Open
Cached
·
just now
75/100
SECURITY SCORE
Certificate Information
Subject
CN=links.igcs.org
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 08, 2025
Valid Until
March 08, 2026
88 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
57:BB:ED:1B:F5:A1:FD:74:89:C5:B4:9A:4A:94:37:F1:FA:0D:F5:A5:72:8C:AC:6F:E7:3F:E9:C5:56:AD:58:AC
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.flexfit-cap.de
1milepass.nuclep.1mile.com.br
1there.com
2022.helswingi.fi
www.555labs.com
75rev.com
aana.app
link.aekam.org
www.arcticpipe-weldservice.fi
arusoil.com
asiankatha.com
astraeusclarke.com
ayazbaig.co.uk
business.bizreview.ai
blulify.com
boobybirds.com
calendar-app.de
clintonwalsh.com
retirement-calculator.kleincpa.co.il
staging.craftnote.de
www.curiousoft.io
customhive.jp
davebrighton.art
sistema.dedaloribeirao.com.br
xhd3fs1pw.development-nd.tokyo
devfest.no
devmatthew.net
q2-myreturns.dpd.co.uk
driston.com
dsmx.ca
www.elledna.com
www.emboldentechnologies.com
login.erosmoney.in
ether.ee
fausrguez.com
assets.gener8.tech
uat.geostry.com
www.giovannibrunetti.it
gorillasports.qa
www.guiadelcodigo.com
hofb.app
checkin.hotelsoftware.io
app.hpn.me
links.igcs.org
intoxical.app
inva.lu
chat.jeremyroy.co.za
aemc.youth.app.joshuagibb.website
yasemin.karaman.group
katzen-finder.de
www.kol.ski
plan.dev.laufcampus-training.com
lorval.com.mx
www.maotd.net
menuiserie-chalopin.fr
minutovygrafik.sk
www.mosaiclab.net
v1.msurya.in
a.weva.my.id
noahtaylor.ca
onama.online
webdts.ontariojudicial.ca
auth.staging.oregacha.com
vesting-portal-i6i8o33.philabs.xyz
www.phoword.com
www.radiobuenasondas.online
panel.acc.rallygo.eu
www.ratality.com
share.razzl.com
www.remadis.eu
app.rs2.remotesocial.app
rubk.app
preview.salesdash.online
app.salux.do
www.sarvaria.hu
www.scrumcoin.com
www.seraph-cms.com
app-qa.setu.care
shaunak.work
under-the-shelf.shelbyshipley.dev
track.shipra.io
www.skal.app
classes.skillspace.uk
snowape.app
stage23.ca
app.surfstrengthcoach.com
www.syntheiq.ai
thesimpleclub.tv
www.tischkonfigurieren.de
advisers.untied.io
smoothie.upmedia.dk
hartbeach-orders.waiterpro.com
wandayusuf.xyz
www.webtoappify.com
links.well-made.com
www.wooliston.com
writensip.com
am.xploit.ltd
auth.yuzu-officialstore.com
zombier.no
Other domains in certificate