Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=loveisrael.foundation
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 09, 2025
Valid Until
February 07, 2026
83 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
40:A6:AD:BB:0E:13:72:CF:B2:2F:D6:84:CE:A4:7C:E4:F4:0A:F0:9D:5A:36:71:E6:05:18:8D:C6:BF:5A:D9:FD
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.balamurugan.dev
www.100xaura.com
a2p4me.com
contact.acesphereai.org
all-city.co
introspee.arishahmad.in
demo.artpix.pro
pennings.assettwin.nl
astronath.in
www.avro-original.com
www.badrabba.com
bafazon.com
bantis.io
app.basishealth.io
link.bevoy.life
bhumiandfang.com
blacnd.com
www.bonogame.com
slides.breuco.de
admin.brmodels.love
invite-test.careease.kr
completionistgame.com
file.convert.guide
penagrande.redpiso.cotecnia.es
crowpay.app
cuidadoresmg.com
www.cuidadoresmg.com
davidrigueira.dev
do-asplus.pro
www.feelcec.com
finlayer.io
staging.picsoon.fotobots.com
glassmendoza.com
pay.sandbox.datalex.gr4vy.app
hirotomiyaji.com
referrals.holonsolutions.com
www.hvbode.com
www.icanvassolutions.com
tonghoptailieu8.id.vn
tqt202416617.id.vn
imdatbuton.com
scoutsync-dev.interplayapps.iterate.ai
joinclyne.com
xrd.keeponrock.in
www.knockers.codes
www.koalaneeds.com
www.ksampanis.com
beta.langchaindart.dev
monad-homework.lazarmitic.dev
limitlabsai.com
www.anandxdev.linkpc.net
localymx.com
loveisrael.foundation
maisseguranca.online
me-overseas.com
nicole.meng.berlin
mergeit.dk
www.miguelmo.dev
mywellbe.ing
namapu.com
nesimoon.com
kanchipuram.onewaytaxiwala.com
www.pikitod.com
pueblosdeensueno.com
www.queensgambitdeclined.com
rayyanallaf.com
www.rccaterers.com
web-conset-dev.redfox.dev
vouchers.reservehospo.com
reshikatraveljember.com
dubbo.rickybrowne.com
msg.schoolps.com
sewingwithcathy.com
www.shadowbet.com.au
www.siniteq.com
finanzas.solensolar.com
sportsdigitale.com
www.starthaven.com
supremeventures.in
tabletopstar.com
theclassyflight.com
theessenceworld.com
thelux.mx
tmcarrler.online
tmcrriersc.online
tmcrriersp.online
auth.tomebay.com
www.undercoverplug.com
uppercasegaming.com
urvanpujacommittee.com
www.vanska.dev
staging.website-admin.vclass.ac
veterinarialaherradura.site
finance.victorwads.com.br
www.vihangmehta.com
vitechsc.com
www.vyskatech.com
wfhsxf.com
ylonenlaw.fi
zapmailbox.com
Other domains in certificate