Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=akiinoue.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 23, 2025
Valid Until
January 21, 2026
43 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
26:D0:8B:B6:5B:0B:29:C8:BC:58:78:06:82:14:7D:DA:7D:DC:C4:53:FF:3C:37:48:69:91:B9:D2:3B:3E:AE:1B
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
readr.online
3l.nl
akiinoue.com
akira.run
www.ammo.com.mx
angular2bes.org.uk
link.aqua-mail.com
www.baddigibirds.nl
www.ballcell-nft.com
app.bash.social
www.betaphor.io
api.betasi.pl
bitwiser.io
brownmannhcyberops.in
burn-hall.com
auth.bybport.com
byteepoch.dev
reporting.calibr8digital.com
4leaf.co.in
portal.code-cube.io
ecf.adminplus.com.do
convive.life
www.cortezblack.com
www.crazyoats.es
curiloo.com
cybernetex.io
interactive.danielkawalsky.com
digitalexperience.app
www.tatacheck.disprojects.com.ar
mail.dopeafterdark.com
dreiwallets.com
cdn.einfach-reisekosten.de
www.ekmeloz.com
exec.evertransit.com
staging-superadmin.evfy.sg
exceltutoringwayland.com
fadingborders.eu
fatumtours.com
missions.fff.tools
geniosetraquinas.com
www.glucosemonitoring.me
app.goatfantasy.net
box.good2all.com
govotemc.com
o2up.gruppo4d.com
www.guardrisk-events.co.za
guitarlessonsbristol.co.uk
hadioyna.net
www.iandre.ca
dev.incendi.io
www.joyboygame.com
www.kinghub.cc
links.kurly.it
lenn.ie
www.levelplastering.co.uk
app.marienburg-groep.nl
mestechmarketing.com
millennialcoin.net
momento.fun
app.mortgagereadyllc.com
documentation.motapi.com
www.mysterydate.jp
eventos.mytdt.com.br
okny.io
olaloha.org
ru.onefin.in
webstore.saz.org.zw
psengineering.net.au
www.pulmonary-rehab.online
app.pulsetto.io
www.queerstuff.org
aeiou.rainingknowledge.com
web.reservei.online
rl2.co.uk
link.saucemedia.net
smartstep.scanalyticsinc.com
socomontsrl.com
macutriviabtripodi.sqwadhq.com
stockholmsdodsbo.se
laoszechuanuptown.studiossolution.com
music.superdash.in
suryacarwash.com
app.swell.life
sync-earth.com
www.szabolcskatona.hu
tandcmutual.com
www.temptingtastes.com.au
theideacompany.dev
thinkcarz.com
thoughtsapp.xyz
www.tipi.casa
dev-link.toshimomo.net
tourapt.live
www.ubitlogger.com
lite-staging.untied.io
usarmlogistics.com
scanner.viancorp.net
game.whaleislands.com
xtreamers.io
www.zurab.me
Other domains in certificate