Cached · just now
86/100 SECURITY SCORE

Certificate Information

Subject
CN=www.lufystudio.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
April 10, 2026
Valid Until
July 09, 2026 59 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
43:C2:A5:B5:14:DB:D1:21:F5:AA:E6:5D:61:34:84:02:FD:ED:D4:1C:C3:48:30:6F:0B:B3:CA:FA:7A:17:B5:8B
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Excellent
max-age=63072000; includeSubDomains; preload
Content-Security-Policy
Basic
object-src; base-uri; script-src; +2 more Analyze
Content-Security-Policy-Report-Only
Weak
require-trusted-types-for; report-uri Analyze
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
pmi.ctrlquest.ro

Other domains in certificate

0stech.com.br
school.2ndlanguage.co.uk
www.aeonentertainment.io
www.aetheryalabs.com
affhan.com
ventas.agrofreshcolombia.com
alice4m.com
argislabs.com
astma193b8.com
astma193b8m.com
atrahasis.ai
app.ayutthaya.go.th
bitpropel.in
bmahub.net
carlyo.co.il
kids.colottaagritech.com
www.confraternitadeiliberi.it
votenet.creasp.org.br
app.crewdocket.com crewdocket.com
crewin.es
beta.crittercache.app
admin.cruzardeportes.com
currenta.tech
epibreath.dbi.ch
crm.dodiperry.com
donmatthews.live
fdistribuidora.edcliente.com.br
decisions.ersin.nz
findmysoda.app
logisticastefanini.grupouse.com.br
www.gtmedia.kr
auth.hanflow.app
bonver.hrajhlavou.cz
hwsmerchants.lol
demo.productivity-accelerator.illuminet.digital
www.istminstrumentacao.com.br
www.podcast.ivpe.nl
estudioapp.jalisco.gob.mx
jndconsulting.mom www.jndconsulting.mom
jsgprestige.buzz www.jsgprestige.buzz
jshfinancial.autos
kuma-emon.com
kun.lamviectot.edu.vn
lasido.co.jp
laughtell-juku.jp
lcdbazaar.pk
ldvwraps.buzz
www.lifemock.com
www.lufystudio.com
www.mansaodojob.com.br
www.mendelgoodtailor.com
mrpatate.be
www.muitobonsventos.com.br
auth.navitag.com
www.ninaz.my
obikido.com
www.ojaslaw.com.np
opensymphony.dev
partnersforsuccess.org
dashdodo.pokedodo.es
presentangelsdetailing.com www.presentangelsdetailing.com
rally-games.com
ravensofturkey.com
www.sarplabs.in
seojuneng.co.kr
shreeskr.lol
www.silkafterlight.com
silvergate-ai.com
simdevstudio.com
v4.siranjeevan.online
somoonad.com
spamphone.app
stockwellbar.com
www.styitsolution.autos
new.t4hd.org
tableflowco.com
tecomprotucasa.com.mx
temporalx.ai
therajneetiktimes.com
tksxtensions.surf
tops-app.com
tractlytics.com
trade-view.app
www.trakerweb.com
www.triviagame.co.uk
trustinfra.ae
www.ulive.co.kr
unafgida.com
upliftnow.net
viohuyit2000.id.vn
nakbah.yazeed.xyz
www.yongfan.cfd
iso.ysolves.nl
zaazmagoholding.com
www.admin.zergpresent.ru