Cached · 3h ago
77/100 SECURITY SCORE

Certificate Information

Subject
CN=harshadmoray.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
January 31, 2026
Valid Until
May 01, 2026 86 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
19:29:8E:FD:66:E3:EE:5B:D6:8C:7C:C6:E1:28:AF:89:48:F5:C5:D9:D6:88:DD:E6:4D:37:9B:8E:59:B6:80:6A
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
valpercan.com

Other domains in certificate

vmgmc.100.pn
staging.abaixodezero.net
www.alephzero.ai
www.alinon.tech
krishnagiri.anbudroptaxi.com
mate.bandinc.jp
gdl.bellelon.com
store-admin.bookinggood.net
brainsquared.de
staging.bulletn.co
apply.caarya.life
leabraithwaitecounselling.cafetextual.com
www.chamaraabeysekara.com
www.chanto.io
checkmy.church
sriraama-admin.classet.in
www.1es.co.th www.alive.aia.co.th
w.cigna.com.tr
concretecake.se
www.danielllano.com
app.dashwaste.co.za
divinityworlds.com
go.dyme.com
fagnerjunqueira.online
flow.fka.agency
test.fleetseer.com
app.freeguides.com
www.getworkouts.io
gravityfalcon.com
harshadmoray.com
haseaki.com
hashdash.it
hisherpoint.com
holidup.com
huizesmits.nl
dominhphuc20225064.id.vn
beta.app.ikiteo.com
client-api.invito.link
ironopolis.co.uk
www.isthebluelinefucked.com
solano-cpc.clients.joinpromise.com
k9lands.com
tech.kaantaze.com
city.karla.ai
lamoral-coatings.com
lentilhas.com
lesclesdor.fr
www.luft-brix.de
lumiprep.com
www.madars.org
marjoleinvandijk.nl
www.martintoddbuilding.co.uk
admin.meansmotive.com www.meansmotive.com
mohsinkhanshaik.com
moonlet.xyz
stock.mozys.de
naywinhtun.me
www.nemcaretezpur.com
auth.staging.nside.io
omlife.app
georeftraining.nscf.org.za
ezserv-r.penzigo.net
pollive.com
previashot.es
protectinglocalconsumers.org
prothama.com
punterr.co.nz
www.readylife.com
links.ringgo.co.uk
auth.dev.routestack.nl
www.santhugao.com
senakayasu.com
servicescape.io
auth.google.setplay.tv
www.sezerious.com
web4.shiur.cloud
shopabacus.com
shopdhoom.com
link.beta.songpop3.com
sozopol-bg.net
www.spn-technology.co.nz
web.startupfino.com
www.strongpigeon.dev
sullyslegacy.com
tariqej.com
themurrayfieldclub.com
thiatham.space
toponavi.info
go-dev.tryhabitual.com
turniejmanager.pl
ubicalculator.com
gestioncomercial.upplication.com
kallakurichi.vishnutaxi.com tenkasi.vishnutaxi.com thanjavur.vishnutaxi.com
events.vx-events.com
apps.wesolvers.com