Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=oscarsitompul.my.id
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 24, 2025
Valid Until
February 22, 2026
85 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F2:F5:67:56:88:C1:3C:20:EE:26:B0:FD:C9:A8:C6:3A:B8:11:7C:7B:F8:0B:C7:D9:E6:15:0D:E0:54:DF:0C:18
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.medicalbillcalculator.com
1doma.in
www.catalogo.adamafashion.com.br
demo.mint.amalfianalytics.com
transmark.anekonnect.io
chinaimports.arapua.co
artejanis.org
arthousebhadohi.com
www.atah.dk
back2b.cz
dev-in.beerealit.com
beflux.jp
ssc.cherify.org
dev.closethedoor.com
cp.com.pk
dl.gap.com.tr
estudiolivera.com.uy
contandocomigo.org
cuadd.org
dbps.info
def24.pl
web.diretrixapp.com.br
beneficiario.doctorclin.com.br
elsolutionsgh.com
elylucas.net
evangels.ca
evfinancehub.co.uk
www.evodentia.com
docs.dev.evofit.org
farmball.io
www.fofcw.org
gasmate.mx
www.gracetory.co.jp
kakidashi.hauer.jp
www.heronislandoysters.com
dev-bswarm.hostabee.com
lionsden.impactwrap.com
ir0nic.com
www.khomiki.com
www.kickasscoding.com
kirubakaran.me
www.lab-dev.net
learnixit.com
www.megami.moe
algata.mirano.fr
moxieman.fi
www.moxieman.fi
oscarsitompul.my.id
project.mymondo.yoga
timeline.net.in
nmcardle.com
nymph.quest
www.onlinejudge.net
www.oyfora.io
palavrinhas.com
admin.percap.se
pigmentaarbetsplats.se
pro.piinkme.fr
playdezoito.online
playoneupgames.com
www.polymorph.hk
powdermotionlabs.com
www.powdermotionlabs.com
psvbadmintonbrugge.com
www.recipebrigade.com
pos.qa3.restoplus.com
www.rivervalley.company
roymelzer.nl
www.shenkconsulting.com
sismorehealthcare.in
workspace-comparative.soltecsa.com
www.babedoo.starlard.dev
elearning.stepinsight.com.au
www.studentnote.xyz
drinks.swindrinks.com
www.tabletop-friends.com
taisy.tech
taxiridepondy.in
www.taxiridepondy.in
techlabbrasil.com.br
hills4me-dev.thepetdoor.asia
share.tif.ly
uri.ton.surf
portal.tonalida.com.br
www.tourdefrancedesseewinkels.at
admin.vv.toysfilms-interactive.com
info.trader.inc
transposelearning.com
zk.admin.tropykus.com
unhurried.live
www.vectrum.io
inbrief.vedicavinya.in
vkamula.com
myrecmovie.wahyudiaditya.com
www.wasalakecabin.ca
www.welcome.fm
line.yacht-hakobuyo.com
yanek-k.com
www.youthrushadmin.org
staging.zeugnis.codes
Other domains in certificate