.havensofhope.com
healthyfi.com
homeworkclub.com.co
hyesmo.com
www.icarushotsauce.com
widget-testing.input4you.be
ivanahuckova.com
keenancassidy.com
tierlist.lavask.in
libertytips1.com
liebhoff.com
www.makegoodsmall.com
zapp.makzin.com
marsharobertscoaching.com
beta.backoffice.mastertrack.com.br
matthew-taylor.dev
www.metzler-balgach.ch
www.moonlightestate.ca
www.mvgconstructora.com
mycanary.io
pic-sonnen-spiele.mentor.neccton.com
ordernow.newchinakitchendenver.com
saml-investigator.noahgearhart.com
getjob.onest.network
www.opesi.fi
opxiimobiliaria.com.br
www.p-engel.com
parasol.ink
plastiven.com.ve
www.pocketkoala.com
polylithic.ai
link.purrchpets.com
quranbook.app
emoji-decoder.random-thing.xyz
support.rapo.app
www.ravachedecor.com.br
royalathletix.com
shauryakhurana.com
mvcc.sites.smartsys.io
smartwebdesign-llc.com
so-fa-mi.com
soulfreela.dev
sperleinlaw.com
aflinstantwin.sqwadhq.com
afljumptosurviveadmin.sqwadhq.com
aflrace.sqwadhq.com
formation.structube.com
themontessoricentre.com
tin.cards
tmjandsleep.com
app.trytasky.com
www.twinqlecomputersverify.online
backtester.two-i.com
www.usekaya.com
viacheslavbogdanov.ru
vidrioslacosta.com
www.vqconnect.app
www.wintaai.com
Other domains in certificate