Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=forget-me-not-animations.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 05, 2025
Valid Until
March 05, 2026
87 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
08:44:B9:04:18:CF:42:54:2B:FC:79:53:F5:50:01:3C:3B:A0:43:87:82:46:06:DE:1D:51:53:3B:D1:01:4E:2D
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.helm27.com
www.aalself-assessments.com
sajaincollege.ac.in
alysiris.com
www.alysiris.com
app1881.no
www.ar-remote-assistance.com
sign.arberk.com
auth.arrival.space
badireh.com
binan.autos
black-hannah.website
calculadora.marketing
www.calle3pedidos.com
cart-bit.com
cdsmobile.com.br
cloudhector.com
1es.co.th
www.cucorea.nu
dashujiu.autos
www.dashujiu.autos
deptolascondes.cl
react-native.dev-master.ninja
dmnsh.in
notaret.easyapp.co
checkin.northlineschool.edu.kh
www.fast247courier.com
forget-me-not-animations.com
gemcollector.xyz
bookings.glowlineai.com
grahampyett.ca
habiprime.com
halalbarcodes.com
www.halalbarcodes.com
henriquealvesadvocacia.com.br
hiloshilazas.com
hotleadpartners.com
www.hyventechjo.com
i-buy.fi
indiic.com
instrutoresja.com.br
integritymobiletire.com
itqanpro.com
iyikoca.com
jegy-atlag.hu
kabbushfamily.com
admin.kashf247.com
user.khamvong.com
www.laconfreriedesdsi.fr
app.linkshot.io
www.lokali.vn
loopiax.com
matanber.com
metrontech.com.br
mez-wms.mezapps.com
www.mindanvil.com
www.myhomepainter.in
www.myitfriends.com
mdstools.netdreams-iberica.es
www.nvglobalexports.com
www.platformstudio.is
qyftech.buzz
www.qyftech.buzz
drshashidhar.qzz.io
www.rattancricketacademy.com
recreionet.com.br
reviewsfeedback.com
www.weeklybudget.rob-taylor.com
admin.sdvstudios.com
www.simpleclub.in
app.smartsitechat.com
influencer.sociovia.com
www.speakingathome.it
eurofil-indemnisation.speakylink.com
spotlightads.co
sprintified.com
www.sprintified.com
ping.sskplay.com
www.stayhotel.com.br
www.stayleafhotel.com
demos.sunbear.ltd
www.superplusai.com
checklist.taggrs.cloud
techlife-inc.jp
www.techlife-inc.jp
thinkingincode.org
www.tilejack.app
tofalando.com.br
tradecall.io
www.trishulinfotech.com
trizlink.com
www.vargas.com.br
redirect.vigorwitaminy.pl
viralvisible.com
chennai.vishnutaxi.com
visionarygames.net
kobonz.work.gd
wuningtan.buzz
www.wuningtan.buzz
yakyuglossary.site
Other domains in certificate