Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=totalwatersolutions-inc.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 05, 2025
Valid Until
March 05, 2026
89 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
08:97:40:64:21:37:5D:D6:BC:15:50:70:C1:96:CC:60:CF:8A:12:EA:79:7C:5C:69:2C:DD:16:6E:22:F5:5F:B5
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.bandhoo.in
dynamic-links.1sk.vn
accelefreight.com
businessdeeplink.advn.app
new.agencycheddar.com
airmechanicalgroupinc.com
alitasycerveza.com
allotmentbook.app
amiconi.cloud
amparosec.com
www.ankconseil.com
anmailuu.com
www.arthurmonteiro.com
reactdev.atlass.app
automotrizcortes.com
axion-lab.com
www.basketballsheriff.co.za
bayanatz.com
bettermun.com
parisfc.deeplinks.bfansports.com
bongato.com
bootbag.co
bytecodecafe.com
chanwinston.com
www.synergysoftware.co.th
collagebattle.com
tickets.comunitaas.com
portal.concordebattery.com
craighorne.co.uk
crispspicestudios.com
dentistceos.com
www.docuzone.com.au
fandomusic.com
fiemo.work
ftpcreative.com
www.glafie.com
grootinfotech.com
hhl-tec.com
apnaonlineclasses.indiandevelopers.org
juegacionismo.com
juthikabarman.com
kiwanolab.io
latraviata.org
cloud.legalsystems.cz
lexaapps.com
linklearn.io
www.livegreen.io
portail.local144.ca
whereverly.ltld.io
militutu.com
mnmstory.com
munaldi.app
mundomofletes.com
niwasaudaipur.com
nycstonecareprofessional.com
evtrailstestapp.ondagoapp.com
optibox.no
oregonwellness.com
jornalosul.osul.com.br
ua.overview.one
beta.pandapos.app
boda.stefania.eugene.peschard.me
static.pix.codes
play24.space
manage.vis.poweradmin.io
www.raamspulse.com
share.regenbogen.de
cleveron.reintam.ee
www.resoluteassetmanagement.gr
portal.schmidttreebanding.ca
www.sellthedips.com
www.serieus.co.uk
shopguinee.com
sikidan.jp
www.smallblueidea.com
app.smsdripp.com
test-kontor.snoservice.no
argentina.solomonschariot.com
dev.tohoku-frontier.sompo-de-noru.jp
feedback.spried.com
jeopardy.streamgamestv.com
dev-merchant-app.superbooking.ai
www.takemesomewherenice.com
tdrenovationparis.fr
tgtfix.com
therentfriend.nl
titovich.me
tntweb.dev
toggletooth.com
totalwatersolutions-inc.com
trkz.group
congcontrol.unrebeen.com
vectolab.ai
blue.fb.vishwa.xyz
view.wec360.com
mainapp.winner-english.com
hikes.wittebrug.nl
olympics.woodsidemedia.org
pay.your.vet
zigma.app
Other domains in certificate