77/100 SECURITY SCORE

Certificate Information

Subject
CN=app.auctusiq.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 07, 2025
Valid Until
January 05, 2026 47 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B8:9D:1F:0C:0C:05:3C:A1:98:F3:CB:B3:66:14:9A:3D:7E:AF:15:AE:E8:62:12:9E:95:C1:E3:86:59:7B:79:84
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
www.lernexperten.com

Other domains in certificate

www.a2council.vote
www.amadoraviwaraviya.com
founder.arrsquared.com
app.auctusiq.com
beta.admin.print.audi-on.com
launcher.azure-vr.com
bibooli.com
demo.bloqify.com
saver.cedrict.com
crius.ceosconnect.com.br
www.chriscocitychurch.org
skillsmatrix.clearpoint.co.nz
www.getdroptaxi.co.in
monitoromnipos.coachit.com.br
www.techinherit.com.np
staging.mymoji.com.tw
www.contratosremax.com
www.coyremar.es
admin.cradle-app.net
martha.crcasas.com
links.crediapp.net
bleeding-edge.record.manage.cuona.io
daltons.se
defensasimpositivas.com.ar
devlinks.devicetrackerplus.com
www.dharmaresearchlab.com
division.film
campaign.ebanqo.com
www.edwingtrejo.com
link.etiqmediasites.com
uidev-iqodoo.evalue8.it
www.fmmusic.jp
fuelr.tech
www.garantiaimobiliaria.com.br
qa-app.gethovr.com
gnkmr.com
www.hemlockforsocrates.com
houseofthezodiac.com
auth.dev.iticket.com.au
service.jettison.md
www.jugaya.ar
www.junkandgemsvintage.co.uk
book.kataar.in
kigalirides.rw
usbcali-demo.klarway.com
lehelutca19.hu
bestsignalfinder.m2catalyst.com
try.managers.app
assessment.mi-kketa.com
mijncontict.nl
hellcat.mosaicrm.com
mwinisoft.fr
widget.newzip.com
link.ni-wapi.com
app-prod.novaltrade.com
nthvector.com
www.nybnet.se
www.nyxspace.com
test-portal.oni.co.nz
www.oodlesbooks.com
peaceofmindfp.co.uk
petaform.com
www.pintravelerapp.com
bby.piticommerce.com
procesion.org
alpha.prokickballer.com
psiholog-cristina-stanescu.ro
www.raiden-numerics.com
raumcloud.com
resolved.cz
static.rhill.com
www.rocketape.club
rokubungi.jp
onelink-dev.safehousetech.com
www.simcellular.us
www.slideflow.tech
smallindigo.com
nicaragua.solomonschariot.com
www.sortyou.io
functions.sparkboard.com
squidli.com
stamo.io
stayingbrite.edu.au
app.stocksolo.com
www.stringr.pro
www.theartroomsurrey.co.uk
auth2.theshutter.app
app.timecontrol.de
stg.t-port.tmls.jp
count-down.tokyo-scaler.com
topotemps.com
zendesk.translationexchange.com
www.trlcoin.com
www.vidsify.com
auth.vimkit.com
www.wecaredreams.com
wordleparty.net
app.xstrain.com
soccer.yosiassapari.com