80/100 SECURITY SCORE

Certificate Information

Subject
CN=www.bakerspconlineservices.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 15, 2025
Valid Until
March 15, 2026 78 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
CE:41:4A:C5:FE:09:D4:76:DC:2C:6C:AC:07:D4:EC:63:AA:A7:30:53:FD:89:A6:DA:31:D6:D9:56:40:F8:92:A0
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Basic
script-src; object-src; base-uri; +3 more
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Present
ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
staging.link.arcadia.com

Other domains in certificate

www.surveys.aceup.com
rain.agrico.co.za
amaya.agency
duda.staging.ampify.io
ansaruddeen-northamerica.com
vc.bdh.arianee.org
coimbatore.arnidroptaxi.in erode.arnidroptaxi.in kanchipuram.arnidroptaxi.in krishnagiri.arnidroptaxi.in namakkal.arnidroptaxi.in ooty.arnidroptaxi.in pudukkottai.arnidroptaxi.in thiruvallur.arnidroptaxi.in tirupathur.arnidroptaxi.in
www.bagry-morava.cz
www.bakerspconlineservices.com
www.battersby.io
bestshooping.store
bitte.cc
blrber.com
links-paladin.bobinska.de
dl.boonandbliss.com
brimmy.app
www.ceribbo.com
chattycat.fr
admin.clementineapp.com
www.cloverplay.app
sandbox.honda.krafthaus.co.id
www.coandino.com
digitalcontriver.com
www.dumphq.com
developers-dev.dwellful.com
app-rec.easy-farm.xyz
asistencias.escuelard.edu.do
eisenbecks.com
personalbillett.staging.entur.no
eulim.ch
f1mexico.app
flip-chat.com
delete.fortmea.tech
www.gooutside.us
www.greatcallcoach.app
www.hatimdagit.com
homegen.ai
da.hpn.me
www.imagineart.ai
knowledgetopking.indiandevelopers.org
artem-flora.invito.link
www.jaimefamily.com
staging.judis.app
justrun.me
kenye.xyz
limit-event.ch
liveloop.io
lucifine.blog
config.magicfolders.app
auth.mempro.me
apoderados.mijardinjunji.cl
myskillsg.com
baihe.net.tw
nino.app
www.noeldrieghe.be
nowohucianka.pl
nuerobots.com
palacio.cz
pareos.com.br
staging.parkpal.co
www.peloozoid.co.uk
www.photalitarian.com
pleal.com.br
form.pongo.is
quarklabs.io
staging.firebase.quodari.com
quorvm.xyz
robocek.org
www.sailing-keshi.de
gifting.saladdays.co
www.shipagile.site
sign-d.net
www.sppott.com
www.staronboard.com
thepathfinderproject.co.uk
www.tinashechifamba.me
www.toyata.net
tralo.ai
lightbox.tribou.app
conecta-chihuahua.tribuco.mx
pt-story.triply.ai
turnitinplagiarismchecker.com
app.ummu.ai
vdopage.com
mty.tickets.vlivemedia.com
www.wedready.com
wizarch.app
www.yazool.net
recursos.yourder.com.br
desktop.yousuite.app
www.youtopi.us