77/100 SECURITY SCORE

Certificate Information

Subject
CN=accounts-dev.tiime.app
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 18, 2025
Valid Until
February 16, 2026 87 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
11:2A:CA:32:4C:67:86:2C:7C:9F:68:8E:CC:C7:11:0D:59:F9:16:44:4A:4C:9E:09:7E:09:C4:DC:AB:CE:FE:46
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
shared.fireflux.app

Other domains in certificate

aetherateliersolutions.com
www.aifist.com
ops.airhopping.com
antoniocepeda.com
apphause.co.uk
appventure.asia
app.ar-engage.com
artntrends.com
soa-panoramashop.bestat-data.com
etrust-pro.biglelegal.com
beta.bikecrm.app
console.biory.app
www.blisskart.in
login.blocksite.co
bosdw.com
app.cabotagestudien.com
capipal.com.co
app.carbontrace.com.au
open.cardiosignal.com
cenergia.es
staging.cherryfrost.in
info.choosify.es
cloudwhiz.in
papuanewguinea.aid-air.co.il
pradipdas.com.np web.moru.com.np
www.qa.crewchiefga.com
www.criandocomahelo.com
tiles2.crimeometer.com
www.decision21.org
dks-dz.com
drpmoodleyrheumatology.com
iedc.uem.edu.in
fin.ein-network.com
portal.ellusvendas.com
ensanpublishers.com
www.erpoficinas.com.br
famoushit.com
www.fikzax.com
link.fitterup.com
www.footballoracle.net
gamedigger.app
www.genzvision.com
shootingball-test-qy.gogogame.com
www.goudsmit.nl
pallieter.greifmatthias.be
healthherohotline.com
heyshawn.co
www.hohorizons.com
imoveisjardimsaocaetano.com.br
x3sportswestmidtown.impactwrap.com
www.indianriverradiology.com
js2ruby.inspirnathan.com
itch18.xyz
jakbus.id
jym.lv www.jym.lv
khanhtn.com
www.kripsolpool.com
lavishsoftwaresolutions.com
config.linkbus.app
radarsiscomex.log.br
lucianolagassa.com.ar
onboarding.marco-parco.com
photo.markrad.com
dev.metagladiators.co
mindelhotel.cv
www.myrecycleguide.com
www.nepenthe.io
www.nexsembly.com
www.nolabelsboxing.com
dynamic.on-one.click
www.oppgaver.net
listen.oso-ai.com
partjob.work
www.pdkalip.com
projetecpgdm.com.br
pos-staging.pubq.se
www.quickpass.app
ecommerce.rayoapp.com www.datasocofar.rayoapp.com
www.rockvilleps.com
ruditsa.ru
secretchun.com
shorgov.com
www.simpleschool.org
domofrance.speakylink.com
www.spfweb.com.br
www.stridhaga.com
www.thehidept.com
accounts-dev.tiime.app
typingsikho.in
ufos.lat
belivertzonnepanelen.verbeterthuis.be
www.vincentbourdeau.com
reporting.wewonder.com.au
twdesign.wowface.cc
comprenautica.gestor.stg.xrauto.com.br
chat.yayshop.io