Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=app.charactersvault.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 11, 2026
Valid Until
October 09, 2026 53 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
AA:0B:EE:D7:C9:BC:A6:81:06:46:F3:2F:3F:58:7A:55:4D:FA:51:3C:22:36:1D:69:94:F3:B9:25:0D:24:42:19
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
postsub.io www.postsub.io

Other domains in certificate

2bm.space
homes.adamcanhelp.com
adwisewishlist.com
meeting-summarizer.akvelon.com.ua
www.aloha.dev
app.alphamoonbase.de
calidad.appsiste.co
aqua-pure-ro-service.in
checklist.avantitoast.com
basicteleprompter.com
www.brillopro.es
app.charactersvault.com
www.chatslam.com
cv-maker.christianaquino.net
climbranking.com www.climbranking.com
clinicanuve.com.br
site-auth.cooice.com.br
dexteriapp.com
www.drsolon.com.br
menu.edim.app
edunovainstitute.com
www.eliasteeny.com
www.emueaglescamps.com
www.eoshsolutions.com
esketit.us
smartag.farmvr.com
afo.fastsigns2067.com
fhgothia.app
www.gaertner-boehmer.de
gardenlens.app
gateway-roadside.com
med.geia-app.com
gemabo.app
lotrbot.gemovationlabs.com
gestionptgas.es
my.get-sidekick.com
www.globalvertexsolutions.com
guiquadros.com
hdcorp.in
healthpiazza.com
icpupdate.services
praksheet.ioblitz.com
mozaikplay-release.ischoolconnect.com
library.itrood.com
jamaldigital.in
jeeval.dev
jesptech.com.br
www.jiaoreng.lat
josiahapp.com
expense.karthickshiva.dev
kintsugidigital.io
littleairavatpreschool.in
measure2xcutonce.com
www.merabtene.me
metroartbrentwood.com
mibellomazatlan.com
moviexsuggestion.com
www.munitionalert.com
mytrove.app www.mytrove.app
nelsonehelieuza.com.br
netluxenergia.com
nexumsmarthome.com
www.noblevh.com
nogakanu.com
forms-dash.nside.io
offgen.net
ohtlia.com
pawstclass.com
perlhortasafor.org
pixelpulsenova.com
pkbmhuubersinar.sch.id
portgenix.com
prontomailaccount.com
rantg.com
rhiannonbeddoe.com
rodrigoazevedo.com.br www.rodrigoazevedo.com.br
rudder.work
roadmap.samadhiholistic.com
sanwishpr.com
savetimetech.co.uk
click.setu.in
www.shaynessuperbowlpool.com
smartexamportal.me
artelcom.speakylink.com
taxwith.in
www.thebitinvesting.com
www.thedefectguys.com
threebrainapps.com
trailblazingconsulting.com www.trailblazingconsulting.com
trulee.co
venturechron.com
www.vladlab.xyz
wendell-estates.com
www.whatsinpremier.com