77/100 SECURITY SCORE

Certificate Information

Subject
CN=quicollage.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 27, 2026
Valid Until
November 25, 2026 70 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C1:CA:FA:53:47:3D:1B:2E:C7:42:79:C0:12:19:18:29:06:36:B6:16:CC:BC:20:2E:F4:FE:C1:5A:E1:7B:E7:E0
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
roya-profile-dev.roya.marketing

Other domains in certificate

solar.aa-team.com
world.adesign.work
amorpheus.ai
andreasberentzen.xyz
awdvi.lat
jamie.azzopardi.com.mt
www.belmontsbannermen.org
www.benefycare.com.br
bggames.lat
www.bugmedia.io
byteledger.io
ca-manager.fr
vista.cee-uk.com
link.chapterbyepisode.com
www.colors.com.sa
creativemuseai.nl
daw.dagodev.com
davidrigueira.dev
admin.diablos.com.mx
www.elenaharford.com
elitepartshelf.com
agent.elx0.com
salespaces.entropyspaces.com
eueduca.com
app.eventhallebern.ch
familyadvisor.co.za
www.faststatement.com
www.filovo.online
app.flowtask.tech
servitztesthomepage.fritz.co.il
www.gksaihomes.com
collegeapphelp.goldenpeel.net
tadmin.heptone.io
www.incugamecon.media
login.itliq.com
catring.kaogrill.com food.kaogrill.com
auth.knipping.nl
longines-primaluna-202509.net
lorgartshillhotel.com
deeplinks.mafin.ru
marriagematerial.info
medicalclaimspartners.com
minarul.online
www.mlyk.consulting
www.mousse.fr
multizillionaire.com
travel.mywep.site
needoh.top
app.neovault.com
nextgensoft.tech
calculator.nie.edu.au
push.notif.nc
auth.nxi.sk
www.onewirelessservicesllc.com
own24.app
business.parki.ch www.business.parki.ch
super-tana.patrikatana.fun
test.pcmb.qzz.io
pickeringpower.se
accounts-test.pictoria.world
dashboard.piki.com.br
playmtt.xyz
demo.pocketrag.app
www.ponnivalamfoundation.com
ponnivalamfoundation.org
haze.postmedia.co.nz
www.qubicom.agency
quicollage.com
reach3dcad.com
auth.dev.rentle.shop
app.rotacredoficial.com.br
wegrow.sherp.uz
shriramawelfare.org www.shriramawelfare.org
www.sickteck.online
www.sip.io
smartberry.online
staging.storyque.app
www.swingli.app
tcfinancialmanagement.com
tendercalc.in
dev-testpartition.thelevel.ai
thinkcoral.com
staging-app.thumbz.com.br
time4class.fr
www.touchee.com
buyer.rajmandir.tradix.co.in vendor.rajmandir.tradix.co.in
www.unioniz.com
vantagemgenuinavaltra.com.br
www.viewcovid19.info
www.wedobits.ie
auth.xcoder.org
www.yuanshiren.shop
yuja.kr
jovicbiralo.ziontechug.com
www.zitongman.buzz