Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=www.carenx.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 16, 2025
Valid Until
December 15, 2025
32 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
6C:89:2D:CB:33:DC:7E:BC:32:19:DA:23:12:58:CB:37:42:B4:92:90:3E:CF:08:8F:8D:BF:87:49:18:22:FC:E9
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
railsmine.net
www.agentsgpt.org
www.amrishvasdev.com
anasqureshi.tech
satisfactory-stg.appelent.site
duekeeper.azharali.dev
beech-hill.xyz
dev.bhave.life
bigjamgames.com
app.callwaiter.com
www.carenx.com
xingfutang.clau.io
armenia.aid-air.co.il
www.kandurataclothing.com.lk
www.conceptssalon.in
vision26.contributenow.in
coteriefinance.org
beanys-orders.crispnow.com
www.cryptovers.site
www.derecktorventura.com
www.diviniti.io
drukmoholidays.com
m.elfarodelemprendedor.com
www.enasawad.com
staging-innovation.everest.io
www.gbr.works
wa.gitbank.com.br
share.gjenuine.com
attendance.goalmentorship.org
intra.grosenia.link
dev.project-management.grupoxalka.com
www.healthcentrix.com
idraulicoaviterbo.it
www.infocentre.app
app.inquaero.com
me.invr.network
liveemea.onsite.invue-live.com
itsyourturn.news
www.jooselohi.com
www.kyletime.com
lafierareparaciones.com.mx
resources.leolh.com
lojix.com
clientapp.lokapala.games
my.lomni.ai
555noodles.mapleworkspace.com
mdivani.agency
midlandsmotorhouse.com
customer-app.naqlx.com
narpaviorganicstores.com
nocodebase.net
www.nohelix.com
api.dev.norby.live
notaria1.mx
www.novapulse.care
offlineorder.com
okclients.com
www.oposplus.com
originalgallerymedia.com
www.originfilms.pro
ozkalkan.com
playground.p5aholic.me
www.patwardhanmed.consulting
prompto.today
learn.pttrn.io
app.qudo-app.com
realtyalexandra.com
andicom.rebus.com.co
app-news-hub-legacy.robotical.io
rodrigopinheiroadvocacia.com.br
nameplates.roellmedia.de
ruhland-kallenborn.eu
connect-ng-carrier-dashboard.rxoconnectint.rxo.com
applicant.safetyinminutes.ca
referencecheck.staging.safetyinminutes.ca
sahkoasennusjvahakangas.fi
thinking-tools.schabanak.com
play.scoryo.io
shafoon.com
www.shirdi-darshan-package.com
snoringmind.com
sourceweavers.dev
preview.springpod.co.uk
steamcleaned.be
www.stellaraya.com
www.subbonline.com
shopkeeper.tahtaltalab.com
tallinn.dev
tarcisioaraujotransportes.com.br
www.engineering.teklysolutions.com
login.temabanua.com
auth.teracomix.com
skidome.tractivity.cloud
calculator.truckdesk.com
try20.jp
staging.tx-despot.com
www.vibescan.net
vividitcorporation.com
www.youssryessmatt.com
zuerigahtus.ch
Other domains in certificate