Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=www.beenokle.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 04, 2025
Valid Until
February 03, 2026
78 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
3C:99:04:95:77:91:21:44:7D:63:D8:77:55:00:A7:0A:A3:29:8F:A9:7D:08:E9:33:9B:F7:68:CA:FF:14:5E:B2
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
send-money.co.kr
0891bet.com
360.ilike.education
afgpdi.org
alexandr-emilia.com
alightcreative.com
www.awscloudpractitionerexamprep.com
www.beenokle.com
app.calcular-frete-correios.com.br
staging.catholify.com
christiangrimsgaard.net
bangalore.yazhdroptaxi.co.in
argus.comeverde.mx
firebase-playground.connorglynn.com
craftpipeline.com
devasoft.in
demo.drema.in
www.expatclan.com
staging.expcomm.biz
www.fallareyescatolicos.com
app.farmvr.com
www.fischerhs.com
foz360.com
www.geotekstil.com
tempoffice.gofloaters.com
gruposwpp.com.br
dt-money.guiathayde.dev
habavest.com
frontend.hauslifenetwork.com
share.holopix.com
tech.hpcindustrial.app
www.icpsig.in
vutrungkien.id.vn
empresasdbs.integradata.cl
auth.intellieats.app
www.ironmike.store
www.jambotreekenya.com
jcalves.net
link-lei-yue-mun-plaza.jec-digital.com
josephkalayci.com
staging-auth.k-9apps.com
karupparmess.com
pay.roster.kenoviiva.com
keralafinishingschool.com
sizemiru.kitemiru.jp
www.krema.dev
lesaun.dev
limziyang.com
cards.lu.coach
magnemyr.com
www.maneasilverband.co.uk
masonicpublicschool.com
mavenbuilding.com
app.miamimoveis.com.br
painel.mobaioficial.com.br
app.nextexperts.at
app.nivedhitaschool.in
nustar-health-3a.shop
odin-movie-club.com
optimasecurityegypt.com
palettemachine.com
pearlsandcitadelscleaning.ca
www.planetfestival.co.uk
app.playergraders.com
go-dev.playplanetx.com
www.princemakavana.com
principle-clean.com
www.producatoridinromania.ro
www.quansontech.com
www.rbvfx.com
test.redupstorage.com
www.refreshpass.com
rinettekorea.com
app.royexchange.in
console.royexchange.in
www.rydesharerentalsllc.com
clienteslibres.safiraenergia.cl
www.sanj.dev
www.sebastianpreston.com
www.shipraiderscamps.com
bookings.spring-clean.sistability.com.au
www.slowrunners.gr
app.sparta-antilles.fr
www.spider.com.mx
stephenprabhu.com
theorbisonproject.com
cambi.thetislive.com
thetrumpfinance.com
www.threebamapigs.com
tiptasker.com
narvaro.toleredsaik.se
tsrinfradevelopers.com
vid-tur.com
watchduel.com
www.wood-projects.be
open-stg.woodstock.club
www.woon.win
amm-demo.y-okuda.dev
usa.zacharyjbaldwin.com
rc1-mockup.zerothreat.dev
Other domains in certificate