Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=editor.skylar.ai
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 09, 2025
Valid Until
January 07, 2026
54 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
5E:B3:A0:95:68:C6:51:78:1E:22:68:93:86:0E:0C:34:3B:70:E7:B6:F4:DB:69:55:05:F1:20:B7:EF:87:9C:D6
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.1justinbarnett.com
akszakal.hu
www.algocodex.com
www.alternativapzo.com.br
www.andina3d.com
mjh.anywheremed.ph
sharebabble.airbabble.appetiserdev.tech
www.arihantsurana.com
asesapcostacaribe.online
awearsense.com
barmansbeerclub.co.uk
blue-frontiers.com
brandthemovie.com
www.bx.com.br
cfhl.com
www.chiesaveterocattolica.it
www.kmlaw.co.zw
p14.pos.convercus.io
cyndicastor.com
darkroombulb.com
www.deangelisosteopata.it
degendata.com
www.designrealitytech.com
monthly.mfolio.dna.uno
ebenverster.com
link.emailhawk.app
sandbox.enezatelecom.com
www.erinnerlicht-trier.de
eventjunctionchennai.in
www.everydaymuslim.net
exterminationdismemberment.com
www.faraoneindustrie.com
link-staging.fh.by
fidalpuglia.it
nashville-driver-demo1.us1.fleet-dev.com
www.food-here.com
gdl4.foodle.su
footballmarket.ro
forgingfreedom.us
www.forgingfreedom.us
ethics.foureyedjimmy.com
foxprotege.com.br
getapp.fxvc.com
www.g1homes.com.au
gameplayer.one
devfest.gdgporto.xyz
gearsyncauto.com
www.goboop.me
www.grossthun.party
beta.groway.com.br
healthcoachai.com
highlandhomebuilder.com
api-sandbox.highnote.fm
hire-here.com
holtsmartsolutions.no
hopekezmuves.hu
coffee.hungariq.com
ikiu.xyz
www.dev.imalabc.com
dev.inclineedu.org
arcarrierpoint.indiandevelopers.org
sccbysurajsir.indiandevelopers.org
demo.stage.infomail.it
inspirnathan.com
recording.metrogas.itx.ar
challenges.jeff.fitness
admin.roster-dev.kenoviiva.com
lcpoffer.com
learntrig.com
acme.staging.cleanbrand.lifebrand.life
lofs.cloud
bonusx.mabiloft.com
simplecards.magneinvestments.ch
markfolashade.com
prayers.mileschristi.org
localisation.mt-courses.fr
www.mysproutly.de
xmas.nahschub.ch
nftwords.bid
notachatbot.org
nxt.camp
admin.nxxtr.com
www.online-screen-recorder.com
app.onlinedoctor.co.jp
staging.resbutler.com
www.relogin.skloutown.com
editor.skylar.ai
www.snoble.ca
ecd.softmedia.nl
jintomo.spwn.jp
bodamendozaperdomo.swanmoments.com
www.tiagocmachado.com
www.trollmoj.com
www.trymcuts.com
www.uarschool.com
www.umakersgroup.com
printer.ustunyildirim.com
www.volontairesmontagne.ch
admin.woox.com.mx
fipe.wos.com.br
Other domains in certificate