88/100 SECURITY SCORE

Certificate Information

Subject
CN=autumndash.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 15, 2026
Valid Until
November 13, 2026 89 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
AE:24:9F:12:22:5B:62:40:76:B6:50:2B:73:FB:3C:9A:70:B3:EC:5F:EB:7A:2C:C8:BC:4D:BF:94:13:7C:87:82
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Present
camera=(), microphone=(), geolocation=()
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
staging.marboba.com

Other domains in certificate

www.10-20app.com
11db.de
members.76.life
firebase.netspdr.achernar.me
adasales.com
www.agilitycoursemaster.com
alutronics.in
dev.account.ampup.io
www.anlorbel.pt
arjungupta.dev
autumndash.com
aveila.com
app.bcoworker.com
wholesale.bestgrocery.co.uk
bestpack.cz
dlink3.betiaworld.com
produce-note.bknxyrg.com
blyzniuk.dev
bonningtonwater.ca
www.brightviewsolar.com
brushstories.in
www.cajubrasilfoods.com.br
cesartorres.org
conmediasymusasweb.com.ar
cotxesnets.es
cryptoraiders.xyz
hello.devapi.deciml.in
edu.devecap.com
staging-labelling.dinohub.io
www.distribuidoraviag.com
dothingsapp.com
drejtshkruaj.com
raffle.eniigmakeyboards.com
figurimade.com
fishbookpro.com
static.friedsynapse.com
ftcteamtrack.org
fuegoshotchicken.com
www.geckobird.com
gerryweberburlington.com
couple.getblood.com
getfencecalc.com
godrivela.com
graycar.consulting
app.hackin.wiki
hensmon.de
link.hilbertpress.org
www.iassystems.com
imaginasheen.com
incodeo.com
www.infinivox.com
irrelevantindustries.de
admin.ishipto.vn
stage.kritikos-sm.gr
www.lab-innovation.com.br
lamassusys.com
link.lei202.com
staging.loadcall.com
user.machinerry.com
www.meetarash.com
domplus-dashboards.metriq.io
my.notes-hub.com
www.numedapp.com
mind.octanest.com
livestream.oomphwellness.org
padelsweetspotapp.com
perthdev.com
phintech.de
pizzamedia.stream
www.pluralpub.com.br
psmtraslavina.cl
sugasab.pujasweb.co
www.puremediasa.com
rapidrentals.com
aletzaxv.rcinvita.com
removegeminiwatermark.xyz
pi.rezyro.com
rtsautoparts.com
rychlik29.cz
yasuda.saastainer.com
satbal.com
www.sayuri.design
docs.scryr.io
www.shezakundra.com
www.silviaeandrea2025.it
sinapsislatam.org
devaccessibilitytenant.sqwadhq.com
www.stevenhollander.com
www.strataxai.in
tappilyapp.com
tggrads.thaiairways.com
mobile.theorygenerator.com
thepinkcollective.org
www.thesoftwaredispensary.com
thestlsuitguy.com
www.touchsolutions.in
www.voxen.io
yooperdrones.com
zoobattles.com