86/100 SECURITY SCORE

Certificate Information

Subject
CN=rishtabook.online
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 21, 2026
Valid Until
October 19, 2026 72 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
8E:7E:17:F2:4A:EE:B3:51:E0:98:03:98:C6:85:46:33:62:03:5D:0B:75:C4:10:A4:6E:87:A3:E4:35:27:88:8A
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
wiki.equidentity.be

Other domains in certificate

306designstudio.com
www.timesheet.adanetech.com
alejandracarrera.com www.alejandracarrera.com
www.amplifyeurope.com
okrs-arvo-hub.arvohealth.com
www.bhanupratapsinghjhilwara.com
musicfactory.biddz.io
campycareacademy.com www.campycareacademy.com
constructoracondor.com.ar
portal.staging.crilabs.net
dakglobalas.com www.dakglobalas.com
www.dhiyafoods.co.in
dinksmanagement.hair
dqs-safety.co.za
dragonaingatlanok.hu
xqt7d5nvd724ojs.easyapp.co
dev.eblocky.sk
virtualassistant.cti.espol.edu.ec
www.eudynamystech.in
findtvremote.com
forgeautorepairs.co.uk
galaxislarp.online
gesiacademy.org
go-service.rs
graystonecapital.co.za
falcon.grupoubique.com.br
grwu.online
hlfmsr.buzz
hospistyle.in
insurtech.me
invitosoftwaresolutions.com
ma.joonee.com mental-math.joonee.com
moderacao.juntosnaredacao.com.br
www.kersermimarlik.com
www.kryptoranking.eu
kydonegroup.com www.kydonegroup.com
librodellasaggezza.com
lorvez.com
ifu.lyraetk.com
mpay.makro.pt
www.marionrenauld.com
www.meistrasirmargarita.lt
id.mentudo.com
www.metapainting.autos
milkx.store
tops.millennials.mu
mixhero.es
montacabana-camping.fr
mxngee.com
mymasala.uk www.mymasala.uk
narma.dev
faculty.oakwoodfriends.org
octofusion.live
oriniquegreen.com
perriermotoculture.fr
panel.planovi.app
app.qazilink.com
reflow.ge
rishtabook.online
labs.rivernightpoker.com
robinsonlifestylemom26.com
get.rowleysrestaurants.com
royalstate.co.ke
tenant.safepage.app
schildi.com.br
scssize.com
senergia-enr.com
www.shivanidhotre.com
www.smartreaderenglish.com
speedwayreflex.pl
stonebird.online
www.survivortrainseriea.it
suryadevarapolytech.com
cv.tesl.ink
abctest.testowaplatforma123.net
boho.thediners.in
abcel-demo.tibil.ai
admin.tic-tac-trivia.com
www.time2yak.co.uk
www.ultraplaner.com
panel.uni-verse.co uni-verse.co
egade.tickets.vlivemedia.com
vrhingle.shop
auth.waslaq.ps
www.whoseenit.com
wifleetv3.wiyak.online
www.xiaolingapp.com
loginen.yenisafak.com loginur.yenisafak.com
cc.youforge.shop
www.zuhdstudio.com
app.zzshare.com