Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=spacia-x.io
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 07, 2025
Valid Until
February 05, 2026
84 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C8:FB:38:01:0D:D6:02:A7:69:AB:1C:27:61:90:AF:B5:CA:A4:9B:6F:08:1D:0A:50:8A:E3:12:F5:B7:B4:51:9C
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
tech.alaxsa.com
www.agapesa.co.za
aletheion.com
www.andenblitze.com
www.artificialapps.co
assemblee-chtx.fr
crm.atulaya.com
app.audiohype.io
dynamic.balancer.life
barangay53.site
brightformsoft.com
buisbee.com
bulugh-almaram.online
buzzwordsearch.xyz
carrotqr.com
chamodshehanka.com
chasethechickens.co.uk
inbiot.co.in
coastalboilers.net
clarity.corejsc.com
cubelatam.org
dabizzbee.com
monocle-staging.deepcellbio.com
timelystaging.dgmslabs.com
digisoftaycont.com
www.digitalollie.com
www.dtoc.io
durospace.com
www.elementalstoreco.com
www.emerge-asesores.com
excal.co.uk
www.fadhaeng.com
federalsolutions.cloud
nascon.partner.felporgetve.hu
fishermeen.com
www.flutterdartembedded.online
fynestudios.com
genesislabs.cl
www.happinessexportimport.com
hongkongspeedie.com
www.hurdle.biz
ilya-eder.com
www.joedarlingpottery.com
kencana-trans.com
www.kencana-trans.com
kingraham.com
kishoresengupta.com
kldatechnologies.com
knowkard.app
kondatetokaimon.com
www.lagashlab.com
lcpscomp.com
loco.systems
adm.luminix.cloud
marhamahtoys.com
www.mdgameofficial.com
www.milliongallonchallenge.com
manage.mithrilmedia.io
connect.morph.fit
auth.mpawer.works
mudstudios.com
mzoah.online
nailsbydalena.com
staging-admin.netccnone.com
easyride.bo.netvolution.it
coimbatore.onewaytaxiwala.com
dindigul.onewaytaxiwala.com
perambalur.onewaytaxiwala.com
vellore.onewaytaxiwala.com
openwind.in
paintlib.in
www.pilab.hu
pokergod.in
prinzessin.pink
upload.project-fortytwo.com
promiseinnoai.com
pyret.life
resdata.ca
www.soas.ribbook.nl
ronald-goffart.eu
schedzilla.pro
seeql.tech
sellone.shop
staging.solva.cc
spacia-x.io
stravity.in
studygroup.app
www.stybbers.se
swissmarine.info
szintech.hu
www.thearmchairepidemiologist.info
theopenplaybook.com
thevillagegoa.com
truvya.in
share.tyntsocial.com
playground-delta.upflowy.com
names.web-10.com
welldrafting.com
yotichi.com
www.zsmobileclassic.com
Other domains in certificate