Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=hpacs.co.uk
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 17, 2025
Valid Until
March 17, 2026
69 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
1A:7C:94:23:5E:48:D9:05:03:83:FC:FB:B7:93:90:47:AD:F0:AB:41:72:A1:FC:53:CD:79:0C:03:22:2E:DA:FE
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
stonicvpn.com
admin.actiwoo.com
alleeco.com
portal.allergymapdx.com
realcast.anbi-reception.jp
apelgrim.com
billowpeople.com
at-staging.brut.live
admin.chorusclass.com
citeinsight.com
cmdesarrollo.com.mx
consultants.foht.co.ke
lnk.test.dodocart.co.kr
guide.tufee.codedbypatel.com
www.coffeeandcodingpod.com
cripasitoapasito.com
crispoo-catering.crispnow.com
www.dalpontesrls.com
damatoelectricidad.com
www.danieldevapp.com
shared.deeplatform.rocks
douleva.se
ericlo.dev
fingerbible.com
app.finsharia.com
microsoft-ideacloud.forgedx.com
franzrichter.de
www.friendstechworld.com
generateinvoiceongo.com
zoom-deauth.gmelius.io
greenshiftbiofuels.com
admin.gwapagt.com
securedpayment.hawkridgesys.com
api-staging.helpboardapp.com
store.hifz.com
hpacs.co.uk
app.imobiliariapindense.com.br
instapixy.com
iwin.inwine.com
www.iyuto.com
joseef.com
auth.lahtube.com
ledgrify.com
literalcoder.com
www.loanmesoft.com
ikoverk-lounge-mobile-staging.logicwind.co
nachhilfe.lsv-ooe.at
applinksstg.lulumea.com
app.treemerge.madebyenzo.com
cloud.makrshakr.com
site.meritu.co
meylertech.com
app.misterfanta.it
homol-backoffice.mulherespositivas.com.br
www.myaramark.eu
myflowmeter.co.uk
emr.ophelia.com
orionn.mx
www.painpointmedical.com
www.refund.parkyypass.com
pasttensedraw.com
web.preprod.paymytable.com
app.personate.ai
admin.race.phuket.run
reg.phuket.run
qwengineering.com
r1.miami
www.reacttouch.com
restateprops.com
inventory.dev.safetyinminutes.ca
www.saodev.com
savvygenies.com
schooladvisorbr.com.br
redemptions.seriousmd.com
violet.preview.shortwave-staging.com
smncproperties.com
fbcf1.dev.squadle.com
sugampharma.com
szabonorbert.me
tank.homes
tezsure.com
thedemonwholaughs.com
vasireddy.thefamilytree.ca
thejuansandoval.com
tsgsmarttechnologies.com
www.tuanhuyenwedding.info
dialer.uideal.dev
unaviolaalpolonord.it
auth.google.urbanplay.com.br
mitratelv3.vertikaliti.com
vickeyapps.com
vishesh.dev
www.vr.world
www.weddingtails.com
wisetro.com
www.wmammogram.com
wonderingwillis.com
yala.cloud
yelowbox.com
zeewords.com
Other domains in certificate