Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=www.kruvedinfotech.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 06, 2025
Valid Until
February 04, 2026
83 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
51:C5:7F:75:EE:9A:1D:9F:EF:70:AC:6B:D6:45:57:2A:73:01:77:C2:33:CD:81:32:2D:A7:6F:AC:B4:01:CE:0A
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
the365collective.com
webgad.alcasys.dev
auth.arbigenius.com
arcciel.africa
armestates.com
www.assigneasy.com
baliniot.in
list.bange.app
www.beastphotography.com
bookinminutes.com
www.bouilland.net
calvarybiblechapelpa.org
studio-feature-dev.captego.com
www.caylerandsons.de
xolary.cloudframework.app
www.sudesh.co.in
boost.fastpay.com.tw
www.crackersbazaar.com
www.crazyjacks.com
docs.cwa-cli.com
playground.cwa-cli.com
cybrixltd.com
beautyfashion.d0o0ds.xyz
difrangoheros.com.br
app.dolardone.com
dev-web.api.easysmartpay.net
connect.ed360.in
www.enliiight.com
explainthebook.com
3m-staging-ideacloud.forgedx.com
survey.fxcams.in
www.getyolo.ai
uat.highschool.my
jlpt.hishig-edu.com
holysocks-eu.com
auth.homesy.ch
wfr.icnorte.com
www.indineurocare.com
canaldenuncia.institutoelite.com.br
ironlizardgames.com
www.islamicancestry.com
uae.ismylegacy.com
www.itrood.com
www.jasonren.dev
www.jasonshaw.dev
jefflopez.music
cv.kelvinguerrero.dev
lillu.kro.kr
www.kruvedinfotech.com
dl.langnet.co
lavishundergarments.shop
m3rdlouver.com
bhagavathi.macademy.in
marcorizza.com
markomilicevic.fr
www.marvinstack.com
www.mathewsavage.com
mcad.pro
www.mcgoeyderm.net
dua.mohsenizadi.com
myif.info
mykl-law.com
www.myobstetriccare.com.au
www.neenapicardo.com
forms.nside.io
octoforge.com
originschampionship.org
pair.contact
prayer-sphere.org
prayersphere.org
www.puffindown.com
www.rapidwaiter.com
rcrengineers.com
www.rebalion.com
www.rebuddelivery.com
regandsam.com
romijn-bakker.nl
www.rozvalzinteriors.com
www.sagarwealth.com
www.sonicmelody.com
srikalaimagal.com
strucbuildengineers.com
sveton.su
api-consulting.taliferro.com
passwordless.taliferro.com
racing-hub.techolve.net
tercamouest.com
nextgen.thinktodo.net
dlink.triviacrack.com
tuttholland.au
srv3.ulangapp.com
unopick.com
admin-console.viduna.lk
set.vocabustudy.org
wainfamilyfuneraldirectors.co.uk
blog.wealth-venture.org
whatsinyourfridge.tech
www.x8bit.com
www.ycshao.com
yxpress2u.com
Other domains in certificate