77/100 SECURITY SCORE

Certificate Information

Subject
CN=nesso.nesso.app
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 09, 2025
Valid Until
January 07, 2026 47 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
2F:4A:15:09:64:9F:60:96:16:C7:6A:76:58:47:23:9C:B6:4C:F4:82:AE:D1:AF:10:55:DD:03:3C:DC:E2:85:3A
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
sales.doubleedgesoftware.com

Other domains in certificate

11521486.peerly.app
2013.bloggies.com
3dpixelgames.com
www.acf-l.org
sl.ahleen.live
allyants.com
aplus.amartha.com
answerbycolor.com
apexwealthinv.com
arashotchicken.com
audio-art.me
www.avazsa.com
invportdemo.bangkokbankinnohub.com
agoravision.bcguardian.com
year1.bignlilbadass.com
www.bitloops.app
bureauofinnovation.org
sabic-lbv.cao.app
cchsoft.com
policy.cheart.io
www.chieveme.com
test.portal.ci-platform.app
careers.clevateam.io
web.clickconnector.app
commandhive.xyz
app.conclaveai.com
cyberspacesolarium.com
uxsuite.cyledge.com
dadaageru.com
www.daynotwasted.com
trv.developerweekend.com
profile.digme.dk
dilshan.sbs
safari.dowg.house
dymensionhub.org
console.easybus.app
wa.ebizfile.com
endslaveryapp.com
www.enterprisecarbon.com
etherfishing.com
fcs.re
fernfinder.com
focus-space.xyz
forrestsmietanski.com
foxcoliving.be
robots.frc4322.com
friendsofkimbell.org www.friendsofkimbell.org
www.getanamazingfuture.com
plan.heob-ip.de
drsm.hipernet.info
humanfactored.com
ibolus.ca
dev.invenio.indusenz.com
qrcode.ingenium.biz
intelixone.com
iotexhub.org
ebrowser.ipcmobile.com
newdev-partnerweb.isthara.com
joshbotterman.com
kbaaz.com
lobyx.com
logswarm.com
looneylizard.com
lydialantana.com
habits.maximemoreillon.com
go.mercari.io
mikegopsill.com
www.mitoart.ar
orientation.modelchristiancollege.org
bestellen.moespizza-nottuln.de
my32.pro
pos.mylekha.net
launch.mypandaapp.com
nesso.nesso.app
nillionhub.org
www.numarg.xyz
www.onefinetech.com
paper.coffee
daytrading.polipay.io
staging.portlandpatent.com
www.practice-piano.com
crm.profortunagroup.com
reploid.xyz
toolbox.rickybrowne.com
links.testing.ridealto.app
interview-tracker.sapricami.com
cdn.savedby.io
schooly.rocks
shokkandawe.co.uk
umass.strongline.smplabs.com
spgdigitalcorp.com
www.spotpack.com
www.starsmobility.com
mta-sts.sycle.app
thanhdev.com
thedevguys.ro
relieflink.trunci.com
dashboard.zakpay.io