Cached · 6h ago
77/100 SECURITY SCORE

Certificate Information

Subject
CN=naveh.in
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
March 02, 2026
Valid Until
May 31, 2026 35 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
8E:43:7D:A3:85:AC:05:8E:B7:CC:C7:20:E5:B5:93:8D:C7:59:A7:EC:73:38:94:C6:29:27:F4:98:61:4C:3B:7A
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
www.banon.app

Other domains in certificate

app.aboinfo.tech
aio-studio.kr
alpsadmin.ch
app.asiguraricontactless.ro
astrosajwal.com
awarenesstool.it
www.bazha.ru
bluckfamilyhistory.belgray.ca
dev-mobile.bestwallet.com
brightsol.co.ke
www.casahorus.com.ar
www.celdapp.xyz
link.cespq.gob.mx
ads.chagistudio.com
cheftogo.com.br
claudialassoescritora.com
app.crmvoro.com
www.danubiuscorabia.ro
delightgames.com
www.digitalismo.cl
auth.google.elascomdaniela.com.br
evanfisher.info
cash.fortedentgroup.com
app.gmelius.com
www.grkn.it
grupospp.com.br
h2rsconsulting.com
hieuratyeubelinh.id.vn
holds.digital
letsplay.icekode.com
flotas.ignis-projects.com
ignitedbrandz.com
link.ilikelm.com
careers.industrial-ia.com
app-vitalii.invesacapital.com
irod.co.zw
www.jeffreygetzin.com
joensuunlentoasema.fi
laciform.konwae.web.id
www.mahalohq.com
info.makeoffsee.com
www.melodymap.io
app-uat.meufluxo.com
www.mohalientclinic.net
montrear.com
modern-demo.mysterydeck.cz
nakwonchojang.co.kr
naveh.in
pic-greentube.mentor.neccton.com
kekepersonal.nexsuite.com.br
gps.nisbusiness.com
niwipedia.com
noodlestreetlabs.com
worldrecord.odiben.com
me.oneiric.fr
openmidi.com
orbitatrader.com
app.outpaws.co.uk
application.peakdatastories.com
www.penguincity.com
ponafolio.ch
projectserviceravenna.it www.projectserviceravenna.it
hq.promspace.eu
app.pyratime.com
www.quimicee.com
ng-fitness-tracker.ramtinmovahed.com
studio-staging.rebalancetech.com
richardsoncarcamo.com
www.rxgrad.com
www.saletaneczne.com.pl
salonfactory.in
saveytm.com
sbfapps.de
www.screwedbyjoe.com
seoulcharmkids.co.kr
spanish.shacham.name
singinglessonsderby.com
sparkaspiration.com
sponcerglobal.com
szymonpierchala.com
taskeenco.com
teamwano.online
synapse.thecortexdigital.com
thefinalheresy.com
thepylontech.com
karnott.thomasgrivet.fr
dev-acc.tixo.digital
tropos.pt
morpho.trustline.id
ujjalbhaskar.com
st.utchsur.edu.mx
viewmyfolio.com
vinishreddy.com
wrcares.com
www.yongjie.dev
zeetutoring.com
www.zemagrup.com.tr
dev-auth.zeroin.dev