Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=mci.paulpayne.ca
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 08, 2025
Valid Until
March 09, 2026 74 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
73:5A:81:52:53:26:E7:3C:E0:B2:A3:36:C3:2F:EC:37:04:5B:01:94:B6:A4:86:DD:73:C3:6C:DC:B8:68:DD:F1
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
reminexa.com

Other domains in certificate

101sec.net
parentbank.actridge.com
staging.partnerportal.aetnagroup.com
agregar.link
allok.online
translate.ameneko.com
www.artifexremodeling.com
ashpratech.com
bestcard.com.ar
booking-slots.com
scan.bookniverse.club
clouditworld.com
www.mayahomestay.co.in
www.mpayer.co.ke
nirajandahal.com.np
cdn.convertics.io
dailybread.africa
dds-tech.net
diginex.link
english.dploy.com.br
drogueriagycpharma.com
go.echoar.xyz
ejercitavoz.com
teachers-test.escolaconquer.com.br
dev-webapp.farmgatetest.com.au
baixe.favorito.digital
www.flagsandpoles.in
forointerinstitucional.congresoqroo.gob.mx
coffee-delivery.guiathayde.dev
embed.guidde.co
helloritz.com
hgmultimarcas.com.br
www.highsalaryhacks.com
apps.hillsong.se
www.ilegallearn.com
basic-demo.impactoss.org
inprose.eu
www.iwwimarket.com
blog.jdunham.cloud
www.kingofduty.com
www.komisjapraca.pl
las140deimpacto.mx
lasercat.app
www.legalemirates.com
alpha.linky.app
alpha.scorch.lunarworks.co.uk
www.manselva.lt
app.metonor.ca
ssodocs.trust.miracl.cloud
www.mk-fairmeister.de
service.monopoly.online
admin.mytrellis.com
elt-csm.cns.net.tw
www.nymiiri.com
www.occonciergedoctor.com
www.onext.gr
openioe.in
osparis.com
pa.pacom.in
www.pagadiario.day
mci.paulpayne.ca
peekdiet.com
pracco.in
printshopatcerealcity.org
www.prochac.com
provalabsocialinnovation.com
eml.qrq.app
qualopreco.com
www.queuedapp.com
my.quranbook.co.za
rcoxendowmentservices.org
www.real-expand.com
arb-risk-manager.rosoftsavvy.app arb-stationery-stock.rosoftsavvy.app arbepayslip.rosoftsavvy.app
savethedates.in
share.sharrai.ae
www.sikandersaleem.com
datanorte.bioponto.sistemasnemesis.com.br
smartprof.fr
www.smartseohosting.co.uk
www.solitairefaceoff.com
www.southernmeconcrete.com
datacube.spaceknow.com
cube-timer.sparkappz.com
upload.stranerd.com
www.tapkit.com
app.alpha.taubot.ai
techpaq.tech
cookies.testbridge.it
www.tourlife.rocks
www.trax.health
uww-th.com
valortaxrelief.com
vorstoss.com
youngstu.me
zchukuk.com
admin.zipeli.com
znam.co