77/100 SECURITY SCORE

Certificate Information

Subject
CN=points.tamata.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 20, 2026
Valid Until
October 18, 2026 81 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
3C:BE:EC:FA:E3:63:D6:F4:7A:09:93:18:D5:43:F2:81:91:A8:0D:D2:BE:73:63:F7:47:8F:42:97:E8:AC:83:AD
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
sleepyslime.p-e.kr

Other domains in certificate

adampeterson.tech
aeronsolution.tech
norton.aiotek.com
airtechassist.com
www.alphanoon.com
alphapathai.in
argus.anekonnect.io
www.appointly.ro
www.article24x7icloud.in
avanzaconsultoria.com.co www.avanzaconsultoria.com.co
coaster.barsys.com
bobaqueue.com
brahmaa.co
fleche.buttonpoetry.com
www.ceptegitim.com
cernitex.com
certifiedhardwarehacker.com
cevirfile.com
chapatuinfiel.online
ciatc30anos.com.br
admin.clubrow.fitness
www.codybakken.com
coin178.gleeze.com
cupotarjeta.cl
old-app.cxperium.com
www.dayzkillfeed.com
www.denthijsaantwater.be
www.desklin.com.br
digital-savages-studio.com
www.dioscuriexecutiveservices.com
dr-samimi.com
educathera.app
ellaisistemas.com.br
dashboard.ellipsishealth.net
www.encmalolos.org
expensestrackers.com
www.exspressocafe.com
fahmpath.com
faveback.com
foodbase.shop
www.foundercreated.com
www.frigometal.hu
gonzoconsult.autos
gotailored.co
talent.gravitonweb.com
panel.grb.uy
www.guideglobalschool.com
horizonautostore.com www.horizonautostore.com
ideamediaus.com
petar.impactwrap.dev
water.intelligentcore.io
invernodasortehyundai.com.br
app.learningsuite.io
www.lince247.com
dots.lucasfleischer.com
www.mekhaneops.com
mhs-wasser.de
moty-cargo.com
review-ai.nerdens.com
nissi.church
ohappyclub.fr
potentialisnow.com
worde.potudo.com
analytics.qa6-raksul.me
qrsnip.net
www.questvp.com
www.questvp.net
academy.sel-international.org
api.shinkan.co.in
simurgh-travel.com
org.smolnahouse.online
dev.csv.sokuyaku.jp
sourabhtravels.in
www.spyglassanalytics.com
sudduth.family
susthiraconsultants.com
bodaramirezchavez.swanmoments.lat xvmarcelavalentina.swanmoments.lat
sybcom.com.tn
points.tamata.com
cory-king.thecazagroup.com
link.time-treasures.de
tmnt.page
link.toleva.de
trocadona.com
uslarsenfamily.com
app.viajenow.com
admin.vyaparsetu.app
www.wi-finitymaps.com
wibce.eu
wrglabs.com
yallahagafay.com
in-season.yolo.blue
yuksekarmatur.com
dev-commerce-merchant.zaisustechnologies.in
www.zenevskekolo.cz zenevskekolo.cz