Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=www.whatsonnear.me
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 08, 2025
Valid Until
January 06, 2026
56 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
2E:F0:B9:69:72:D5:0C:7E:FE:C4:A0:BC:3A:C0:A6:47:8A:34:6C:B7:A7:2A:24:8C:1C:8E:ED:2E:C0:4F:9F:E0
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
snappyscrums.com
108.play.online.zupeegame.in
www.4am.jp
anfiny-digitalcapsule.com
www.answers.llc
table.arch2order.com
www.arjanvanee.nl
www.asabeaimtool.org
www.atlanticagestaoconsultoria.com.br
www.azutaku.tech
auth.barterbloc.io
www.bearstation.fr
ozukavak.bel.tr
www.bookofchanges.info
borkoudvarhaz.hu
burhaakenterprises.co.za
www.stg.burnian.com
cardea.technology
uoman-namba-parks.cfs-japan.com
stage.ch.se
link.chilisoft.org
bluebells-admin.classet.in
tsuribiyori-app.clearwaterproject.info
colchimed.ge
nabinadhikari1.com.np
sworuprajpoudel.com.np
gen1.cybertrolls.online
myshop.daily2you.nl
big6.dedyn.io
www.deiprojects.co.za
group.digiisocial.com
www.djandyjuice.com
www.dollink.mx
beta.downwrite.com
www.efiemprec.com
tipsy-tower.html5.emallstudio.com
accounts-test-336717.endlessvn.io
www.fexap.com.br
filocondimenti.com
www.fisioterapiaesaude.com.br
gesell.no
paiement.preprod.ghs.fr
www.ginbi.com
applnk.gobblah.com
www.goodmarketing99.com
upload.greenbench.co
www.greymatterescaperoom.in
uploader.hummingbirdtech.com
ike.work
jasmeengill.in
link.jiapan.tw
jordangamache.io
josesuero.com
www.kieronsmith.co.uk
panonatours.larva.cloud
snake.lovef.se
maasu.de
www.makorelabs.com
www.malam.be
greenalia.marcafranca.com
mdtsindia.com
legrand.medeintegra.app
residentleonardo.melbookings.com
zak-gestor.stg.mimic.com.br
www.mtatoursandtravels.com
dashboard.myfoodbook.in
mfe.myrout.es
solden.nukleus.ba
dashboard.peakprofile.org
www.pinocks.com
admin.playsopo.com
calcal.pootaro.page
rahejacreations.com
raiosoft.com
mx.randomquark.com
www.redgatecider.co.uk
samarteducarenursery.com
dev.scams.tips
schoolps.com
www.see3ee.com
app.sigixtract.com
staging.sitelog.si
www.sitemills.com
app.solarstone.com
www.spidersolitaire-online.com
storyscapeai.app
portal.tetherre.com
cms.thailandfestival.org
theluciferian.trade
mobile.app.trato.io
www.twyfels.com
www.ubytovani-cernahora.cz
timesheet.valentin.consulting
vigrammohan.com
www.vwpnt.com
myhaven.westhavensolar.com
www.whatsonnear.me
beta.wheretofood.com
il.ono.yanalcom.com
zeroono.uk
Other domains in certificate