Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=cartstudio.in
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 07, 2026
Valid Until
November 05, 2026
59 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B4:F2:32:A9:05:E6:8D:95:15:67:CC:94:3C:BC:5C:B5:FE:64:24:49:2A:A4:E4:9D:60:4F:F7:EF:17:8B:98:04
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
quick-story.com
dev.mfe.crm.aathisoft.com
app.amnshield.com
www.anotagastos.com
appzed.com
www.appzed.com
aybemenerji.com
ayvalikfm.com
www.bluesorajp.com
share.bokadirekt.se
www.bridgebrawl.com
portal.cadencetax.ca
calc24.org
calendalav.it
www.caramanreformas.es
cartstudio.in
www.intranet.centrulminerva.ro
link.charcha24.com
helpingapp.clara.fi
srilavanya-manage.classet.in
signal.commandcenterscc.com
darts.mx
www.devabhaktuni.net
www.digitaljourney.it
www.eddyflow.io
ehtishamuldin.online
www.elcanguro.com
enmi.app
excelman.shop
www.figurinhasnopredio.com.br
finfunfest.com
www.finfunfest.com
a0et.foodle.su
georgealzportfolio.com
easytask.gkfcsolution.com
www.greatluo.mom
caveira.gruporiscozero.com.br
gunaychocolate.com
ignitiated.co.za
www.illumin.shop
www.impositorium.com
instituteofbusinessenglish.com
volantino.iperbriko.it
iqambios.com
www.iqambios.com
www.jobs-pedia.com
katuflow.io
khmgs.kh.ua
assets.stockingup.kingofdog.de
kwheatingcooling.com
maths.lawton.ws
www.lovequeue.lat
mahosiprotection.co.za
portal.masaisai.africa
motomarket24.sk
www.multipalestras.com.br
taskflow.nguoiditimhoc.com
www.northernmakers.co.uk
www.okenihian.lol
ordermax.lol
otek.com.br
www.ottawaland.shop
pakketpakket.nl
precisa.parquesnacionales.gov.co
www.partypulse.co
www.passexam.mom
www.pilaresdoser.com.br
app-test.pileczka.pro
powerdv.com
nick.premierwiredie.com
psmsoftware.in.th
pworkspaces.com
www.radiomkr.com
www.rameesenterprises.com
rawproof.shop
www.rawproof.shop
redbuddy.buzz
sasankan.com
sat5.km.ua
scheeser.shop
sezu.us
www.slaccode.com
snizapp.com
www.snizapp.com
www.steuerkanzlei-popat.de
www.striveguard.hair
paste.teaserverse.qzz.io
theblackgoldhotel.co.ke
theofficial.page
www.thirdspacetherapync.com
www.tiendamagnificat.com
www.timber-logistic.ro
wallsmash.tuananhads.io.vn
uthongathi.org.za
veloxi.app
veroeventos.com.ar
audio.weblativestudio.com
wholepicturehealth.ca
yoursafespace.co.in
www.zzinc.com
Other domains in certificate