77/100 SECURITY SCORE

Certificate Information

Subject
CN=kashaf.work
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 02, 2025
Valid Until
March 02, 2026 74 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
FF:52:42:08:3B:28:3C:07:E6:96:2E:13:D6:BA:AB:63:63:CE:81:7A:00:58:29:3F:3A:D2:DF:5D:CB:66:F5:74
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
srb-admin.anytechgh.app srb-reconciliation.anytechgh.app srb-risk-manager.anytechgh.app

Other domains in certificate

www.208busybeehandyman.com
www.aayatwebtech.com
aimoneymountain.com
profitbot.amithgc.com
app.apscourierltd.com
audio4live.de
augam.lv
www.dev.beefast.eu
bemypc.com
admin.bookbloom.app
buyfuture.app
buzzabout.app
castoasis.app
edge.cdsquant.com
web.ceribbo.com
boletim.cesisonhoinfantil.com
matkonit.co.il
contrall.es
datasmartio.com
www.dclgenerator.com
debtcat.com www.debtcat.com
admin.deepsand.com
edier.me nia.edier.me
www.emredursun.nl
www.emsaldava.com
sgi.epokafabricantes.com.ar
ezfit.app
post-editor.app.factorio-francophone.ovh
www.feta.es
ficus.ai
white-api-docs.flexm.com
sso.frontend.la
cookbook.gajdos.sk
getaltima.com
ghananeeli.com
auth.ghostoffice.cc
members.goboxmailboxes.com
support.grupoxalka.com
admin.heny.app
www.horsepass.xyz
hrcomply.com
hyunjae.dev
fb.futuro.in.ua
jigsaw-puzzle.app
www.jocarproducts.com
johndoe.dev
kamila-beauty.com
kashaf.work
kaue.dev
www.krutzfeld.tech
liste.uno
lumomom.com
www.matthewkee.ca
mealcircle.co
meiekithaicurry.com
notes.memz.au
milionproalbrechtice.cz
muslimjournal.app
www.officy.app
omnicycletracker.com
otaku.group
pasoveloz.com
app.pocketcred.com
praxio.app
ooty.primeonewaytaxi.in tirupathur.primeonewaytaxi.in trichy.primeonewaytaxi.in
qreams.com
qualtivo.com
quizit.ai
www.raed.ws
sandrapoll.com
ml.sebastianbutz.de
sense.horse
auth.snowpixel.app
app.startzeit-digital.de
www.sunfruitegy.com
sunglasses.tw
bodaadriydiego.swanmoments.lat bodamauricioyjuliana.swanmoments.lat bodamelendezcarranza.swanmoments.lat celebracionronoldy.swanmoments.lat
lego.takiemam.com
tarunsepuri.com
app.dev.thehenapp.com
unibooksal.com
vinzoom.it
lead.voltageteams.com train.voltageteams.com
staging.weflats.com
wir-fuer-okel.de
woonig.app
board.x-logic.net
yureto.ai
www.yworkflow.com