Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=efd.woofiepie.me
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 08, 2025
Valid Until
March 08, 2026
76 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B5:16:6F:08:96:EF:CC:7A:7D:60:0F:4E:40:AE:B2:04:F0:02:60:D9:1E:0F:96:E6:AC:E8:A2:75:84:7D:8C:37
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
staging.app.brightchecker.com
dynamic.abaenglish.com
alse-demo.acadianaapps.com
my.aceyuu.com
admin.adaptive-apps.pl
affilimate.com
alchimiagelateria.com.br
alperenkarakus.com
alz.moe
app5f.com
ardent-training.com
itg.arpinum.fr
my-dev.askipo.com
atelierdellcastle.com
www.barrett-consulting.co.uk
invest.bit-fog.com
bixell.co
www.brilliantask.com
cagefreedigital.com
aux.camarotetickets.com
gcp-europe-west1.app.carto.com
app.theventi.co.kr
pagestage.coachx.live
www.code2vec.com
www.cointracker.cash
cumar.com.uy
corvallis3d.com
creativecinemastudios.com
cristianbote.com
smartstore.cryucompany.com
cyberfriendsnft.com
dueldisc.tv
www.election-monkey.com
elynix.com
prd-widget.fix4.com
www.fluxnft.io
www.fosh.app
frandeforsfastigheter.se
www.fsdmaps.com
gnutri.gabriela.diet
generalbook.ca
admin-constellation.ghs.fr
pantanova-wifi.halvbra.se
hanspaulskestavitelstvi.cz
werbe.links.healo.app
humeco.com.au
admin.iglesiadecristoenelgin.com
miyagi.infinitifood.com.br
go.insursimply.com
admin.jdadvising.app
mobile.joinbumper.com
kosprov.com
kushangpatel.com
lako-synergy.com
www.legalmetrics.com.br
libertydays.com
admin.logs4dogs.com
lulluland.com
maciek-niemczyk.com
www.martinandbex.com
cute-poketrace.marvinvogl.com
www.qa.masjidtech.org
maxxus.be
mcpe.world
metrichealth.co
plants.michaelrissover.com
monkeypbrspin.com
cms.ro.bardiauto.multichat.ai
www.lesonline.my.id
myinu.club
www.neelmango.com
kq-teamplayer.neonexus.co
neua.com.au
newgalecoastaladaption.co.uk
nikazhvu.com
www.noicattaro5stelle.it
envios.ocho.life
www.onshop.lk
www.originalcoburger.com.br
angular.ossez.com
dev.pinchjob.com
praytogether.com
conges.rigot.dev
action.risetowin.org
shalvishelke.com
events.skylar.ai
temp.storfjaten.se
eta.studiosperi.it
takeoffinterviews.com
link.vethem.se
icri.vidocto.com
vrchem.net
admin.wellyou.co
windwiderstand.de
staging.wishtack.com
wlslasher.com
efd.woofiepie.me
dilog.xdec.me
condomi.zetaone.com.br
orders-stage.zkip.app
Other domains in certificate