77/100 SECURITY SCORE

Certificate Information

Subject
CN=ridhi.tech
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 23, 2026
Valid Until
October 21, 2026 71 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
72:8B:21:59:5A:26:90:B4:D2:35:4C:EA:77:D1:A0:71:67:D9:A7:97:91:A0:6D:39:B5:F8:03:B2:30:D7:3F:01
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
www.kvperformance.nl

Other domains in certificate

411room.cc
ustvarjamdozivetja.ahlinyabrankas.com
aioptimization.site
albertamedicalrental.ca www.albertamedicalrental.ca
alebaja.pl
am2pm.ie
www.amanahtransmandiri.com
www.archangelcomputertechnologies.com
artwithmays.store
mis.aka.atomx.asia
www.attixsoftware.com
bailsouthflorida.com
www.bandeosport.com
hisapoguma.bellphillipproductions.com
beninareposteria.com
betsweatchat.com
www.bikashbaral80.com.np
binguardianllc.com
books-like.com
boredaf-social.com
capoeira-cppa.com
www.castelooliveira.adv.br
centralsuite.app
code-werk.ch
cs106-wasm.projects.danielchao.me
notee.digitalgrowthstudio.in
dev.signature.diwala.io
doclym.com
doldampharmaceutical.com
www.effortlessclean.co
everycomment.site
faalan.com
www.fabbuddy.in
auth.foodcosttools.com
dev3.dashboard.fraiche.io dev4.dashboard.fraiche.io
www.galwaymosque.ie
gfactor.mx
githope.com
cdo.en.globalcarecenter.co.uk
m.gotruckiq.com
order-manager-uat.hotwax.io
smartilighting.howtogambler.net
hrtinvest.buzz www.hrtinvest.buzz
quiz.ilegallearn.com
www.katnabeauty.com
keuangan.khairulfalah.my.id
usbcali-test.klarway.com
www.koderoom.in
www.kuwaitchalet.com
finance.languagespace.com.br
leadyouforward.com
loadlineoperations.com
econtract.lottefinance.vn
www.lotteryno.one
www.magesdusourire.com
moodguaiguai.it
www.mortalityrisk.ai
dev.my-babyshower.com
naturundselbst.de
auth.nhurforge.com
noanaamat.com
forms-dash.staging.nside.io
sefurence.o-r.kr
oforge.net
production.okd-studio.co.il
app.orgora.app www.orgora.app
www.phillipsjonesmediation.com
p-dex-auth.playpmtxg.info
pollamundial.net
portal.presetsagent.com
redpearlenterprises.in
www.refinityx.com
ridhi.tech
rlspringer.com www.rlspringer.com
saardha.com
sfagtory.com
spectreandvox.com www.spectreandvox.com
privacy.templathon.com
tentbox.fit
www.trivium.fun
tystrecords.se
www.ungesbyggservice.se
univolga.com
urbamart.in www.urbamart.in
www.velaspeak.com
votenopartido.com.br www.votenopartido.com.br
wingmann.co
xvision.solutions
www.yashofflicense.co.uk
sidur.zoatlv.co.il
www.zzymob.mom