Open
Cached
·
12m ago
77/100
SECURITY SCORE
Certificate Information
Subject
CN=goldentrumpetproduction.co.ke
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 10, 2025
Valid Until
January 08, 2026
62 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C6:4A:EC:F6:23:CE:C1:C7:9B:8E:69:1E:A9:4F:8F:F9:44:B1:89:EB:2D:35:F0:0A:EE:07:22:60:5F:13:19:D4
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
swiftlab.co.uk
ace-platform.dev
ai.afgriot.com
phytoprotech.agroptimize.com
www.ahtshamshabir.com
app.aicallcenter.ai
aisteth.aihighway.org
aniapps.dev
aqms.de
aquila.ug
arcarigioielli.it
www.artshelp.net
awajishima-bridge-form.jp
www.bahaitt.org
www.bhagavadgitasaar.com
links.bigrig.app
www.thecodingfarm.co.in
goldentrumpetproduction.co.ke
www.beetit.com.cy
afyon1903besiktas.com.tr
dev.cornwallambulanceservice.org
cuadorlaw.com
devourthefetus.com
beta.dhamaka.cricket
content-creation.dlt360.io
www.documentero.com
www.easysignature.email
elevenproducts.com
fernandovr.com.br
furnitise.nl
www.gopalsardeshpande.com
cast.hellodoctor.com.mx
web.hexee.app
www.humanimpactpathway.com
share.iamerica.org
idtapth.at
insomniadata.com
empleadosms.inter.mx
itsonsale.nl
www.jared-brown.me
mitra.docs.juragankucek.com
kaleidofx.com
console-beta.lastmile.ph
www.app.leadfrompurpose.org
str.leafmusic.net
leodiperna.com
www.littleplanet.studio
t.livemote.com
ljpacheco.com
docs.m1studio.co
m1-admin3.m1studio.co
medconnect.io
mhg-group.com
mindpower.vn
www.monotoro.com
mrce.100.pn
www.mueller-everling.de
onboarding.mycure.md
app.oditum.fr
omesaview.omesagroup.com
palicskazsuzsanna.hu
api.dashboard.payos.app
pephands.org
www.pranavpandey.dev
www.preconcrete.com
stage.app.rallyreader.com
rent-a-bin247.com
arb-admin.rosoftsavvy.app
arb-advice.rosoftsavvy.app
arb-afass.rosoftsavvy.app
arb-apps.rosoftsavvy.app
arb-assets-register.rosoftsavvy.app
arb-claim.rosoftsavvy.app
arb-hr.rosoftsavvy.app
arb-portfolio-manager.rosoftsavvy.app
arb-reconciliation.rosoftsavvy.app
partner-deeplinks.samaritan.city
www.sameers.me
mahadalhijrah.sch.id
www.schramkowski.com
www.sesal.kr
www.setlistpro.live
www.sheplatform.io
shortercut.app
compras-lagodapedra.silconp.com.br
situgate.com
aircall-app.speakylink.com
www.sriharibrs.com
www.ssscrackerssivakasi.in
thecollectivepool.com
toshin.thediners.in
www.theovasi.dev
tadi.tritetrad.com
dev.ultrahealth.care
applink.upipago.com
www.utahpedschiro.com
www.visionvanilla.com
www.voxels.town
torres.xptoconsig.com.br
www.yummymeal.com
Other domains in certificate