Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=www.manfriiday.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 22, 2025
Valid Until
January 20, 2026
58 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
77:A5:B8:B7:D1:73:39:3A:A9:1F:32:F7:19:43:92:CD:31:90:A0:63:EC:70:4C:53:5C:23:4A:96:2F:C0:BC:64
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.minidot.be
hon-roomplanner-test.3dcloud.io
jacob.alless.io
apalaclinic.com
arcturians.cc
ashfel.com
www.atacan.dev
www.barber.mn
app.batelle.com
benazir.in
www.betsany.com.br
bmaschool.in
capix.com.mx
www.cardanoeagle.com
castroangel.com
chamaneshaitianos.com
test.chirpyplus.com.au
chrishampshire.com
sms.cloud10os.com
vaishnavishrungarpawar.co.in
app.popmeals.co.th
startplatz.codingjungle.de
www.ozsahinler.com.tr
ttmnsoctrang.xbot.com.vn
elite-anarchy.connorcode.com
www.crimedata.com.au
www.cscsguide.com
blog.daphnesdesserts.com
go.dessert-pay.com
devthakar.com
diannereid.co.nz
doccheckai.co.uk
dev.mindiary.drit.ninja
app.easyhoa.com
dev.app.epihelper.com
app.epstopik.net
www.familytoolsapp.com
triage.filmusli.com
app.freelancegps.com
devfest2017.gdgnantes.com
portal.guardianmedtech.com
guinchosbrasil.com.br
harvestingrainwater.ca
helenallop.com
report.hintcatcher.com
horotimes.com
hr-karthik.online
hyfdata.com
community.icares.app
iffts.com
igcshop.com
dashboard.imageriemedicale.fr
infilas.com
jakjarvis.com
jaxfloyd.com
link-tak-tin.jec-digital.com
jivansangini.in
admin.jjimovel.com
jobbstigen.se
cards.joinsquad.co
jthinton.com
dev.app.klikkie.com
lancemock.com
lashandbeauty.gr
archpark.lelander.com
www.manfriiday.com
mapelevations.co.uk
matoitechnology.com
www.mcapn.com
memorigi.com
metroware.org
www.misaelproject.com
complaint.oliversoft.net
orangebloomtherapy.com
ordertray.com
pboconcierge.com
phenom-project.com
piskunow.com
pizzariapassione.com
prematch.gg
pull-repo.com
www.qasral-kenan.com
morquio.qlinics.com
www.quranera.com
rentalmotortulungagung.com
sim.aerogroup.sch.id
semkina.ru
app.smarthomeopath.org
smashball.boats
noc-trigroup.telkomiot.com
auth.tifo.eu
www.trueking.hk
ai.tun.asia
admin.vdt.app
apidocs.webfiny.com
v2.wellthlab.jp
whatchado.at
ynoor.me
zaiendecor.com
zeugnis.codes
Other domains in certificate