Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=dl.aplimax.net
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
December 08, 2025
Valid Until
March 08, 2026 64 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
31:B4:42:90:B1:AA:B5:F2:BC:19:79:FC:7B:34:90:F3:99:E7:5B:B7:85:BC:F3:51:5B:D1:19:1E:73:77:3B:2A
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
web.spirally.io

Other domains in certificate

www.allthegoodquotes.com
ww1.animeflix.ltd
annually.app
anytvcontroller.com
dl.aplimax.net
apply24x7.org
app.bana.sa
link.betty.social
bevy.pl
black-sheep.com.mx
blackcowsdairy.com
www.britishstudentroom.com
pwa.bronies.nl
bazaar-dweb.bukalapak.design
chattyschool.com
www.burtonecooper.co.zw
admin.courtsmaster.com
dev-livercare.cyberliver.com
deadlyfamimpact.org
www.demetrius.dev
dev-app-music.dwango.jp
ehu.edu.et
euroshopfitting.co.uk
eztalk.eztrust.at
colorup22.feexp.space
fessior.com
dev.finlyst.co
webtreinamento.flitapp.com.br
g0oo.com www.g0oo.com
ginrummyplus.games235.com popitduel.games235.com tomandjerry.games235.com train2048.games235.com
admin.gestur.io
www.getdroptaxi.in
godeso.com
link.hellopillar.com
hoangyell.com
app.iamb2g.com
importa.imtery.com
app.jupitergoals.com dev-app.jupitergoals.com
recipes.kodie.dev
laberinto.app
app.labirint.ru
www.linkleen.com
dashboard.littlebeespeech.com
liveonlife.in
www.m2it.se
agent.makeit.buzz commission.makeit.buzz portal.makeit.buzz
agent.makeusa.us commission.makeusa.us
www.marcelbaur.io
guides.mealestroai.com
www.meese.pl
terms.dev.megalos-kids-app.com
moca.app
dev.mytrove.co.nz
login.ocp.co.nz
app.orlikfy.pl
oscus.coop
oy-partners.com
philoshea.com
pixelperfecto.com.ar
at.revorize.com
auth-links.rockethub.run
prysmian.dep.rosepetal.ai
pawel.rzeczew.ski
app.scaf.ltd
translate.sign.mt
beeldverhalen.staatsbosbeheer.nl
starpay-cards.com
api-auth-gb.tabsquare.com e-generator-ecms.tabsquare.com
dashboard.techqueto.com
thacogroup-com.com
tondoapp.com
app.traitte.store drivers.traitte.store
www.trieupham.com
ifviapaiscordoba.ualabee.com
jelentkezem.ujvarosonline.hu
vartis.lt
support.woosa.sg
xeremdigital.com.br
xn----7sbabya4afbtg9baik5a.xn--p1ai
xn--2o8h.ws
www.xn--4bi.gg
www.xn--6bi.gg
www.xn--9i2b2oo3rb4gwwq.com
www.xn--bootsprfungen-2ob.de
xn--cabaamorria-4dbg.com.ar
firebase.xn--hndvrker-9zan.dk
xn--yckq0jzb2b.xn--tckwe
make-font.yaroslav.uz
admin.zecelarece.ro