77/100 SECURITY SCORE

Certificate Information

Subject
CN=ar.aoka.camera
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 19, 2025
Valid Until
February 17, 2026 85 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E5:09:22:8B:9C:E9:20:F8:F2:A9:E5:11:39:5B:9E:EF:01:15:2F:00:61:D9:16:A6:9C:E5:DA:85:E8:30:23:87
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
us-qa.lgcloismartlift.com

Other domains in certificate

www.10mado.jp
www.wedding.adamino.dk
agustincastineira.com
app.dev.airsset.com
anunciosplasticos.com
ar.aoka.camera
eatttt.ateliee.com harding.ateliee.com
www.avgaccounting.app
avlund.dk
awirjono.com
www.backspace.to
dashboard.blaze.today
blessiverse.com
bortronx.com
tsuribiyori.clearwaterproject.info
p.f.coin-trade.cc
woopetz.com.tw
simonsaysido.compilecolumbus.com
student-journey.comprendo.dev
www.confin-partner.cz
crapton.xyz
uatwebapp.credittnow.com
ctga.me
cxoncloud.com
www.dagmar-kaiser.de
deccos.nl
app.circleinfamily.dedecube.com
www.god.dedy.no
ichiwa.for.dinii.jp
inscription.diploma-sante.fr
grademap.donnellb.dev
www.drive4up.com
www.eduprompt.tech
app.dev.edupulses.io
www.elph.ca
request.esg-workforce.ch
www.feliscosunghana.com
femip.femiglobal.com
www.finometr.com
www.frczero.org
seotool.genius.ai
app.getupnext.com
app.givling.com
grandexhibit.com
www.hackneyed.site
www.hceducontinua.com
app.hojokin-dock.com
preorder-dev.hotwax.io
hozon-gunsou.com
app.imaged.dev
itaipeleg.com
johnhousholder.com
www.kamucep.online
eopdemoapp.kbcinc.cloud
kentayoung.dev
lavchat-agent-v2-stg.lavenirapps.co
www.c.leventefazekas.hu
physician2.dev.lifemd.com
www.livionaef.ch
photo-gallery.lucianiernye.co.uk
wgh.mangodb.uk
matakul.jp
matthaddon.com
mccoward.com
kinase.med.br
medusa.contact
admision.minddo.com
mohit.app
momentumfitness.uy
momminess.hu
wg.nebrowser.com
agents.nesapay.com
www.nextercare.com
www.pastoraluniversitariaunsa.org
pdd2025.kz
pejme.se
petter.cloud
blog.philsambati.com
auth.aso.playhenry.net
www.prazdninovy-domek.cz
projectsthestones.gr
qualap.jp
quantumweavearchives.com
app.runorstay.com
www.salakaimmo.com
stage.salussms.com
skunkteam.nl
speakingathome.com
www.supernovalabs.tech
swifteverywhere.net
toleria.nl
www.tpx99.com
meet.truted.com
www.vaxdee.com
www.voicetyping.xyz
account-auth.weverse.io
yavuzplastikpet.com
yellowstonesolutions.org