Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=staging.gvwedding.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 15, 2026
Valid Until
October 13, 2026
59 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
32:22:CF:B5:28:57:5D:D0:B3:D9:2E:25:4A:6C:12:93:4D:A1:2C:C0:C9:40:50:48:9F:39:0E:D3:6E:3B:42:8F
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
westend-analytics.com
o.aabass.net
eavesdrop.aflutter.dev
aical.to
aipr.co.kr
www.alessandro.ae
alkarisikorkuevi.com.tr
amrgprojects.design
animalhusbandry.band
aplusabacus.in
aspiremedicalwellness.com
www.aspiremedicalwellness.com
dev.ayeq.io
www.battle.online
calgary3dprinting.com
www.cawdrecords.com
lig-csm.cns.net.tw
croesusworks.com
www.derbystills.com
www.digitalhealth.sg
www.dividy.tech
tracker.duyet.net
kata.edmhs.us
everyonecanread.org
www.fabenterprises.co.uk
sb.invite.fintelli.app
www.app.fraankly.com
investors.getclevrr.com
app.getwindo.app
dev.getwindo.app
getwindo.app
staging.gvwedding.com
www.hawkheadstudios.com
habion.herstelverzoek.nl
introist.com
login.intuitionrobotics.com
inventarioyfacturas.com
jami.ltd
list.jasig.org
jnesistemasolarecftv.com.br
jocode.de
jonathan-taylor.co.uk
www.logmim.com
mpitrufquen.mappu.cl
mgp-chillzone.pl
miriamgajda.pl
momentoengenharia.com
www.mscjb.com
museboard.life
resource.mysc.co.kr
natural20.dk
rajbiraj.nepaldrivinglicense.site
nonstationaryobjectives.com
www.nonstationaryobjectives.com
welcome.dev.novafutur.com
www.numerous.live
compliance-demo.optibox.no
www.petguide.eu
www.phongnhaexplore.com
pzayglow.com
reservationmanager.org
ridecoinc.com
riquelmy.dev
risepower.yoga
robbiestephens.com
rootprotocols.io
roslan.is-a.dev
ryngle.net
ryngle.org
sajielectricals.com
samlebrik.com
www.sandevi.es
scoach.fit
selfmadeagency.online
admin.dev.shotmarkup.com
portal.dev.shotmarkup.com
help.simiinfotech.com
www.sis-sanierung.com
addallhoreca.skalo.pl
softcreatepos.com
auth.stageff.com
securephotos.statussaver.app
blog.todorx.dev
www.tsrresorts.com
twinklinglynx.com
upstairs.jewelry
upthepadel.com
app.useflowbarber.com.br
useflowbarber.com.br
ecom.venkatarayafoods.com
www.verisku.com
www.vibesroom.com
getty-cms-test.virtualprojects.io
www.css.vyeron.com
srmgrtracker.wearetnv.com
www.weprintwithlove.com
wishtech.io
h.wkt.wiki
auth.wynnscribe.com
zohabinteabdulwahid.online
Other domains in certificate