Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=erp.aquadox.in
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 14, 2026
Valid Until
November 12, 2026 89 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
17:6B:E6:FD:4C:9C:7B:E8:DF:B2:03:1D:BB:5D:AA:10:8D:E0:3F:B9:35:80:13:69:BC:21:29:18:87:A1:52:9E
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
swimka.ru

Other domains in certificate

www.1erbalcon.fr
cred.3diq.com
www.acomaj.cz
bestellen.akumi-japanese.de
www.amar-lynnconsultants.com
appstitch.dev
www.aptoparati.es
erp.aquadox.in
www.archub.agric.za
www.asadillahunty.com
kyuka.astrosmic.dev
qr.atakanyigit.com
atomicvocab.com
en.autoy.autecla.com.br
www.automagicalforms.com
back-house.com
app.balbinautica.it
www.baptistmedia.co.zw
bellatrufa.com.br
fitbit.biotasense.dev
boltpro.boltzmann.co
market3.bonusgroups.ru
bpack.live
canaryvrshop.com
www.caobao.dev
carsalestracker.com
www.coastalislandcove.com
www.colinj.dev
www.cultvisuals.com
app.dancr.co
dcmportafolio.site
dinoroyal.com
divers-discount.com
doctorshoesphone.com
dojosource.com
firebase.domobile.com
donotgiveuponyourself.com
www.dontforgetme.nl
drjesusarana.co
www.ecotopic.nl
www.waitrosedev.enezatelecom.com
dash.englishcomcami.com
ephemeramilano.it
episkevastiki-golfinopoulos.gr
fbodlee.com
flashcare.in
ph.flutterflow.io
www.franksinmaine.com
www.gilamset.uz
gosubtitle.com
assets.hendersonweb.dev
app.hrcapp.com.br
bethpage.impactwrap.com
acceptance-de-aginvoice.input4you.be
www.iwant.biz
jocelyngallegos.com
ar.joikid.com
joshanand.com
www.plateforme.karmasante.com
latam-tools.com.br
app.loveofthefight.com
majuvo.com
admin.marketmyindia.com
mcgoeyderm.net
url.nhakhoaparkway.com
nomorebindays.co.uk
openzise.com
www.patagoniatorres2025.com
www.pldna.de
blog.plzenskybarcamp.cz
ichinomiya.pubrepo.jp
www.recuropharma.com
rekixo.com
user.ricaun.com
www.roarvc.com
sayuri.design
semantyr.com
www.simpexo.com
hom.portal.alertaclaro.stefaniniinspiring.com.br
www.stillawake.space
docs.sukanyeah.com
www.sumnerdata.com
internal.sunstarintl.com
swiftfixservicesltd.com
tannperlentannlegesenter.no
join.teamlinkt.com
tigerroberts.org
www.toroidsart.com
unicube.design
utkalalumni.in
vaststarry.lat
veronicaorte.com
send-dev.vflat.com
krest.vidocto.com
www.vyapaaros.com
westcreek.info
partners.wishwash.com.eg
wopara.com
app-dev.xitester.com