Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=demomsg.ipcom.ai
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 26, 2025
Valid Until
February 24, 2026
88 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
DD:09:68:87:20:C2:33:68:84:FD:27:88:0F:22:61:30:CD:71:CD:99:01:FF:39:76:49:B2:B8:FD:DE:1B:E7:4D
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.bybroenbolig.no
acodingtutor.com
agape4acc.com
www.aksharlon.com
tremulo.alexconstantino.com
afib.algora.io
app.allresults.live
link.altaqwa.us
share.appdrills.com
www.apprays.io
arewethereyet.app
www.atheethi.com
www.avictimof.com
globalconnect.beammissions.org
beauty-angels78.fr
www.betamaker.co
app.dev.boldrancher.com
www.camilacarnauba.com.br
www.campingberlin.co
centralroofing.co
www.cjdesignsindia.com
colectivoalquimia.cl
this.is.not.a.very.convincing.link
coolthrifts.com
www.crudetech.se
dansplab.com
route.doorstep.at
www.driveb.com.br
app.drsem.app
elacies.com
www.feedbackrig.com
fewnessofthesaved.com
www.forspec.co.jp
dvcon-india.framez.sg
fspai.de
links.gameram.com
www.haleyrenner.com
v2.html5.run
www.ictechnology.nl
jyhuang.idv.tw
ipusnas.iksandi.com
imind.live
indico.mx
www.ingenilab.com
demomsg.ipcom.ai
j-vogt.com
www.jchuay.com
dashboard.jlrspace.com
app.jots.ai
www.juanmanuelcb.com
judithpiano.co.uk
www.kajakiwrytlu.pl
charity.kampaignlive.com
karassew.at
app.keneyafura.ml
www.kkqueen.com
qkdwn.kro.kr
www.lithiumcomputers.com
mdm.site
myfintracker.com
www.natxsocial.com
rodoslov.nukleus.ba
www.oddcatalog.com
call.onscreeninc.com
degania.oz-tms.com
assetmix.partnerhub.co.za
polipastosyaccesorios.com
admin.poultrybaba.com
projectakui.com
www.promochilemat.cl
qgamescorp.com
mariamaria.qrq.app
safarigemini.com
www.sbiltresse.be
sheboygandermatology.org
shuistyle.co.uk
spartnet.lt
www.speisekammer.app
sumo.squirreltown.club
stellarsyndicate.net
www.stychome.com
www.swingleft.nyc
www.takeastride.health
www.tasidou.com
thesoundofai.com
thevivatribe.com
theysmilefoundation.org
tiagowu.com
www.tomas-lesniak.de
betland.tonylandschoot.fr
www.vatterottfoundation.org
verklabs.io
www.vibratory.org
videou.app
wuerfelmosaik.ch
www.wyrdreport.com
wyrdreport.com
www.yoits.me
www.zhouyuyun.com
testnet-v2.zkmakers.com
Other domains in certificate