77/100 SECURITY SCORE

Certificate Information

Subject
CN=tmp3.netzachtechsolution.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 19, 2025
Valid Until
February 17, 2026 78 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
0D:E0:C6:02:CC:33:A0:4A:92:73:2E:26:21:DD:A5:09:51:EF:53:AB:C6:3F:78:CE:B2:41:2F:A8:59:49:C4:58
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
spokesafe.technology

Other domains in certificate

dev.3cols.com
padmaodzerchoeling.ac.in
www.accionenaltura.com
amplifierpress.org
apriliasr175.com
myheartrateworkout.arborapps.io
dco-validator.staging.audi-on.com
www.begrakija.com
bioinsumosbrasil.com
api.blurb.fm
dev.cake-lp.com
www.captarget-coach.fr
chrisliebtsoftware.de
www.churn.market
click2go.online
clirago.com
snake.codnamfede.com.ar
sifacinineli.com.tr
www.commandergabble.info
contactflow.co
raffle.cop-room.com
crmdost.com
www.daxedgetech.com
www.dentitis.com
activation.develop-homehub.site
divorcemortgage.jp
empathyaiapps.com
endstation.ai
www.estatesync.com
everybytenusantara.com
famulus.io
washmax-web.fastme.net
feellanka.org
flashatic.com
flexvinder.com
forgotten-faces.de
fxbitcoin.xyz
gameofwords.xyz
get1.app
esakip.cianjurkab.go.id
heum.tax
heyvala.com
indaigomed.com
indianhustler.in
www.installpower.com.ar
admin.ipex.co
match3.joya.life
jpschildrenhospital.com
apphm.kardbank.com.br
karsearch.com
summer.kingbillycasino.com
www.lampvolt.com
www.luminlinc.app
luxuffeur.com
ppcb-uat.lyhoursbiinsurance.com
www.mcgoeydermatology.net
verify.muscleme.ca
releases.musicalinspiration.ai
www.myaltea.club
tmp3.netzachtechsolution.com
nonstopbangers.com
ohthatsjustbrandon.com
onetimerapp.com
demo.ordreplan.no
scan.orientalfoods.ca
ourleaders.com www.ourleaders.com
link-api-docs.paciolan.io
plaixus.com
poots.fun
www.projectwink.info
www.promptlyne.com
casama.proof-of-quantum.com
www.pudding.coffee
www.pureportugalholidays.com
movies.reb.dev
admin.rhinontech.com
tickets.rocktopus.be
feel.rukshan.net
bangalore.selvitravels.in
www.startinblock.biz
stickerheads.store
app.system2.fitness
www.teamroom.us
reviveride.tekneto.com
transportico.tfonseca.com
gift.thebigday.my
analytics.thisthatapp.com
app.titantelematics.com
travisdockery.com
auth.trayecto.io
gg.tubangge.cn
ugurgulay.com
webapptegy.com
webcrft.com
welcometodollyverse.com
stage.yeetapp.com
www.zmy.pw
zrapata.com