Open Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=wooliston.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 07, 2025
Valid Until
January 06, 2026 52 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
52:54:38:A9:FD:35:BA:2F:C4:CD:AB:9D:F3:A0:A8:AA:29:23:7C:C1:D7:49:CE:45:6A:04:EA:13:00:00:83:A1
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
wingate.web.za

Other domains in certificate

admin.100words.org.au
class.actimotive.app
links-blmgroup.acty.com
ahorraconcaser.com
alauna6266.co.uk
arogriha.com
dashboard.assisthub.io
atypical.tech
beaverclimbs.com
app.beezance.com
betgame.hu
kapil.billbuk.com
stravastats.bradleygraber.com
brewbricks.com
brineos.com
bryanalvarado.es
www.burn-hall.co.uk
www.cesarsantiago.me
admin.choosechicagolimo.com
cloudalltech.com
m.nhaphangtaobao.com.vn
admin.coreskills.ai
www.cullycode.co.uk
online.davet.io
buddy.devzenit.com
dev.e-english.com.au
ellecigroup.com
endorse.tv
www.enkeltv.no
idn.edu.eu.org
fedtech.sk
datablitz-dev.fjnr.ca
flumebrazil.com
conscious.forgetfulsoulapps.com
www.geekadventure.co.uk
www.giverodabuck.com
www.gkcloud.se
bokukimi.godan.dev
gradrx.com
hinterland.berlin
admin.homebasedao.io
testiapp.indoors.fi
kanzlei-reinig.de
admin.kisantodukan.com
www.leapspace.in
talent-staging.lefty.io
beta.lific.pro
api.listenhere.io
demo-xuxu.lottery-popup-store.com
lukasjahoda.cz
bdm.lyoxa.ch
www.madhudhay.com
www.manbropharma.com
linkmpitrufquen.mappu.cl
beta.marvin.es
mcurl.net
membergenie.co
www.mesari.llc
mostafaafr.com
fitspherebylivlo.neoufitness.com
parkchamp.ca
www.praveenmineral.com
bemvindo.premierfc.app
recharge.privatedialer.app
www.platform.pukket.co.uk
profile.qtick.app
quedev.quemind.com
link.quitnow.app
login.railtasker.com
link.rebbit.net
app.redseaconserve.org
justivy.rentscore.africa
admin.scanbuddy.app
company-test.scholarize.io
scrum-poker.cards
dev.shouldert.app
erp.skywinds.tech
spa-69.com
st3v3n.xyz
www.stefanocomba.com
www.sumerpatel.dev
touchless.swyft.com
sydneyminigolfhire.com.au
tdc-shop.tech-scheduler.com
technosoftlabs.com
uturn.thediners.in
www.therapeasy.co
link.thitruongsi.com
www.timelessteawa.com
toprealtyspace.com
app.turfmama.com
my.unloc.app
reports.vaihde.io
valadro.com
idandv-admin.vaultigo.co.uk
www.waikikichocolates.com
app.withaview.co
wooliston.com
d.ypgo.io