77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.atlasmetin.org
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 03, 2026
Valid Until
November 01, 2026 68 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E5:BC:4E:4A:55:9D:6F:5F:48:A6:D5:36:0D:74:40:10:C0:81:FA:93:D6:A7:AD:17:5E:1A:D8:59:32:54:18:03
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
sparklingwaterdb.com

Other domains in certificate

www.8saju.com
merchant.aarambh.cloud
dashboard.aidlyy.in
loppe.fpui.ameroservices.dk
an3squared.com
www.antarajyoti.com
appverse.me
www.ascendcardgame.com
asfoodstcr.com
www.atlasmetin.org
beezysolutions.in
betterme.in
pro.biket.fr
tizentv.blackdove.io
jerezdigital2024.bracelit.es
www.buyatchefco.com
www.m.cbh.care
www.celikmdo.com
link-dev.pro.chillar.co.in
clearroc.mom
clinicacleo.com www.clinicacleo.com
r.crisp.co.jp
www.cyphrontech.com
docs.derekheld.com
app.dicatetin.id
digitalexpeditions.io
douleva.se
duals.com.gt
toys.el-darto.net
www.etsaman.vip
adc.exabel.com
www.flexgo.pl
fredcacontractors.co.ke
vote.gavelpro.co
gdlil.net www.gdlil.net
www.gekessler.mom
www.gispert.us
guinoshockey.com
paris.haikumore.com
www.iabprivacy.lat
icollect.me
jglinstalla.shop
documentos.juanjomarchena.com
utopieschedule.k-freedom.com
trade.kbbconnect.com
kubuni.mx
joble.lapieza.io
www.lowres.africa
www.lumiere-parfum.co.kr
maknoonbh.com
mathemateggs.com
mectron.biz
mectronindia.in
melodnawabi.ca www.melodnawabi.ca
staging.application.menuize.com.br
merchkola.com
welcome.metalogos.site
milibrosorpresa.com
auth.moducm.com
mofeverso.com.br
auth.muuwe.com
nexperlabmedia.com
nkaany.org
business.ochrelshop.com
camille.olict.com
oviqo.co.in
www.psicologa-aracelivelarde.com
www.sckautomotive.com
www.scriptrebel.com
www.sensasionphysiotherapyclinic.com
serfibanc.cl
sinopiaolive.com
snackiyafoodsandbeverages.co.in
spotless.mom www.spotless.mom
www.steadfast.hair
admin.tactq.com
sevengirls.tapforce.com
auth.taschengeld-app.de
teachmeapp.com.au
backtesting.theaadil.com
theultimatemcu.com
tracy-union.com
app.unilife.com.ng
upliftradar.com
utahvalleyasphalt.com
vcdata.io
vectorroottech.com
console.volkaapp.com
admin.wallcorefx.com client.wallcorefx.com
westbergint.com
www.whipsnapfilms.com
www.zkacleanin.shop zkacleanin.shop
www.hulpinhuis.zuidzorg.nl