Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=seed-redemption.avalaunch.app
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 08, 2025
Valid Until
January 06, 2026
52 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F0:B7:BE:89:B2:05:D8:4B:53:EF:BB:CB:4C:D4:6A:65:ED:F9:92:5F:66:8F:5B:6E:9C:18:53:ED:F0:37:C5:DF
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
rubiq.app
dwr-roomplanner-cert.3dcloud.io
apple.agfinancehub.com
almobeen.academy
v12.angular.io
merchant.anytimeprint.in
www.arakisenergy.com
sck.arkane.es
www.artworktransport.hu
www.asneed.me
app.atlas.support
seed-redemption.avalaunch.app
www.awebber.info
banditobee.com
bathnroom.com
www.beeperlink.com
www.beyondboundariesuae.com
www.bigbreaches.com
bookandorganize.com
your.boxword.app
www.brightparadigms.com
www.capintellect.com
capp.vip
www.carlsonpe.com
admin.cataratatesoroescondido.com
citizenlab.org
www.citizenx.band
satishmahaseth.com.np
udrc.com.ua
dailyislam.app
dbfzcombos.com
dengonban.jp
www.devfestsul.com.br
dheepanportfolio.in
drivool.in
demo.app.eatpresto.co.uk
www.edubitly.com
aka-dev.ehappen.io
energie-bespaarders.nl
ericxia.me
web.ett.mn
www.fees-calculator.com
www.firstclassdentremovalllc.com
requester.link.beta.gigsmart.com
hardartcore.com
haroon.im
test.harvestpointsoftware.com
pricing.hivepass.app
www.inbill.app
www.jakeardoin.com
mtr-crp.jec-digital.com
thesustainabilityalliance.joulebug.link
kristie.com
www.ksdvisioncentre.com
beta.app.marlim.co
meritcoin.com.br
www.minutiamobile.com
moviequotecalendar.com
mybeheer.com
nilshein.com
www.quotation.oaimstudio.com
www.tsukamoto.odo.br
asinhunter.okiyy.com
lexsc.opendata.report
stpud.opendata.report
www.stpud.opendata.report
www.our-wedding.digital
paicsolar.com
aveo.plusscommunities.com
primeiramedia.com
princetonbrooke.com
progressivedice.com
quarc.app
www.ramirex.com
rankandfiletech.com
www.raydistributor.com
www.reckxl.media
remplumbing.co.uk
rpct.in
api.rubidik.com
russellsny.com
www.sammclellen.com
sms.samyok.us
shadowsinthemirrorfilm.com
advanta-ira.solerabank.com
share.stoppoint.com
demo.tcat.app
app.tin.cards
app.todayart.net
www.tor.community
www.trasteromovil.es
buyc.unerry.jp
www.portal.usenash.com
www.vierbijdrie.nl
www.vpci.com.au
www.watermark.ink
app.xerpa-md.com
www.zallas.com
zoragrad.com
ambe.zumradio.com
Other domains in certificate