Open
Cached
·
just now
74/100
SECURITY SCORE
Certificate Information
Subject
CN=status.prizm.site
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 05, 2025
Valid Until
December 04, 2025
7 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E7:BA:C5:A3:FE:6C:12:3D:FB:89:BA:ED:3E:63:1E:78:24:37:E5:E0:7C:9D:04:BA:21:0E:8C:F6:08:BB:7F:0A
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.lab.submary.com
addium.io
dev.links.aestheticsmap.com
www.aitiate.com
www.akstudioz.com
finance-log.andrewsk.com
anorahble.com
astrodiseno.com
crm.dev.beeoclock.com
benzenker.me
bernavemutlu.com
www.bertmark.se
blackstarheroes.com
www.buildonvolkswagen.com
bumingcuan.xyz
cfpsim.com
cfpsimulator.com
www.coinsmebol.com
creativemindsthinkalike.org
recrutement.daamtu.com
www.denicucina.com
digiglowtech.in
ditchyourcards.com
dltfred.com
admin.domality.com
drmrapp.com
www.east-calgary.com
edtxts.com
videdit.esterinity.com
dev.fleettap.com
app.flikko.com
www.gohomely.com
hername.app
www.hoftsoft.com
hotappsnearby.com
hrvendurance.com
infohk.net
app.investcomposer.com
code.iplugn.com
www.itagindia.com
italianwineeducator.com
ivrphones.in
jarvisqr.xyz
books.joecks.dev
juliaandtom.us
crm.justlorry.com
www.kesscode.com
vc.kingiftcard.com
laboratorioleac.com
dev.lms.leaderland.academy
lilpilchuckcreek.org
mahimarao.com
maxolsl.com
showcase-en.mazeout.dk
www.md2site.com
medicalconverters.net
medrock.ai
www.michaelreza.com
midnightsolutions.in
migsvapps.com
mikkohaapanen.com
mobl-rash.shop
mutualguadalupana.org
nomedsgn.com
www.nowcare4u.com
auth.o-key.ai
www.odinn.app
orionvisuals.in
p23systems.net
apiexplorer.pan.dev
patronscan.uk
pokercave.no
polako.app
status.prizm.site
projection-lab.com
neta-chou.quart.red
jimu.remodela.jp
rizzy.ai
app.salsklogist.ru
sampann.net
scdc.app
play.scoorly.se
merchant.scriptbox.ca
setonhillathleticscamps.com
www.staging.sharekey.com
www.silviamatesicluxury.com
speedstudentxerox.in
nibiru.swapfast.app
syangs.fyi
team-poker.app
tennico.app
tokisbackyard.com
nocturnal.tournament.gg
www.uww-th.com
vetspire.com
www.whendidtylerlastshithimself.com
auth.wokwi.com
wordleer.com
rc1.1-mockup.zerothreat.dev
www.zivocs.com
Other domains in certificate