Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=jayel.uk
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 21, 2025
Valid Until
February 19, 2026
89 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A2:C6:94:AF:D0:CD:C4:7B:34:CC:E0:41:E3:22:CE:15:5B:4F:40:8B:F2:2A:34:3F:C5:C3:69:95:D1:5D:13:0A
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
wms-scanner.rcloud.dev
aavrti.com
takuvuq.anagraph.io
arizalabs.com
beta.asianhospitalskadapa.com
bayareahealthclinicpc.com
www.bayareahealthclinicpc.com
bibleduel.com
blue-cell.net
brostrike.com
curso-cannabis.centrofluminense.com.br
clsadvogados.com
gidran.cgrate.co.zm
constructo.cc
www.countrycounter.online
dealcircle.ai
www.dealcircle.ai
widget.detellerloopt.nl
shop.duderabbit.com
www.eleventy.be
www.enscygen.online
epsteingate.org
startup.eqwity.com
eschat.tech
finstorlabs.in
dev.galaxyfounder.com
goldcitytechrepair.com
www.goserpico.com
gpskilveren.nl
haterbazar.com
avalia.hauzs.com.br
headpointafrica.xyz
www.headpointafrica.xyz
hot-pod.ai
app.isport360.com
app.jaguarb2b.com
jayel.uk
jazzhotelnaples.com
www.jmabonline.com
read.joylocker.it
kaizen.juanmg.com
www.judesstudio.com
www.kesso.ca
www.key-st.one
linknbl.kisline.com
kri-and.fi
www.kronos-training.com
longwoodfamilynails.com
www.lorenzbielenberg.com
toddlerstales.lunadevel.com
www.marvin.tr
meedeepos.com
lyric.menghak.dev
michelbertrand.com
mifincapp.com
www.mindleaksoftware.com
cancun.mitraqsr.com
dev.monittor.com
movinghuman.in
mysterybites.com
nuvio.systems
oaoa.ooo
theoaoaschool.oaoa.ooo
officecleaninggoldcoast.com
www.officecleaninggoldcoast.com
origimed.ai
bookrent.padhakku.com
pikseltest.com
firebase.pontuax.com.br
a-zagent.prossell.jp
quantumnetsoftware.com
www.quantumnetsoftware.com
medicost.rajaahmadtabib.id
notas.ramirobedoya.me
redsoft.com.mx
faxianggescalpandhair.salonxpress.me
sent.rip
demo.sprxvr.com
www.srinivasacaravan.com
subburajan.online
unlock.suitefeedback.com
suncomnetworks.com
superant.kr
www.svppi.org
xvalissonanaya.swanmoments.net
www.techaus.mx
task.techwithag.com
www.thebananostand.com
www.thegamedevtoolkit.com
fanatics-chatbot.thelevel.ai
trulscronberg.se
www.uabuh.com
ps.umm12many.net
www.uploadmystock.com
www.vivonglobal.com
www.waitlyapp.com
www.webcrft.com
domes.xylim.net
www.zakat.studio
zakat.studio
Other domains in certificate