77/100 SECURITY SCORE

Certificate Information

Subject
CN=rustomjee.properties
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 18, 2025
Valid Until
January 16, 2026 71 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
9B:43:1C:C5:3A:5B:67:80:92:2F:74:E9:85:65:FA:B8:46:86:80:52:EB:3D:C9:EE:44:EB:14:4A:DD:5C:73:F1
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
volunteers.summercamp.hillsong.se

Other domains in certificate

a24payroll.a24group.com
ag-kiosk.ovh
aiudalabs.com
alperex.com
conf.apereo.org
ardemedia.fi
scriptbuddy.arositpartner.se
events.automatfoto.se
www.ayatdesignstudio.com
portal.b2vtech.com
www.biozaz.com
www.boomerangchat.com
insurance.chandrasekharsahu.com
muweb.mumu.cloudns.ch
recip.projex.co.il
kayo.com.ng
curioapp.io
www.dappfi.org
dataelementgroup.com
supawalls.davidmakesapps.com
daylightauto.kz
dividendvision.com
www.diyers.com.ar
dowonder.in
firebase.c990.dpdns.org
www.drmzintomavula.co.za
dschedule.com
dulceskarlamexico.com
elitescaffolding.ca www.elitescaffolding.ca
embody-now.com
sub.employandrew.info
gdjv.foodle.su
www.garysvay.com
gourney.jp www.gourney.jp
www.graphline.io
dev.hnoy.fi
import.hotwax.io
ishamiarts.com www.ishamiarts.com
iveroncloud.com
app.jaatapp.com
www.jacl.io
jazedesigns.com
business-web.jazertechsolution.com chatbot-web.jazertechsolution.com crm-web.jazertechsolution.com filemanager-web.jazertechsolution.com oncall-web.jazertechsolution.com project-web.jazertechsolution.com
kikomik.site
koch.management
smart-search.kodex-ai.com
lensbook.com.br
portal.logilift.net
auth-dev.lomalo.app
lotusmileconsult.com
www.maheshdesign.com
massequipments.com
mikkorauhala.fi
app.monax.dk
www.mtcharger.hu
www.nexilo.uk
www.numerus.lv
opessocius.co
api.pairedhuman.org
palettebrews.com
pnkstrgenius.fun
popsto.re
borngamel.posnet.com.au
priamossystems.com www.priamossystems.com
dash.awdp.qzz.io
panel.rabieski.pl
dev.ratiomonitor.app
www.rbmalgebra.com
www.redbeatventures.com
links.redcl.uk
driving-school-1.return-value.hr
rlt.re
rolezando.com.br
runitback.app
rustomjee.properties
scoot-er.com
map.sensormonitor.fi
sleep-kibun.com
www.swiftlab.co.uk
test.techrow.org
www.thebullstock.com
tonyhomes.in
ungibjerke.no
www.waxdetective.io
auth.wellintegrity.ai
www.wishtora.com
www.writecut.com
xastress.vn
yakirwebuild.com
zqil.net