77/100 SECURITY SCORE

Certificate Information

Subject
CN=pcws.agbis.co
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 12, 2025
Valid Until
March 12, 2026 80 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F1:C7:4A:6F:85:55:CB:DC:CE:EC:E5:08:A2:DD:81:88:1B:FC:F7:11:7C:B7:EC:42:BC:2D:F8:FF:AB:32:6A:41
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
skyline-staging.karla.ai

Other domains in certificate

1.csep-formation.ch
canteen-roomplanner.3dcloud.io
hccb.acuizen.com
pcws.agbis.co
landing-dev.agenda.cr
lelasfriedchicken.asap2go.com
www.beaconed.app
beezysolutions.in
auth.befalta.com
www.betmoneymaker.com
buildingblocklabs.com
busica.jp
www.checklistking.com
www.nilkanthhospital.co.in
neuroscience-resources.crg.eu
datamanagementdigital.de
docs.derekheld.com
app.dubdlabs.com
elemento.software
app.fishyapp.com
www.fitmydiet.com
flinkest.io
sukusuku.flower-park.com
admin.fundaxi.com
link.apidev.getbits.app
giedriussimonavicius.com
heseri.io
redirector.hii.bio
in.hireplace.com
hornpeak.it
test-site2.ignission.site
infinityacademy.ca
jasonkigozi.com
anon.jonathanl.dev
www.josessolmaximo.dev
jwmtechnologygroup.com
admin.khukuriinnepal.com www.khukuriinnepal.com
kunnatt.is
api.linescale.dev
madailynews.com
www.mcmachinemanufacturing.com
mdaptus.com
mgranjon.org
www.mohamadbachir.com
pic-tonybetuk.mentor-stage.neccton.com
nftmetamarket.com
oakleyofficial.com
www.parliamoneprima.com
www.paviliontechnology.com
order.crescendo-restauration.paymytable.com
peerlix.com
paradisezone.piticommerce.com
procellmotorsports.com
psilarissamiranda.com.br
puzzletime.app
radiantlymade.com
url.realrecruit.com
bogo.redlands.dev
rm-kadric.com
aidsistant.rubythalib.ai
nc.s3f.sa
sarcomeredynamics.com
serviceamigo.com
staging.sharekey.com
simplyred.es
www.skrflooring.com
www.skyboostecomm.com
checkout.slashsend.io
sozosportspt.com
skyinlab.speakylink.com
spicylemonkitchen.com
suddenpeak.me
loki.superea.sv
www.supplerior.com
sygbroker.com
www.systemkontroll.no
admin.tactq.com
tajmahalde.com
sevengirls.tapforce.com
tarkovloadoutgenerator.com
teabee.org
tecnicaestrategia.com
thakorelectronics.com
thekeystone.earth
www.tndroptaxi.in
noveal-vr.toysfilms-interactive.com
app.trowit.com
admin.tucar.dev
tydiup.com
vanaverse.com
vectorroottech.com
admin.visitkomor.com
vivocontento.com
console.volkaapp.com
www.etops.withorca.com
auth.woox.io
presenca.xptoconsig.com.br
www.yaocaptain.com