77/100 SECURITY SCORE

Certificate Information

Subject
CN=analytics.alanho.work
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 06, 2025
Valid Until
March 06, 2026 86 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
31:D8:12:3E:61:50:26:14:B4:DA:53:B7:B0:6B:12:2E:72:09:C1:D5:38:8E:1F:B8:69:22:FA:0B:27:70:7C:13
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
vote.demokratio.net

Other domains in certificate

go.akuvoxcanada.com
analytics.alanho.work
alastaircallum.com
www.albersquare.com
www.alpha-biochemistry.com
www.amanrajpal.me
www.ampiaiset.fi
app.amplisend.com
extrafarma.appshare.com.br
www.axisbinc.com
www.b-market.fi
bastienchevallier.com
www.bluejay.dance
centillion.no
www.cgcmmap.com
smartnas.smart.com.kh
bokhorst.coolfox.nl
www.cranberryqueues.com
developerproductivity.dev
digitalronesans.com
dijitalrotaa.com
api.discount-loans.com
mkt.ecfastworldwide.com
emiratesvisa.com
dev-pyle.fretzealot.com pyle.fretzealot.com
www.germanhood.com
dev.yurra.gnrl.tech
goal-mapper.com
share.goalbud.org
app.gostackr.com
get.govtphoneoffer.com
goyelag.com
www.growingcolor.co
stage.guessmonster.com
58h1e.poda.incentable.com
www.innovationalp.com
apps.inoculens.com
b2b.jacto.com
coronavirus-us.jamesonsaunders.com
www.k8sdb.com
app.kajaycouriers.com
www.kiperapp.com
kodiswara.com
www.komunitix.com
blog.kritchalach.dev
l.ktuqbank.com
formulario.lanzaroteartgallery.com
lozoya.agency
pod.luzma.click
www.majafy.com
www.malaysiafitness.com
dotfiles.meisterveda.com
mep-plan.com
pubanalyze.mmrstg.com
www.mtgtradingpost.com
talent.neoufitness.com
bootcamp.nextmove.nl
novacodellc.com
ntpoker.jp
oneclickinterviews.com
orienta2.es
outdoormusichk.com
www.ozkansari.com
passportdispensarytour.com
pms.peoplespension.global
www.employee.prinicity.com
monitordashdev.propelledbrandsdev.com
sobrenosotros.proposito.com.ar
radiobuenasondas.online
www.recoveringtheplot.com
www.reeferking.in
www.ryanburgoon.com
app4.safetytek.ca
app.savetofuture.com
scala-algorithms.com
see3ee.com
sfc.100.pn
sirawit.dev
southpole-shop.com
springfieldmutual.com
game.studzinska.com
swagtrak.com
app.talknetics.com
www.maps.telawatch.com
thecruciblegame.com
www.thoughtbit.in
www.trailmedia.co.uk
tugayemreyucedag.com
turbinastudio.com
montana.turbosbir.com
twolights.dev
staging.uptrust.co
hz.van-rijswijk.net
nea.vandromme.co.uk
vebizhuri.com
walkiesstevenage.co.uk
waymuscle.com
www.zarinahmarican.com