Open Cached · just now
80/100 SECURITY SCORE

Certificate Information

Subject
CN=reader.metalibrary.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 06, 2025
Valid Until
March 06, 2026 84 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
01:1B:CD:0A:77:F3:2D:9F:17:61:91:F3:0C:6D:89:70:2F:1F:F2:77:7C:40:A0:FF:06:D3:EE:99:CC:17:87:19
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Basic
script-src; object-src; base-uri; +3 more
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Present
ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
transfer.jpyc.jp

Other domains in certificate

www.4f.studio
waveat.a-zero.net
anoudmanor.com
caviar.at-the-m.com
www.bbbl.app
puck.bettybuoys.com
www.bgapp.co
www.blueshieldconsult.com
www.catholiceducation.info
www.charlielewiswrites.com
www.cinabellis.ch
city-transceiver.jp
bud.cleanbox.co.il
kick.ymcshop.com.tr
www.coolpress.com
www.csd-india.com
www.deukae.com
app.diceworld.it
vendor.diffe.rent
www.dinosaurcoasttrackguide.com.au
ecabas.biz
www.echofive.app
www.app.engineersinsight.co.uk
espertoo.com
charge.evup.com.au
flowerdog.com
accounts.dev.fly.co
furryworld.online
gabrielapeacock.com
www.gideonpeprah.com
app.gonerocket.com
www.gpsafira.com.br
www.grandview-fbla.us
graymarket.ch
greentor.com
secure.haulex.com
inscripcion.impulsofitness.com
www.inceptive.com
dtcrajgir.indiandevelopers.org
intelligence.wtf
www.iphupha.co.za
jamesrussell.uk
jiseon.de
www.joinblynk.com
surveys.k-9apps.com
kegelstreams.de
kismehecskeetelbar.hu
push.kohorta.co
stg.ktmcouriers.com
backend-dev.le.mu
v1-qwk-prod.da.letsdive.io
liveeasy.io
app.longhornneuro.com
luni.io
michang-admin.m1studio.co
manoirasdetrefle.com
www.melcornsoft.com
reader.metalibrary.com
midteideconsulting.no
moolbono.com
timer.moonspam.com
naavo.in
www.nearestschool.com
ewe4you.nology.io
ax1m8in.onehypernet.dev
landing.dev.park-stock.com
participainteligente.org
paulinasart.com
app-id-dev9.pbcd.net
rainydawn.io
rememberingroger.net
www.renansujii.com
coachingairlineradio.robinleber.de
www.sabnez.com
join.sailties.net
sanghoonjun.com
www.serberinsaat.com
www.shieldedlivingharim.com
siete.top
slashsend.io
kline.speakylink.com
sportssuck.app
stickeralbum.app
www.streetiq.ca
next.campaign.tekutekulife.com
telecompaper.com
www.thiskindofthing.is
www.threecolumnsllc.com
inlegis.minhacentral.trausedu.com.br
true-time.app
www.tubelaces.es
survey.up-diving.com
www.uppso.com
dev.verve.money
vinosperonistas.ar
www.westfield-companies.com
para.wka-karate.org
studytrust.xhuma.io
workout.znoj.cz