Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.yourshoppinglist.net
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 04, 2026
Valid Until
November 02, 2026 52 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
41:E6:C6:ED:7F:0E:07:02:A0:75:50:25:6D:12:44:4D:72:53:9B:9E:7B:C2:16:3C:71:4A:05:6A:7C:ED:26:15
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
talk-aicheck.com

Other domains in certificate

abdulkadirmohammed.com
alittlebit.co.za
wp1.apresh.eu www.wp1.apresh.eu
www.arfis.lt
www.artbasefilm.com
artisans.com.br
hanab.assettwin.nl
asteyatechnologies.co.in
projects.autolight.io
ayvaliklavas.com
dev.app.bemoved.com.au
calculadora-ia.bestrateo.com
bishoplay.com
www.bourbonandbubblestx.com
bussoladopescado.com.br
buzzbank.social
admin.cliqestimatebuilder.com
cricsquad.in www.cricsquad.in
crossswords.link
dev.cuppazee.uk
www.dontre.co.ke
www.druidz.fr
elena-ransom.com
felipenipper.com www.felipenipper.com
cms.homolog.fieldpro.com.br
auth.fivehub.fr
fmhub.bg
portal.friendsfoodexport.com
chefpick.gajaebada.com
growthmanch.in
ha-osef.com
hapifoodstuffs.com
www.hc-ec.com.tw
hqm-office.xyz
www.itclub.ro
www.encuestasalidas.k-9apps.com
kesher-works.com
www.khmoviehub.site
kingindiabakery.com
www.kings-premiumauto.com
leaderwise.co
lesperanceuganda.org
lyricallifetherapy.com
magicmirror.it.com
www.magicpass.co.kr
app.medhasacademy.com
merachesscoach.com
merrycat.uk
www.mikhel.in
www.milibrosorpresa.com
minhcuongmth.id.vn
api.mobilizei.com.br
www.monsuivibat.com
murafi-sa.com
nandarodriguesoficial.com.br
auth.neetcompanion.com
app.noblestarrealty.com dev.noblestarrealty.com
www.obround.com
amso.openesrilanka.org
www.otoatalay.com.tr
overwind.co.za www.overwind.co.za
payforma.de wero.payforma.de
pdf2kit.com www.pdf2kit.com
app.pegasusapp.com.br
pianogarden.com.tr www.pianogarden.com.tr
pixalerta.com.br
pixelo.cloud
prasidhhirahing.in
promizy.com.br
pulsenetsolutions.co.za
www.rastrofleetsolutions.com.br
resafe.io
www.ridifyapp.com
account.rj-translations.com
www.rotundahq.com
royallinensglobal.com
rustikaeventos.com.br
seed42.games
auth.shimcity.app
cdn.sitenav.io
theartisansworld.com
doc.toilab.com
www.unlock.com.qa
valdesrefrigeracion.cl
vanitech.com.br
www.veloview.eu
vgitsolution.com
br.voa.tools
app.xonanosmartfoam.com
www.ymmbulentsezgin.com
www.yourshoppinglist.net