Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=awash1.meander.media
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
March 31, 2026
Valid Until
June 29, 2026 56 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
07:AD:B2:E0:BB:95:68:90:E5:0D:FF:8E:A2:F5:73:E7:BF:C3:44:0A:43:27:F4:A6:53:9A:DB:96:53:30:2D:26
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
tark.dev

Other domains in certificate

www.acervera.com
activatefi.com
aiava.io
www.aiqadoc.com
market.akamojo.com
app.alala21.com
alfredasare.me
www.alterwabbit.com
archpoint.ge
burgeroverflow.asitprakash.com
links.coach.athlyts.com
www.barrywebdev.com
m.bgame168.bet
brotagrologic.com
dev.chied.info
link.cluster.mu
cmccentre.com
conomy.com.co
cphexam.com
cpopracticetest.com
creativetechcoop.com
cyberadviser.com.au
dailydevs.in
www.dately.net
distbute.com
hotspot.ecosync.energy
edi-sk.eu
virtual-city.html5.emallstudio.com
eromanga-channel.com
fairylandresort.in
florian-steenbock.de
gdjj.foodle.su
forgelogic.llc
funlab.jp
www.gamecraftersguild.com
www.gdlestore.com
www.goodmeals.health
devlink.goout.fun
www.greaterescapes.com
app.huminate.com
www.ibuscajades.com
igglu.com.br
playground.ihatelettuce.com
link.immojeune.com
inhausi.com.br
inishare.com
beta.handball-heitersheim.ivlivs.dev
chatto.jaimeteb.com
rsvp.jthinton.com
www.kajimotomusicparis.com
keloarts.com
kymsote-staging.kesselrun.dev
ledesignteam.com
auth.legalai.lt
shareholders.legit.health
lingosky.tech
liquo.capital
www.lorisgardenph.com
lunlundi.com
martinwoo.ca
matteobrogin.com
awash1.meander.media
applink.midaia.de
plugins.minecraft-event.net
www.mondobe.com
www.mrktechnical.com
portfolio.musabhassan.com
dashboard.mysmartcast.com
myth-technology.com
foto.ottomanelliandrea.it
www.pagefelt.com
www.pagoschoix.com.mx
ext.pmdn.co
cdn.queensherainfotech.com
remysab.com
www.sabasa.no
sbtoit.com www.sbtoit.com
housecrush.schultek.de
www.sekolahmutiarasunnah.com
merchant.senangbayar.com
clip.sidelinehd.com
www.solartecc.com.br
tr.speakingathome.com
qai.tanara.tv
instant.techsee.me
map.tenemehodihi.com
timokern.com
www.tripoffers.co
app.venturelex.ai
app.viralfission.com
finance.wads.dev
wanchiang-mbservice.com
nightcalc.wingmanlog.com
login.workoutbuddy.online
www.yellowwhale.us
clock.yungol.com
zero-budget.net
emojle.zinck.xyz