Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=k-shift.pl
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 22, 2026
Valid Until
October 20, 2026
77 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
3B:48:85:1C:13:7D:28:34:E8:73:31:C8:8C:26:7E:9B:70:92:EB:B3:4F:2C:FA:73:3E:4A:E4:1A:EB:63:29:84
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.fivetry.com
certification.365medical.or.jp
7bnat.com
www.a2a.law
aarclub.com
adamseddik.fr
aethelgard-game.de
alege-constient.ro
alexmichelson.com
www.aquarythu.com
maps.auckland.ac.nz
public.awalaliamsyah.my.id
bennettorchardtrail.com
www.app.bildin.com.pe
brechazbarber.com.mx
brilhart.com
calveset.com
aramarkbelux.cateringportal.io
chanakyamahaveera.com
blog.charitarth.dev
chriscarey.tech
www.chriscarey.tech
clearway.live
cockroachparishad.in
code-easel.com
www.code-easel.com
cogni-dev-painel.cogniapp.com
www.creativetechstudio.dev
creativoatwork.com
dafe.ie
dartsbooth.com
admin-portal.staging.pa-pgrm.delcom.nl
dlnr.dev
starymlyn.emenu.pl
espremaseulimao.com.br
fayops.com
jarvis.figmentproductions.co.uk
link.sinuem.friuliemergenze.it
test.gemsotec.com
gsaroa.com
cumin-nephrite.harecord-dev.com
origins.helpper.com.br
hezona.com
himmeet.club
www.hongsin11.co.kr
horarios.space
jayohbee.se
jp3dprinters.com.br
k-shift.pl
www.kasheny.com
studio-dev.kiswe.com
kongcaht.online
carboneng.lfv.jp
koshiro.lfv.jp
link.loopmedia.app
luminalabsllc.com
bipartitebook.lx8labs.com
installations.lx8labs.com
malaronda.es
matlockgcbowls.co.uk
school.mektepgo.kz
mistermindabacus.in
molodadyplomatiia.if.ua
mommymakeoverliny.com
morima.co.jp
nidaglass.ma
noamnir.co.il
nummaze.com
nw3studios.co.uk
okrushko.dev
oldgrowthharbor.com
auth.olhodeaguia.com
www.ouyaes.cfd
painkave-global.com
paivainstitutooral.com.br
piqclub.com
politidisconstruction.com
pravsolutions.com
www.prepyourphd.com
ballot-dev.r-stack.jp
racim.dev
www.radioworks.us
shedev.dev
sahyog.sieapinvest.com
admin.smartclip.co.il
verbs.clement.smarzyk.com
songwright.app
www.sousvide-guiden.se
www.sunroapp.com
www.tandzorgmeilegem.be
gestion.tiendabennet.com.ar
ia.tradeflowhf.com.br
www.truenooch.com
flow.vasantjc.com
www.versus.games
friendfinder.videre.us
wheenk.com
william-remodeling.com
mail-aid.xlr-8.ch
zestclean.in
Other domains in certificate