77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.cvitpassist.ca
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 15, 2026
Valid Until
December 14, 2026 89 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B3:30:7C:04:F2:EB:E1:4E:02:52:61:76:AF:45:49:61:F9:4E:EA:5F:4B:80:3B:9B:04:71:9C:94:34:EA:58:E6
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
www.codematesdev.in

Other domains in certificate

www.10zebra.app
bld-kongfigurator.3dcloud.io
www.757kingsley.com
www.aitruthx.com
arabi.in
smartlabels.armilis.com
athreya.codes
automate.app.br
bbpproperties.mom
www.bigyna.com
www.britishtowndigitalacademy.com
buerweg.com
www.tur.bussring.no
cape.fire.capefiregrill.com
www.careerclubs.co.za
qnipsgastro.cateringportal.io
catsulogistics.shop www.catsulogistics.shop
changeuu.xyz
www.chessmatesclub.com
testapk.clipboux.online
xr-prod-app.closedcaptioncreator.com
codnamfede.com.ar
coopcompta.com
link.crime-cases.app
crucible.wine
lawmee.cubos.dev
www.cvitpassist.ca
saimarshad.dexvoa.site
www.dogmeet.at
register.doublerpb.com
e-dot.se
www.eatablestories.com
www.electroethics.com
ezzertech.com
floxtor.app
www.frankfauci.com
generation-eiffel-bm.fr
lms-sandbox.getfinstack.in
www.getswam.com
www.ghosh.xyz
auth.h8xesports.xyz
event.hackthemountain.ca
horizonteverdeinmobiliaria.com.co
www.ifotec-peru.com
talk-theme.ik-neet.com
scout.ingoglia.com
javierfriascoaching.com
www.junges-theater-oberrieden.ch
www.keramikliebe-lingen.de
kilage.de
sisvisacoxim.krtechs.dev
app.learned.io
lumeafragrance.in
trip.maiyun.eu
medinalake.live www.medinalake.live
accounts.meetapro.com
deeplink.megaafiliado.com
meridian-gls.com
mileoni.com
www.mottet.me
mskd.jp
www.mybrighthaus.com
base.nextstage.asia
nmmueblesamedida.com.ar
app.obacana.com.br
orime-ai.com
ourstoryforyou.com
pfict.co.za
pinkpositivity.com
worthwhile.poclab.com
pridemap.eu
dev-equinor.prompt-pitang.com
consultorias.everestgestao.qitech.digital
www.qrclass.co
quldo.hu
auth.richmond-holidays.com
riderightapp.com
www.saveragraphics.com
auth.scoralia.ca
serialsoftware.hu
sernorcaixilharias.com
www.smms.ac
app.storebuddy.io
synaptechinn.com
admin.tetherkeep.com
thechessrat.com
openbible.thefallingscompany.com
www.tlaneyconstruction.com
tofu-awards.es
www.trishikharosalesservices.co.in
www.twentynine11.com
umrechner.io
vanisupriya.com
vitaemetrics.com
wayfaudio.com
auth.wcvote.com
zamieszkajwkamperze.pl