77/100 SECURITY SCORE

Certificate Information

Subject
CN=app.riipay.my
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 21, 2026
Valid Until
October 19, 2026 86 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
70:41:19:54:39:AC:E5:1E:35:81:68:EC:DC:EA:EF:B4:FB:F1:36:F8:7E:08:0D:EF:CC:73:FD:D0:96:E6:18:BF
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
system.ppnet.co.kr

Other domains in certificate

accelefreight.com
new.agencycheddar.com
airmechanicalgroupinc.com
aloysio.com
mediasave.alpha041.cm
amorimdecoracoes.com.br
amparosec.com
www.antalyafurs.ru
www.attorneyismail.com
bowker-admin.auassist.com
dailyapp.augmity.com
view.awesome-table.com
beautyplusae.com
www.bensolarenergia.com.br
berengerebrisker.fr
bongato.com
bootbag.co
bytecodecafe.com
instructors.c360.org
chanwinston.com
app.cogenii.com
cosmoscat.xyz www.cosmoscat.xyz
www.creativeitc-mythbuster.com
crispspicestudios.com
cyqo.tech
dastanapps.com
deepen.dance
test.digitaloan.com
kiosk.stage.doorjames.com
www.dr-neli-mihneva.com
www.erbasimakina.com
www.etailer.co.uk
fasam.org
femsafez.com
accounts.fhsis.org
autonomos.freeme.es
georgeenglish.dev
alpha.getbillx.com
getbrickwise.com
www.gnandcoca.com
www.habitatconstruction.ca
happensdance.com.au
humanda.net
v3-sweet.impactwrap.com
resource.infinityfact.com
www.sanroqueexpenses.innrsys.com
institut-hypnozy.cz
baresalgsapp.internapp.no
storybert.jakob-fuss.com
app.jakubstellner.cz
jiaphotography.com
jinro.chat
chat.klejdikristo.com
app.development.sam.kronos-staging.net
cz.kuramaturita.eu
www.kuruvillageorge.com
www.listaapp.net
www.manuelparra.dev
marsecode.fi
martysavva.co.uk
www.masterlaundryexport.in
hive.megapixelvr.com
auth.mir4.co.kr
moonsetlabs.com
staging.movafitgym.com
www.neveratech.com
admin-smarthub-dev.nexlab.tech
nexmoby.com.br
www.niftyone.co.uk
nmls.ng
lexsc.opendata.report
staging.assets.orai.us
www.orendafinserv.com
www.oscarzapata.dev
beta.pandapos.app
www.admin.pneusys.cz
alpha.poker501.com
trainings.principleclean.com
quiklogs.com
app.riipay.my
app.rtlink.com.br
portal.schmidttreebanding.ca
saul-goodman-investments.blaze.solerabank.io
www.stanik.in
studiomalaka.com
superpets.fun
teegame.app
www.thebeautibulls.com
thebirdwingsigiriya.com
www.thesimpleengineers.de
www.tontini.dev
www.updateme.co.za
www.vjyothi.com
www.canadaapp.wefix.co.uk
service.wowworks.ru
thewritersroom.writerduet.studio
www.yukakobashi.com
zigma.app