Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=jackpatrickhickey.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 30, 2025
Valid Until
February 28, 2026
89 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
7A:5F:E8:E6:D5:83:BD:1B:87:49:85:19:36:96:3D:B9:87:B1:6C:53:56:BE:8E:52:17:09:0C:1B:9B:D4:B6:85
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
takalavouna.gr
skyler.agminen.com
www.alliancetrucking.ca
mint.amalfianalytics.com
applyhero.com
www.aquaopt.com
askglazing.com
bipolar-mood-diary.com
db.bluestarnova.com
bookingapp.com
www.bujia.io
stg.burnian.com
b.bysodexo.be
staging.open.cardiosignal.com
blog.chennaihost.com
www.chlarize.com
citezapp.com
l.cmpy.cam
coachx.live
www.collectspot.com
taslonic-docs.compilorama.com
conseq.net
curai.com
davidishere.com
www.dtxdex.com
parsley.dugward.com
dulcycrust.com
dv4all.nl
ecofons.com
eloveridge.com
www.ercanyesil.com
www.exekuce-podle-jmena-zdarma.cz
fairmus.com
fanjoy.me
url.feli.page
fastigheter.ffnorr.se
findeck.city
googlecloud.forticnapp.com
shopify.freetargeting.com
bo.gamby.fr
www.game-days.io
levelup.gaslogtelemetry.com
www.geoit.dev
gimfinancial.com
next.golfhub.co
trimm-staging.greensummitlm.com
www.gymflux.com
pocket.kageki.hankyu.co.jp
www.hearourvoices.io
h-admin.hexaintegra.com
www.holidaysexpress.co.za
www.inesfrazao.com
instanttea.com
jackpatrickhickey.com
jaramatos.com
kristapadgett.com
shareholders.legit.health
loganrasmussen.com
www.martinsosic.com
booking.medicallogistics.co.uk
support.menutium.com
www.merchant.minilemon.com.au
mollieaugust.com
test-ecma.ninoxnet.com.ar
oceanlog.app
officemart.me
dev.ownerfy.io
peakpedal.store
philipreitz.com
checkers.popoko.live
prakhar.me
prjmax.com
www.puerpera.art
qomprame.com
quadentech.com
rayan.love
stg.ab6ix.re2fe.com
www.redlemon.app
pos.qa4.restoplus.com
sexymixy.com
www.shikshasalah.in
speakeasy.digital
www.spheraus.com
www.steertheline.com
superinfo.com.au
taxmytendies.com
development.techlogic-solutions.com
thanudchim.com
the-effective-enterprise.com
thebusinessmarketingclubmc.com
www.thepoolbuddy.com
thisissachin.xyz
typekey.io
auth.vacayou.com
academy.vanguardglobal.pro
admin.venygana.com
voicedocai.com
www.waltsfoods.com
optimatch.welletokyo.com
www.yogirajpowertech.com
Other domains in certificate