77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.spicyfingers.us
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
April 21, 2026
Valid Until
July 20, 2026 65 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C8:C0:D5:CE:A4:1B:F2:D7:12:59:47:00:E5:17:05:D4:83:3D:2B:04:E3:0E:44:37:96:C5:D9:74:BF:31:7E:B8
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
trialcard-admin.phasevia.com trialcard.phasevia.com

Other domains in certificate

api.cammington.28east.co.za
aipicstudio.io
lcex.algofunds.in
liff.anychat.tech
www.artemporium.xyz
www.autobms.mx
automaisbh.com.br
www.baltorx.com
barcelonamap.eu
binarka.tech
bluntlushstudio.com
www.bostontechnicals.com
brandifygrowth.com
tictactoe.broccolirecords.com
cafe96.in
www.capyai.com
castnconnect.com
pre.cu-ra.net
datanex-gmbh.de
djvibes.org
dszero.com.br
expressbooks.co.za
fdoors.com.br
staging.femecub.com.mx
devfest.gdgcraiova.com
www.gilamset.uz
gpx57.ru
www.gruasulivarria.com.mx
hacklabs.app
www.hiscript.in
iletaitunediet.fr
imaginecreateexist.com
demo-lite.impactoss.org
ivaigas.com.br
microfrontendproblems.jenniferwadella.com
prodo.joseaugustocontent.com
maps.joyworks.me
auth.karoteno.org
keepinmind.in
klawonline.co.uk
admin.koderia.sk
explore.leeds.ac.uk
betaapps.level.travel
www.locandaalpioppo.it
lors.hu
www.maddragonfoundation.org
www.malayalihub.com
www.mantraroom.org
ai.mibot.cl
app.mine-papirer.no
multristan.fr
my-guide.co.za
www.oneheartgame.top
otovera.net
firebase-functions.pinchos.se
pizzariaimigrante.com.br
app.portalmudari.com.br
reporting.powerproleasing.com
practiceasy.co.uk
www.projetosmecanicos.com
radhadesignerstudio.com
www.rcg.dev
reachmanagement.se
rembetikaapp.com
www.remmy.pro
resolved.social
treaty.dev.resre.bm
www.riddleindia.com
app.rist.edu.au
rivermall.it.camp.robocode.ua
runes.dog
scottlittle.org
get.shape.care
app.shortwave.com
sigvane.com
himolde.snapmentor.no
www.spicyfingers.us
www.steven-munoz.info
admin.svenson.com.mx
stage.seaprojects.theseabay.com
thwoo.party
mission-control.transupport-app.com uat.transupport-app.com
www.urustoko.com
join.urxcommunity.com
app.utt.vn
vincenzoerosalba.it
wakerobineco.com www.wakerobineco.com
wakerobinecology.com www.wakerobinecology.com
webappsengenharia.com.br
webpadplusplus.com
watiq-parent.wiotschool.com
partners.wishwash.com.eg
withoutlogin.com
preview.yourappcreator.com
www.zerocupid.com