Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.fastaff.uz
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 11, 2026
Valid Until
November 09, 2026
63 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
1D:87:7F:91:05:92:5B:6F:30:DB:93:E1:66:93:86:34:6A:9E:3B:92:86:CC:AC:C1:76:0B:B8:16:7C:58:6B:07
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
seweb.com.br
sdnmunjung.agendasurat.my.id
timer.akadi.no
www.altcoinportfoliomanagement.com
arquivos.altforce.com.br
anbosg.com
hamedo.anyware.software
elion.apini.cloud
aplusemblems.com
appliedpsychology.cz
basometro-develop.arco.org.br
loverisk.arisendora.com
www.bambiskitchen.com
qa.beereaders.com
clientes.beyond2dmarketing.com
cv.bfennell.me
www.bhumanch.com
game.bluefieldsdev.com
camilleglacon.fr
childa.co.kr
www.churchslides.co.in
chz.asia
www.risingvfx.crimdart.com
davidgladson.in
front.devadg.com
diecoming.com
rewards.digitaldesignsdentallab.com
dorabox.mom
bingo.earclubnft.com
app.ejefit.com
emptystacks.com
encaucetotal.com
lab.evystage.dev
expert5nbr.com.br
exterio.shop
www.facturando.com.ar
www.fastaff.uz
www.fembelling.com.au
fullylight.com
g-stores.me
flutter.gauranshsharma.com
www.getsortit.com
glssettlement.com
www.god.co.id
goldspiresolutions.com
gomugomufruity.com
vc.haiks.tech
happa.ca
app.hikrapp.com
hotelbhuvneshwari.com
pemkekula.hyperglade.com
www.iihh.com.ng
www.irizarel.shop
www.jamiessoftware.com
johnjliu.com
jriegler.com
kantine-prinzregententheater.de
korkmazmermer.com.tr
krishnakripadental.com
app.lacrosselab.xyz
www.lebensmittelrettung-wiesbaden.de
leloo.it
lilisintelligencestudio.com
www.lounatrivi.fi
loyaltyrealty.net
payments.mealhero.me
dev.melihkuru.dev
app.minucs.com
dskru.misschool.net
modulussell.com
www.mondayclub.io
novodigital.com.co
be.ntntnl.com
www.oskarifriman.com
www.otonohasora.com
app.pdr.cloud
hub.platform.it.kr
cn.toeic.polylearn.co
pomodifferent.com
pomoloop.com
ranjitsreenivas.com
voice.rentor.com
www.richards-restaurant.com
schule-im-museum.at
player-staging.screenlime.io
portail.solutiontokam.ca
www.spaceglass.us
account.sponsorshipawards.ie
spprd.com
cinema.starktech.app.br
systechha.shop
tadzik28.pl
www.techmagistrate.com
www.the-fires-within.com
www.thesfactor.ca
lumina-studios.trilo.tw
tuinvitacionpremium.com
wavesoftravelling.com
worldclassgamer.com
zonapgh.com
Other domains in certificate