Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=dental-ig.fhir.tw
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 07, 2026
Valid Until
December 06, 2026 82 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E4:21:23:79:67:34:21:57:8C:3E:2F:43:CC:73:9A:1E:34:5F:E2:E3:57:EB:AD:E1:7A:80:85:EF:17:CC:B4:5C
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
tutsync.com

Other domains in certificate

www.actusmx.com
ai.adwapi.com
www.keneya.afrivac.org
www.alrifai-trading.com
ashtonmaze.com
athlitria.com
atominfo.tech
www.baggermobile.com
securelink.bettercorp.co.za
bigsport.com.ua
bitsaber.dev
www.bookdatasolutions.com
bring-out.com
mach1gp.bwysistemas.com.br
webapp.canteramed.com
www.cetli.app
chartercompanion.site
citizenship.vote
codemarques.com
danalytics.io
docs.datalaksa.com
www.dependableaisolutions.com
derekbrowers.com
www.epsilon-delta.link
dental-ig.fhir.tw
friendstaxis.co.uk
salud.fundacionprovidaecuador.org
heartworktherapy.ca
app.hotbody.one
admin.hotelajayinternational.in
user.hotelparivar.com
transfer.i40.de
www.shatz.idodon.com
app-dev.interplay.io
itage.com.tr
jasabikinwebsites.com
mta-sts.jayme.ca
jayplay.app
jetpackx.io
jhc-collective.de
www.joanus.com
www.kikunantoka.com
testimonials.kingbillycasino.com
korum.tech www.korum.tech
ksrbuild.in
peerai.lavendershe.com
stage.lenskart.io
lyticsdatalab.leveragelab.com
www.maatise.in
magnetboard.app
meiklabs.com
meolvidepe.pe
meraki-apps.com
sofa.mobilenxt.app
www.moneybonsai.com
yame-prj.nbs-association.org
omnieden.com
www.opread.com
bjerkasand.ordreplan.no
orion-next.com
www.panicindustries.com
petal-ops.com
aluno.pilotar.app
www.pocurio.com
purelocate.com
mergeclash.puzzlecats.com
app.test.pyxo.co
app.qrmenus.com.br
radiom.stream
ramakrishnapublicschoolsira.org
www.risexi.com
scenes.app
simplyplay.app
kiosco.sinube.app
www.softworksnz.com
sourcepack.co.uk
spardhakarnatakaacademy.in
sparklightpayasyougointernet.com
app.studeng.es
bodakarlayhector.swanmoments.lat
terminosyplazos.com
platform-toast.thelevel.ai
thepassionatetrader.com
therisecollection.co
thevy-mahal.com
tolentinotuition.com
tomkrepp.com
www.umadeus.shop
app.usesidebar.ai
www.vfdesir.com
vrnemprende.online
www.wooday.jp
xlock.app
www.year10.gg
youtubeincomeestimator.com
zenyternal.com
zevexprojects.com
invitation.zourney.io