77/100 SECURITY SCORE

Certificate Information

Subject
CN=frontend.doe-maar-mee.spo.show
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 01, 2025
Valid Until
January 31, 2026 36 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
CC:A1:02:90:CB:B6:71:07:FD:DD:A5:32:A6:0A:E9:44:19:0B:10:00:01:73:B4:B4:BA:73:58:AE:A3:C7:85:7C
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
terms.hbarspace.com

Other domains in certificate

aprire-centro-estetico.2gbeautycenter.it
admin.amomic.in
anatanoa.net
astralrealm.gay
cotton-tape.banjobolt.co.uk
uscmunstervolley.bfsp.app
bhojanapp.in
app.bissap.deals
www.bitwise.si
www.blackbytes.de
www.bookmyplateonline.in
bosselaar.net
www.chotaynguyen.vn
service.chsyes.info
license.ottimosystems.co.th
colonoscope.me
staging.column.us
ahmet.kabakoglu.com.tr
demo.cryptobots.me
deepwork.ai
hotram-integration.devx.vn
dressing-sisters.com
pccilevelupsanpablo.e-agricom.net
chuyendoisodoanhnghiep.edu.vn
maps.evsy.app
fd.iq
www.findhousefor.me
app.fineducation.xyz
www.flowtapes.com
gloriatoroasesorias.co
cimbalomiskola.hagyomanyokhaza.hu
employee.herohousing.org
hippamate.com
hmwrk.link
beta.app.huduku.io
inciteworlds.com
oleksandr-inna.invito.link
www.islamicdua.net
m.gstportal.jamku.app
www.jarika.net
www.jobhopr.be
go.kvdigital.swiss
leonaltstadt.com
lisaochmartin.se
lsm.com.ar
lays-web.main.fish
mallettecontracting.ca
www.mangos.ai
portal.maxsource.pt
shop.mitemma.de
dashboard.mjpharma.net
moneytime.ai
www.myjunto.app
tips-dash.staging.nside.io
portal.oni.co.nz
www.pdfsnake.app
pereira.app
www.pinbuggy.com
www.pinfinder.app
my.a-b-c.pl.ua
www.playquiz.co.uk
quantumwms.com.br
qwaggadev.com
racot-headspa.com
room101.retro-ink.com
rootcauseapp.org
schooly.co.za
app.shipwiththerry.com
admin.shortchall.com
app.simkada.id
auth.siteman.ro
gdpr.smartray.com.au
dashboard.somosbali.app
dashboard.doe-maar-mee.spo.show frontend.doe-maar-mee.spo.show
invite.stockclubs.io
tcistlucia.com
www.thefreestudios.com
www.timetip.app
tktt.fi www.tktt.fi
app.staging-barber.todakdigi.tech
www.toiware.co.jp
resume.tonytongvideo.com
game.toyroomrome.it
tvee.app
www.uludagobezite.com
www.upnext.at
vaaniai.com
vcml.io
vesselhost.com
www.viniciusnattan.com
www.voicevictor.com
webharmony.dev
invite-qat.wemoscooter.com
my.whitecrustng.org
admin.interedu.wowdesk.jp
your-fetish.shop
knowledge.yourconcierge.jp