Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=lefidrye.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 16, 2026
Valid Until
November 14, 2026 70 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
2F:3B:8E:E3:51:F9:63:E9:6D:76:0E:F6:F5:28:E7:E6:42:67:33:D7:0A:00:EC:B0:C7:4B:A9:3D:D2:07:C8:13
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
theexecutionlab.ca

Other domains in certificate

portal2-apap.affinity.do
alexpina.net
andres-murillo.com
annasinger.pl
askchefapp.com
atrialy.com
labs.augmity.com
autoparteslarueda.com
kia-staging.autoroot.ca
balihotelsandmore.com
whatsapp.bancodeserviciosfinancieros.com.ar
www.bayboatlife.com
beeper.bcare.baby
www.biasharamakini.com
blockchaincertificate.world
hanstroke.bossyunlife.com
butterfi.com
capadvantagevendors.com
cascadiacarbon.com
advertiser.casting-asia.com
cb-corporate-finance.com
ladyboss.chan.gallery
auth.chart-img.com
chatsprouts.com
cheveuxnappy.com
www.chupak.com
cjsbc.com
cleartopass.com
login.clusterfuzz.com
crmcd99.com
www.dallagnoladvogados.com.br
dbilabs.com
deadbeatjudge.com
app.demotime.com
linkedin.devcodespace.com
www.drgopalsharma.com
dudejustgo.com
ecosamsung.kr
ecucr.com
eleicaosbcbm.com.br
app.enterthebibledojo.com
familia-domain.com
fillmycup.app
a0h8.foodle.su
g360co.com
utilities.goeasyfigures.com
proverbs.golpc.org
bullpen.goodfolkdigital.ca
gustavfredriksson.com
hackmanhandmades.com
hansaworks.com
helloplanningpoker.com
www.horizon-paysage-35.fr
wedding.hotarek-ribel.com
icondcon.com
imhok.com
initprism.com
www.inspestr.com
instrumentationhkco.com
intellocator.com
auth.investimoportugal.com
ipxdi.com
ironappsdev.com
www.ishaansharma.ca
www.izrai.art
wine.j1n.uk
jaei.in
janainagarrot.com.br
www.jiwar.co
kb3elitebasketball.com
kccook.vn
keystonejoy.lol
fotos-activiteiten.kljaalter.be
nehirkoltukyikama.kozanonline.com
lefidrye.com
www.letterstart.nl
makesomecookies.com
game.mdsouza.com.br
menu.al
msarit.com
neuraccel.com
nilesfromm.com
nullflip.com
pescareinogliastra.it
links.planteen.hu
www.revel.cloud
skately.pl
www.st-trenchless.com
strokelab.swimmetrix.net
l.teho.app
go.templateapp.co
transitpulse.themissingsunday.com
api.tournify.nl
www.travelllr.com
uplinkautomation.com
www.weimagineer.com
wordsurge.app
www.zeitguru.de
mta-sts.zipi.co