Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=asso360.app
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 17, 2026
Valid Until
November 15, 2026
83 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B6:8D:41:D2:65:32:C0:87:05:E3:9B:57:AF:4B:73:62:A7:F7:A4:BC:92:43:62:E0:D0:40:15:E9:01:D2:C6:AB
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
step3cases.org
brilliantstaffing.3diq.com
www.adithyaraj.in
proto-store-mgmt-stg.ai-linka.com
led.aikasa.app
alejandroandre.dev
alexwhitehead.me
asso360.app
bajadasegura.info
www.baristabot.app
mturk05.bcause.app
beyter.money
bezerradistribuidora.com.br
www.bizcaresolution.com
botech.me
buurt.app
www.buurt.app
filmineas-app.clework.com
zheren.clian.net
www.coltonoconnor.com
shopadmin.comline.app
console.stage.connectsx.com
criticalshowdown.com
app.cstd.io
dailyelvis.com
www.daylybuy.com
dexartapps.com
drawly.app
www.dtiservices.net
mypage.e-bukken.app
crypto.earningsahead.com
signin.easy-expense.com
eddormz.com
produccion.elcocrc.com
emmaly.ai
dev-biz.eventors-japan.com
fanaticly.app
sourcing.favstay.com
financejob.app
www.flanigo.com
www.folkfriend.app
forward-loop.io
fujiorganics.co.jp
bundle.gptflow.app
www.gridvote.app
www.guitarlessonsbristol.co.uk
pzpulg.haohows.com
carfactory.imagin.studio
imradi.dev
ingeservicios.com
irrpartnersllc.com
istiqdam.xyz
link-yat-tung.jec-digital.com
www.jorigames.com
kaparis-angelos-psy.gr
khunnapap.net
auth.kurobi.io
web.kursfortegnelse.no
app.lendesca.com
lifehub.tools
mylsi.lsidentalbilling.com
lunathedoo.com
sunlight.makeitlinux.org
mcamindia.co.in
link.stagingapp.mdrt.org
michihirokoseki.com
members.mimamoruno.com
minhdao.de
miodental.pl
erebos.mithras.dev
msgbx.app
mtux.work
nancybubicatherapy.com
pic-betfirst.mentor.neccton.com
front.osle.co.kr
pedidorapido.app
www.phaneeshmurthy.com
planexrenovations.ca
rallyiq.biz
www.safetymate.ae
developer.shareme.chat
sheihu.eu
www.shreeitsolution.com.np
www.siratbuilders.com
sildikonvalley.smartby.dev
www.southeastmutual.com
pioleaguestrike.sqwadhq.com
www.story-wise.app
www.suyundukov.com
links.talkatease.com
tamdeed.io
www.thebellemontnewyork.com
thejumpoffcode.com
app.tradoglobal.co
growupstudio.turnosweb.app
dev.vedly.site
vexos.ai
auth.viralclipai.io
visaworld.online
yasirsoleja.co.uk
Other domains in certificate