Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=alpha.pvc.katapultpro.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 20, 2026
Valid Until
October 18, 2026 62 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
6C:76:98:E8:0E:39:8F:5A:60:38:30:1D:28:01:37:86:AF:06:F3:65:9B:F4:65:61:3F:B5:54:65:25:6E:BA:42
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
unique-ctc.com

Other domains in certificate

auth.aeondialer.com
www.arabi.in
axorsolutions.com.br
it.azhospital.sa
barak.barbizo.com
www.biosked.net
www.biosked.nl
bloksis.com
golftrajex.bluekeisoft.net
brahmaa.net
brahmaa.online
buddyfit.com.br
buihailong.id.vn
khayaltw.burakkirbas.com
app.capelaacustica.com
auth.cardversy.in
finncio.cellihub.com
www.cernitex.com
auth.cmyfcc.app
codecrushstudio.com
compracircular.com
contoursmusic.com
cortex-labs.eu
cra.tips
garage.cuorisystems.com.br
swedish.daily5lang.com
dainian.hair
signage.dantecorso.com
daohe.com.tw
dioscuriexecutiveservices.com
manage.edti.com.tw
jlc.erenrich.net
voting.eric-han.com
www.focuseleicoes.com.br
apps.forwardaction.uk
admin.gematrimony.com
login.uat.getcredit.one
getmehost.com
getzee.co.za
gmabogadostenerife.com
www.gonzoconsult.autos
www.guidedprana.com
restorante.hakantunc.com
hedgehealth.autos
wov.herstelverzoek.nl
hubprojects.org
changethegame.ideiasdefuturo.com
demo-app.innovint.app
www.irepn.site
support.d-walk.iwai-ai.com
jantana-ural.ru
joyhub.surf
alpha.pvc.katapultpro.com
marian.kohn.sk
auth.kynber.com.br
learnerevo.co.za
libretapp.com www.libretapp.com
admin.livorapro.app
luriko.com
www.mansimetals.com
medicuslabs.app
mentoro.app
www.mersinhurdaciarmet.com
muhsinjon.uz
murdi.is-a.dev
murphyautoparts.com
firebase.mybushfireplan.wa.gov.au
nanas.pro
negreenconsulting.com
www.neurigumpaints.in
www.nilabnutrition.com
auth.nxtgenecom.com
nonprod.optimalmtg.ai
anapa.orthocare.kr
admin.parakhhospitals.com
www.planet-zero.ai
www.pooja-packaging.com
www.potentialisnow.com
quadrupleu.app
rekindlemoments.com
satlinkaz.biz
scanmenu.com.tr
qpaper.schogle.com
ergon.shishirexe.com
www.slcoders.in
soffee.com.mx
www.subamtechhub.in
suyom.hu
app.teacherswitch.ch
portal.technicalservicesrb.com
www.thesemel.com
ai-maturity-assessment.tibil.ai
www.valueai.hk
www.wilsonklee.com
wonderlandventures.studio
workhub.sa
invite.xword.co.il
configurator.integ.endor.cloud.y1.de