Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=bdtech.top
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
May 12, 2026
Valid Until
August 10, 2026 82 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
DC:0A:7B:A4:CA:23:38:DC:E4:53:EE:81:7A:B3:A9:60:1C:D6:0F:A3:E2:4D:95:73:18:99:39:1C:EA:18:C5:C1
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
sigel.oncorp.io

Other domains in certificate

24inchkick.com
3dprintbusinessmanager.it
adminbubududu.com
advlili.com
albarshaq.com
smilingtailor.algoramming.com
gamecredits.ampverse.com
appstart.co.uk www.appstart.co.uk
test-dekra.autovist.com.br
bayshore.sg www.bayshore.sg
bdtech.top
pmma.biomo.com.br
v1.boltabacus.com www.v1.boltabacus.com
whatsapp.brainsil.com
charliesavesamerica.com
www.coasttocoastcommission.com
con-migo.com www.con-migo.com
www.decomvo.com
defyne.de
devintent.com
districtapps.com
dropsonewaytaxi.com
www.ehvulnholic.com
www.falsecastpodcast.com
resume.fitcoder.in
gebzehaskoy.com
vet.gerolymatos-int.com
www.getraenkewart.com
staging-consumer.getservednow.com
read.hanflow.app
hardwoodsanders.com
hilearnacademy.com
demo.ideacloud.com
www.indianriverradiology.com
ingeniarcode.com
www.iplugcrm.com
isoryu.com
blog.jamiesteiner.com
jazzmomusic.com
jmeyte.com
johariapp.in
cdn.josephtmaher.com josephtmaher.com
jslide.com
juanmanuelcb.com
palatium.jurjan-paul.nl
www.katrinaslivkoff.com
khonglobal.com
kinshipinitiative.org
kortio.com
kylepetryszak.com
larsadvisors.com
www.lawmeshari.com
lexforte-windykacja.pl
logistica-amdf.com
www.lookaluka.com
lorenzobrown.dev
lukangachildrensfoundation.org www.lukangachildrensfoundation.org
www.maxtonehlert.com
www.michellecazella.com
app5.mkt.city
mmfotosuy.com
aircines.nac.africa
bzm.neivi.es orbital-ops-globe.neivi.es v16ia.neivi.es vigia.neivi.es
nilebrains.com
checkin.northwind.church
auth.ontopic.app
stateweave.pantollventures.com
dess.perumda-merangin.com ibs.perumda-merangin.com
philippealexandre.ca
pikle.online
www.pitstopsystems.com
printxu.com www.printxu.com
proad.live
rasch-transporte.at
admin.savvyaccesscontrol.com savvyaccesscontrol.com
scactionhub.org
stefanini.com.ar
review.sugarfromorigin.com
takasaki-washoku-sato.com
tarogo.online
cupid-ar.tyronemt.dev
velmetry.in
bid.vertik.io
wheretobuychecks.com www.wheretobuychecks.com
yukalive.com
www.zeogroups.in