Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=wgrid.saxena.xyz
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 25, 2025
Valid Until
February 23, 2026
85 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B6:26:F1:23:CA:6D:CE:D9:EC:36:53:8B:DA:36:A4:32:67:41:50:38:A0:5D:A2:D2:E3:85:1E:F1:4E:C8:49:8D
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
stg-firebase.noin.shop
a1globalcs.com
aathisoft.com
www.aklilu.tech
amirmrkonjic.com
astitva.site
www.beerfund.com.au
my.bewitness.world
app.birezervasyon.com
biscuitwalaevs.com
signindev.blueprintcorp.com
www.bomai.io
www.booksmyshrp.com
calbo.io
links-bewell.carebook.com
aakritityagi.co.in
fitkirti.co.in
www.smile-linkhealthcare.com.my
www.configware.com
www.creedthoughts.blog
d-enc.com
www.d3riva.com
daivalogix.com
deftly.tech
deminsy.com
www.dinotify.com
discrivey.se
links.porsche.drivercopilot.com
iskjerm.easysignage.app
eduvrsxr.com
eluwaan.com
englisheditorapp.com
hochzeit.erkenberg.info
www.espacioidealec.com
www.etheware.com
eyd.dev
factoreal.io
web-ci.faks.co
festivoscolombia.co
www.fivethreeone.app
fluffyalpaca.club
kvne.fndrsng.com
avaya-staging-ideacloud.forgedx.com
gameofquotes.app
nutriscout.hrishi.ca
hubord.com
beta-1.app.ibscoach.org
igossip.buzz
fusionma.impactwrap.com
inkaron.com
www.jaymamta.com
partner.leapspace.in
www.legotomia.com
www.loopmobile.io
magicos.co
www.mdeeq.com
metashark.llc
mightyscape.in
mike-albers.com
invite.moneyclip.io
apis.msgerbot.de
help.neftx.com
www.newaddons.com
static.nextplease.app
en.nyhetsmaskinen.se
pa-sase-uat.qa.appsvc.paloaltonetworks.com
rdtorresfm.pampa.com.br
app.pave.com
www.pawelpaszki.com
www.phng.de
www.pineapple.news
www.preschoolkit.in
workshop.readyforkindergartenidaho.org
www.saaanvik.com
qa.sarathienterprise.com
wgrid.saxena.xyz
sdwisetechs.com
admin.se-bayern.de
www.skey.network
skud.solutions
webappdev.soft-g.net
spatecovers.com
www.speakingathome.de
amberleaf-v3.studiossolution.com
newsboard.studis.it
sunnyclosetapp.site
syne.one
taga.works
ais.teeeejaaaay.co.uk
core.thetutorlancer.com
www.thohtdelta.in
a.wotapopup.tipple.xyz
blog.tooljet.io
tradt.co
transakauto-rennes.fr
www.unityimaging.net
www.vsoest.net
www.xencorpit.com
www.yokoy.at
www.zeugnis.codes
Other domains in certificate