Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=firebase.fabianodermatt.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 25, 2025
Valid Until
January 24, 2026
70 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
17:8D:07:C6:C6:8D:85:A0:9D:D1:92:2B:0B:91:F2:E3:E2:9F:41:0B:AD:02:8D:53:5F:46:1D:1F:5D:05:04:5F
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
sergipecloud.com.br
system.dev.aacapella.com
kw-school.ac.th
dev.academytrial.com
aimnow.app
anirudhgiran.com
arbitral.app
100ksa.arkhol.com
as-properties.org
beatpush.com
staging-questionnaire.bellatech.jp
www.bialajurta.pl
www.burstyourideas.com
catalogoexemplo.com.br
support.cloudbade.com
www.cloudpartymusic.com
www.revamph.co.in
unveil.colma-cw.com
billsandmallng.com.ng
valesburger.corntech.com.mx
stage.corriospc.org
go.cosavant.com
www.dakotavaughan.com
www.defirstcall.com
dh.md
epc.ecospecialist.co.uk
auth.google.eitvcloud.com
app.ekkiden.com
clasificados.elsoldezacatecas.com.mx
firebase.fabianodermatt.com
betops.fantasycafe.us
faragonrenovations.com.au
feedus.app
www.firesearch.io
integration.flype.org
deck-maker.gateruler.jp
link.getstic.ky
businessriver.greenawards.ie
guwopify.com
invoice-processing.holio.io
www.huchedeelectricite.fr
recipes.ilaydev.com
triage.infinite-fusion.com
privacy-policy.infinity-mart-myanmar.com
inimagident.com
integritywelldrilling.com
intergentec.org
ishaansharma.ca
lejardinadelis.jorigine.fr
jvargasi.com
www.kahdeltransformationservices.com
kasper.care
auth.kingkiller.tech
www.krakow.estate
www.lbbw-event.de
nycsoftballclassic.leaguesquare.com
ltwn.link
commercial.midas-financials.com
emails.miranda.works
formagora.mobileo.app
mvcap.org.uk
staging-samples.mylang.in
app.inmobi.neptis.pl
news.new
www.nextbillion.us
contest.nnstuicpc.ru
ofourabois.com
info.bridge.orai.io
app.paay.mx
2022bandagevents.parallel.live
pawelmidur.pl
www.pensioenbijdebrauw.nl
hallelujah.plen.jp
progressierdev.xyz
merge4.dashboard.qvin.com
ramlife.ramaz.org
auth-dev.rfx.me
www.rpct.in
www.rupeshmittal.in
rutlandplastering.co.uk
app.scoorjepr.nl
sharpbet.io
www.slapapps.slaptech.de
id.snapmentor.no
app-ladydrug.stailer.jp
officespace.stelly.club
studioeuropa.eu
buyer.retailmart.subbuapptech.in
www.survivethegame.store
dev.swiftscreen.org
www.tanaka.digital
quynhanhthanhdat.tattyhouse.com
tmtm.ai
www.topbreath.app
www.trecresults.com
os-dev.labs.valorep.com
vexal.world
whowouldwin.xyz
www.xploreall.in
www.zzebtorz.com
Other domains in certificate