Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=ataa-iq.me
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 31, 2026
Valid Until
October 30, 2026 54 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
13:9B:D3:2B:89:42:95:DA:50:FE:2A:A3:02:D7:3A:A0:C2:9A:79:04:F5:F4:88:7D:9D:48:20:C3:22:97:9C:62
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
www.figgylab.com

Other domains in certificate

www.1mb.cl
www.4home-pros.com
abedin.shop www.abedin.shop
academiadelaexpresion.com www.academiadelaexpresion.com
akytara.com
arquiteturaocupacional.com.br
ataa-iq.me
dicekart.babogames.net
binkfama.com www.binkfama.com
tours.blueinktitleagency.com
auth.bodhicariya.shop
bromigos.org
certo.team www.certo.team
www.continentsun.com
evora-app.coremaster.dev
rasel.dev.bd
harundugunsalonu.dugunpaneli.com moonlightdugunsarayi.dugunpaneli.com
www.elbl.cz
www.engidicol.com
app.evenshifts.com evenshifts.com
nitrosurge.excfy.com tapwise.excfy.com
gt.fayper.com.br
fmart.cloud www.fmart.cloud
www.focusroom.online
www.foxglovedigital.co.uk
genesisshopp.shop
www.ghsinvest.shop
finance.hemafrica.com
www.hilliger.fr
appnote.i-kcal.com
www.indefinitelylabs.com
isperfumes.com
itbsv.com
jorato.com
joshdevaneyphotography.com www.joshdevaneyphotography.com
kansayu.kr
willpact.konashevych.com
daddydonate.kro.kr
dadurday.lighthearts.co
macrostudio.com.br
maisonezer.com
maticue.app
ditdhew.mdvk.my.id
mevariable.com
mlc.mitube.live
loja.mobilus.com.br
equity.moneypluspro.com.br
nearmintmisty.com www.nearmintmisty.com
okays.in
www.onic.tech
peptideauthority.health
www.pervia-spitex.ch
www.pescamaniacos.com.ar
pioneergiant.com
pixelapp.space
pocketforgestudios.com www.pocketforgestudios.com
qursus.qelvin.be
radiocrestin.net
refugiolosalgarrobos.ar
registre-public.com
registrepublic.com
feetracker.repka.dev
reestructuracion.rflex.work
calculator.riversunsolutions.com
www.rockki.kr
shopspherehq.com
sispreco.com.br
app.sonixteknoloji.com.tr
sppclimate.org
stashiqo.app
sumivoapp.com
ui.surrealroad.com
bodapinedasorto.swanmoments.lat bodarecinosleiva.swanmoments.lat
www.swissappstudio.ch
gonullu.tedxsur.com.tr
vms.og.theklabs.com
www.unigrand.autos
unity-forward.com
pai-utopai-china.utopaistudios.com
varuncodes.tech
vncompliance.com
www.vosolve.mom
www.wapi7.com
weblativestudio.com
thesis.yavash.ch
www.zadetech.com zadetech.com