Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=closby.co.uk
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 06, 2025
Valid Until
March 06, 2026
51 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C9:32:11:78:4C:32:0A:08:75:B3:E6:78:DB:58:ED:56:02:22:CD:08:66:A9:CC:BD:DF:BB:AF:B5:5A:3A:D3:48
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
sei-otomat.com
www.actionwalls.com
meet.admitonedjs.com
vepa.appsiste.co
app.b2bninja.com
api.bookvitals.com
careadvancedpaediatricinstitute.in
www.carshare.ninja
docs.beta.aigateway.cequence.ai
www.chriskranz.com
cisstech.com
closby.co.uk
newsletters.mako.co.il
www.cohentown.com
chat.collegeek.com
bestel.colorcoding.nl
auth.thomi.com.vn
consisma.com
convosy.com
test.cozilab.com
app.cultup.com
danielscastle.com
www.decisionjournalapp.com
www.dulcesita-paris.fr
www.e-slipzambia.org
puwy.edventures.xyz
www.escapedavis.com
etsy-betsy.com
l.mailcraft.eu.org
www.exekucepodlejmenazdarma.cz
expressmlslisting.com
www.fasthubspot.com
app.fitnesskonnect.com
forgeandframe.ie
www.frasesconhumor.com
fs8techrego.com
ftpfantasy.com
fyfoh.com
links-pre.galgo.tv
gamekoda.com
auth.gedachtegrip.nl
fast.getdreammachine.com
dev.auth.groupspot.app
links.haloedapp.com
heroesda.com
hsuathleticscamps.com
stack23.informacast.app
iter-mgmt.com
jaydampitan.com
kaungsithu.com
v1.keeganwoodburn.com
www.licexam.net
api.cs.lixil.co.jp
lookatmyjourney.com
toets.luistr.com
lyftnet.com
www.mafqod.site
mapdino.com
www.marchelehill.com
www.matanbotansky.com
matthewbacon.com
mithunpatel.ca
mosamosakun.com
motion-guardian.com
www.mtreexpress.com
www.my-pregnancy.app
neatwithnat.com
alumnos.neopilates.es
links.netfocusuniversal.com
ntekavc.com.au
pujcovna.ohhappyday.cz
oicapps.com
matchdata.omnislash.com
post.osucare.com
ozahra.com
podcast2050.cz
www.prasangadhakal.com
www.readvisually.org
www.relicensemble.org
uat.resbutler.com
www.samklevin.com
www.shadowbox.tools
www.shinei-sharyou.com
www.skin-queen.ro
smoozi-crm.ru
sozotec.com
demonstracao.spekter.com.br
auth.starjeta.com
stlhack.com
api.swish.nu
tagticketing.com
taxiinhalle.be
theninagalaxy.com
www.hype.thrivex.io
app.trainme.com.br
fb-test.ttakao.com
www.twosor.com
websitebridges.com
www.weltall.com
signup.xtactor.com
Other domains in certificate