77/100 SECURITY SCORE

Certificate Information

Subject
CN=krishiindianhumanhair.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 30, 2025
Valid Until
December 30, 2025 37 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E1:46:86:C7:99:EB:04:33:B9:74:4A:CB:F4:EF:58:59:44:77:05:25:67:59:A8:78:B7:6B:00:4F:55:26:B2:EC
Alternative Names

Security Configuration

TLS Protocols
TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
www.henryraygan.com

Other domains in certificate

staging-gdl.1mac.com
62-ventures.com
aasthaengineers.com
www.act.ps
assets.acutec.co.uk
adeveloper.com.br
www1.aelng.com
www.aeroglobe.pk
www.aesteroids.com
agoravision.com
create.airform.app
allenjoseph.dev
www.almanack.co
dev-admin.awaio.com
pnp-dev.bitnullcorp.com
blue-bruise.com
www.brandeets.com
mobile.brize.co
canigetfibre.co.za
campaign.s-drops.capcom.com
www.capps.team
careershredder.com
cdmediase.pt
chauyan.dev
neoai.co.in
www.colinhendrickson.com
o.collageofficial.com
video-editor.testv3.contentfabric.io
control.corewos.com
www.degenfrens.io
devfestlima.com
devjob.app
cardshare.dexx.au
www.dgsa.ie
dharmaraj.dev
doppelpunkt.io
econotify.ca
test.edukamu.fi
elzohary-dental-clinics.com
panel.emlakfokus.com
emmaysa.com
www.eventseekout.com
www.flownext.hu
dev.fndrsng.com
www.fukurobo.com
dev.app.futster.io
chappium.gamessc.com
pushservices.gazzetta.it
tomyphone.geromino-apps.com
inspiration.goa.io
new.gonzalogarcia.eu
site-demo1.hareeqi.com
heybattle.tech
app.homi.school
dctqagcpuk.staging.huma.com
www.huyenkhongtamnguyen.com
id-entidad.com
www.infinitisherbrooke.com
michael-kristina.invito.link
andry-okky.itsyourdayofficial.com
link.jemyzdrowo.eu
www.kkgv.net
krishiindianhumanhair.com
stg-tsuruha-festa.l-ma.co.jp
lifttrackpro.com
livingpokedex.com
www.logicm.com
lpa-studio.com www.lpa-studio.com
authentication.schema.magement.com
mbetemalu.com
sciencespo-demo.my-memory.io
www.mykadun.my
checkout.mymoons.pe
mytaskmanager.co.uk
naime.co.uk
netstuts.com
welcome.nextcoders.pro
nfortner55.com
nightmorning.com
ofu.obsidianpma.org
projetera.ca
psicologaspinetti.it
queueme.io
www.reevr.eu
www.remcoeijsackers.com
romshuffler.com
www.schick-ebert.de
admin.sellvoy.com
sgmakila.com
alpeshabitat.speakylink.com
www.stembionix.com
travis.takeaction.co
www.taraxacum.ca
unnurella.jp
www.useful-tools.info
labels.waproduction.com
app.xfol.io
yauzifu.com