Cached · just now
87/100 SECURITY SCORE

Certificate Information

Subject
CN=futa.touchnut.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 31, 2026
Valid Until
November 29, 2026 78 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
33:ED:5D:43:E4:CA:74:B8:B7:C5:EB:CA:89:9B:5B:1F:67:6D:B6:C8:0F:FD:F0:FB:67:E6:ED:89:92:48:D6:B1
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Excellent
max-age=63072000; includeSubDomains; preload
Content-Security-Policy
Weak
frame-ancestors Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
  • Significantly strengthen CSP directives
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
qr.dev.a-m.io qr.qa.a-m.io

Other domains in certificate

canteen-test.3dcloud.io
abastim.es
afripesca.com
get.aisdom.com
althia.com.mx
amazonremovalorderfeecalculator.com
avworojoe.com
biancashouse.com
bizfits.co
bkeconst.com
www.brandhound.dev
brisbanedentalimplant.com.au
portal.camelcitymedia.com
cleaningjobs.app
codebridgeai.app
codexqr.app
kraken.comazon.dev
adobekickback.comline.app
display.demov3.contentfabric.io
bleeding-edge.clue.manage.cuona.io
data-medix.com
bordesur.deinn.cl
dharmapuri.dropmeoneway.com
www.ehbo-woerden.nl
emovia.app
license.falcontheme.com
fitstudiocrm.com
foodpicker.net
fynegames.com
simplybook-doc.goodcash.co
lab.guivus.com
auth.hamza-systems.tech
auth.hylte.no
www.dev.klab.inclub.world
sgm-app.insideapp.dev
apps.inspirasi.tech
firebase.instacred.dev
jago.live
www.jalqor.in
jasonrig.by
share.jumptorecipe.app
www.kalnexglobal.com
www.kasirpro.site
khalidrind.io
service.lanissan.ca
www.latamcapitaladvisors.com
liorkoren.com
mdevans.me
call.meducar.com
melindatherapy.com
solva.staging.mikademy.vn
www.gov.mockexam.online
www.nathalia.app
www.natursynsspillet.dk
nikolas-malta.com
www.noorix.io
nullmau.com
omniplus.io
pairti.com.au
paity.jp
admin.parkrunthailand.com
pelicn.com
www.pichax.dev
www.plopgrizzly.com
auth.prioneer.io
pritamkumar.in
prodeo-dev.prodeo-live.com
progettorinascita.com
www.quanfeng.surf
app.readyrita.com
staging.admin.seekpeace.io
karur.selvitravels.in ramanathapuram.selvitravels.in
siansarenovationllc.com
signallinked.com
skids.app
smartpoll.org
spatiolyx.ai
st-valentinus-gpi.my.id
stardust.co
mugs.teammochi.com
thaniconecta.app
thegiftplus.in
www.timezonecarousel.com
webmaster.tivazo.com
futa.touchnut.com
trainmysocialskills.com
trartist.net
tricari.com
tricktionaryplus.app
www.tripski.app
pwa-danapoint.trueomni.com
trial.tryfootprynt.com
usefenero.com
engage.qljoxncgyhmyxutjoyiq.voyagernetz.us
www.weagileyou.com
tools.zalwora.com
staging.admin.zenning.ai