Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=mygolfadmin.cldo.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 22, 2025
Valid Until
March 22, 2026
87 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
01:6A:F7:A7:65:6D:BD:E0:A5:3C:5B:80:56:DF:6E:46:93:B1:FD:75:08:28:A6:18:F6:8F:F0:BA:DD:D3:15:9C
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.advitsethi.com
act-tanzania.org
aiaw.906331.xyz
www.ainadesign.org
dashboard.antonkulikov.site
donation.atmiyacare.org
dev-portal.awellhealth.com
pizza-artigianale.bastien.pw
www.bayadnow.com
www.bta3computer.com
www.cadencehub.co.za
admin.callrec.net
www.car-detective.com
cgw-hilfsdienst.ch
gyprocpro-admin.chococrm.com
mygolfadmin.cldo.com
circleup.co.in
girtravelexperts.co.in
tmsdriver.heliot.co.th
perodua-lp.celcomfms.celcom.com.my
consoleit.com
dailystayfit.com
www.dakshcarbons.com
delsagrado.org
www.dextrous.com.au
dhanai.net
dieselprices.co.za
www.directbasing.nl
mc-admin.doctormate.net
www.ece11.com
www.elshadayae.com
app.enfact.lu
www.epias.dk
demo.errajaryan.in
errasoft.com
espiexpress.com
www.exhibit.site
ezurl.it
www.festivalsenicetakgrafis.id
widget.footprynt.io
freshminds.cz
funcla.org
blurring.gapmoe.com
www.gijernet.no
hackkosice.com
viewertest.hauslifenetwork.com
app.impactwaves.in
inovaburgers.com.br
valiant.jarvisly.com
business.joinbreakthru.com
karthikkotha.in
keioboys.com
www.kintsugi.vc
preprod-happiness.knolskape.com
invite.ktbizmeet.com
www.lauraandaaron.ca
lemo.is
www.lightvessel.org
logiccrafttechnologies.com
lootpang.life
louiserought.com
mannkey.com
masnisuti.hu
www.matehu.com
www.mcgoeyderm.org
atlastaxi.megataxi.com
mftkit.com
miataspace.com
www.miataspace.com
mwanless.dev
naverss.com
nsacontabilidade.com.br
app.ondisciple.com
onscha.art
ou-ojousamaclub.com
paolobassini.it
pmwani.pdowifi.in
qaapi-cop.peoplehum.org
www.planetpreposterous.com
playbirdie.com
tourlogistics.ratality.com
www.rebirth.ltd
app.rentor.ru
rustavelo.ge
salvage.dev
samarthkendure7.codes
simonpedersen.com
skipthgamcz.com
www.soulmate-journal.com
auth.spicylink.com
www.sysco.kz
www.tapatapaatlanta.com
www.timelinemaker.site
betweenthecrowd.turnout.events
www.dev.admin.urbanlyfe.in
varho.com
vitterso.net
vrdevelopment.net
app.watermansresidences.com
www.yoursteer.com
Other domains in certificate