Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=app.fourpillars.pro
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 24, 2025
Valid Until
February 22, 2026
87 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F0:BA:B7:96:32:68:F0:F6:1F:23:84:1C:9B:84:08:3C:52:3D:83:6A:FF:0C:C6:DD:DF:3D:E4:25:7C:98:60:75
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.intellycorp.com
stag1-saml.app.1on1navi.com
library.suiit.ac.in
www.adosil.com
nwt-dev.adssets.com
gabrielapavani.adv.br
www.aethilus.com
www.ahope.team
alcoholzelftest.alcoholinfo.nl
arian.ee
puffin.bernoullifinance.com
www.bige.dev
www.bizbloc.xyz
app.bravoi.com.br
www.bytecommit.com
www.bytesg.com
admin.cannactrl.com
share.celebri.dog
requester.cgarcia.co
www.usberyl.com.tw
comicpricecheck.com
csfored.org
www.cycue.com
www.deepfried.fish
deeplink.delft.delcom.nl
dipcogroup.com
www.eglsolar.com.br
www.exchange-eg.com
www.explorer.aero
www.fixbvb.com
app.fourpillars.pro
bestellen.gali-greven.de
go-risk.org
www.goalyweb.com
www.godmat.co
home.gustavfredriksson.com
parmazip.hippocrades.com
www.hmins.net
kuretake-inn-nayabashi.b.hotekan.com
js.hotelreservation.expert
www.imag.io
beta.johnnywonder.app
kiabolsa.com.br
www.legitimatelyryan.dev
app.lestoises.ch
configurator.lifesherpapp.com
lojadatastore.com.br
dev.mageicons.com
testpagina.mcdonaldsnederland.app
mickesdackochmek.se
toolkit.mobileappster.co.uk
www.nav.codes
ngoan-streetfood.de
www.web.orderlina.com
sandbox.backoffice.pay2b.net
playground.style
game.prelaunch.com
auth.google.propagadordapalavra.com
www.ptfinder.app
puzzler.pudgypuzzles.com
quiuqui.com.br
www.ratiomonitoring.nl
sodexo.seguimiento.rayoapp.com
readvisually.org
reich-tec.de
docs.staging.retorio.com
slides.rjo.me
www.roflbook.com
rowaservice.com.ar
www.saguji.com
gssp.nudge.staging.sasaki.com
www.sis-schadensmanagement.com
www.sis-trocknung.com
ruznama.smt.sa
dev.coagency.contents.sompo-de-noru.jp
redfield.southvilledeli.com
evoliz-app.speakylink.com
patrimoine.speakylink.com
spectrumbuildtech.com
strona.be
anhtuvadieuthao.tattyhouse.com
chavameo.tattyhouse.com
thecomparison.tech
www.thecountrysideisdumb.com
nlt-centre.timp.io
pedidos.tradepro.com.br
dev.trymeel.com
ugrowsolutions.com.br
unikatum-manufaktur.de
v-i.info
www.venturestudiocollective.com
viestay.com
www.vulpine.virtueandtrade.com
webxtutor.com
westcode.tech
www.wooof.ch
www.writify.io
bookroom.x2mobile.net
study.youngspace.org
www.zaiqacaterer.com
Other domains in certificate