Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=www.buy-like.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 20, 2025
Valid Until
December 19, 2025
34 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
9F:FA:2A:0C:11:CF:A2:9C:A4:54:AE:23:00:8D:A2:0E:57:A6:4B:C8:BA:E1:7D:3A:8D:13:08:04:3E:46:FF:FF
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.barrysmaleltd.com
www.910martel.com
cdn.aarnuk.com
contingencia.agucare.cl
aiangels.art
aktis-consulting.com
alegriamaxima.com
www.amalexpress.net.au
ang.services
www.apgar.me
appscatolicas.com
www.artof.science
casaplanta.asap2go.com
ashmall.com
asoleads.com
listings.aulla.top
www.beerfestbuzz.com
www.bigtimegraphicss.com
bitcoincodex.org
www.bluejay.studio
bosleyneighbourhood.com
www.boxie.com.br
bunkajisso.com
link.burncal.fit
www.buy-like.com
app.citylock.io
cjpodcastpro.com
www.club-vmx.com
motto.co.il
colectspot.com
me.columbia911.com
atform.goautomate.com.my
www.commitquality.com
componentcollection.com
compuexpertosicod.com
csokaapartman.hu
franck.dujoux.fr
meet.elli.eco
www.epic.guitars
micrositetest.fanduelsportsnetwork.com
www.forgottenfaces.de
testing.friendlyforce.live
firevault.gacha.net
m.goodwin.ua
canvas.grow-force.com
immigrantax.org
cloud.jotnot.com
juliansweatt.com
vacations.k-9apps.com
kismetapp.co
kvetiny-mirka.cz
londonukrainiancentre.ca
lorenzodelfini.it
launch.magicmounta.in
mechantloup.co
vuecoach.michaelpeng.me
devapp.minkobmand.dk
fb.mkbl.dk
motelkazary.com.br
mrenterprise.world
www.my-camino.app
www.hml.adm.navigatetrip.com
dynamics.nevertheless.space
stagingapp.nextblock.sg
test.nochip.se
packuniversity.com.br
robbenisland.plankton.mobi
pmsmmotor.tr
www.pohjoisenviima.fi
certification.popneuro.com
www.prahitaengineers.com
priceofglory.shop
querciaebambu.it
www.qzz.me
raynor.tech
www.realvibe.dev
www.rivervalleyirregulars.com
saveforfree.com
www.shivsys.in
www.devtest.shopix.me
www.sml.pw
media.strans.ua
link.sunbeast.dev.sunbit.in
apollonea.tadafaba.eu
www.thelemonadetraining.com
www.therefour.io
verification-browser-sdk.test.trustdock.io
trzanko.art
umanity.app
www.uniteddatalabs.com
wetlandplants.geology.utah.gov
lp2.vilove.de
www.wallofcomps.com
www.shop.wearelocals.co.uk
wedentplus.com
westbranchdpc.com
www.wineryxplorer.com
world-surf.com
www.yeappz.com
zanmy.com
Other domains in certificate