Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=chooslie.codecraft.no
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 12, 2026
Valid Until
December 11, 2026
88 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
54:07:DB:FC:D0:6E:E8:B5:91:B7:4B:41:22:ED:CE:69:AB:4F:8D:6D:37:9F:E6:1F:67:DD:E6:05:FF:17:A9:48
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.oliceit.com
www.aileendietrich.nl
www.ammouris-el-ab.se
abi.amy.app
www.appfastagenda.com.br
www.asconta.org
app.athloryx.com
auth.wgu-planner.azeng.app
balanceo.co
auth.bamb-ry.com
benl.ai
pay.bimmerplug.com
staging.civa.app
chooslie.codecraft.no
codigodavinci.com.br
poc.comunesg.it
confusionmeter.xyz
covertek.fi
www.craftbyte.net
calculator.dascoaching.in
nuptyme.digitx.co.za
icards.ecampus.co.in
www.emojidoku.app
www.factorpi.com.ar
www.familybank.live
faradai.co
contitech.fgi-digitalsolutions.de
pay.fiata.org
www.firstfix.co.za
chatbot.gamewithservice.jp
cancel.getmeridia.com
guiluo.cfd
www.hoardle.app
www.iedabianchini.com.br
www.inarco.com.pl
iolcus.invessed.app
app.karate-notes.com
kasirmoro.com
katcci.com
plays.stge.keap.app
onboarding.klouser.app
otamas.kreisen.org
lamchudata.com
www.leonardorocha.ai
letsplaywordinarium.com
lexicl.net
qr.locad.net
marina-1.com
app.meetrecall.app
mergeconflict.in
metallect.app
www.misebox.app
app.mitemma.de
mobo.si
mokoko.co.kr
monthtomonth.rentals
auth.nativescript.org
netfoursolutions.com
netvoice.co
www.netvoice.co
nokeepstudio.com
app.instituciones.notesmapweb.com
nucleonicinsight.com
www.nucleonicinsight.com
www.omfg.lol
hub.opencurriculum.org
composite.panicked.xyz
nicolas.pasquier.xyz
11520808.peerly.app
office.dev.platia.app
www.port133.in
pv-bess-assessor.com
qreed.com
quickhomecares.in
refqa.app
restaurantecostasur.com
auth.reversal.id
artforge-docs.rundquist.tech
sabrinapassarella.com
sadoctober.com
salutepty.com
portal.sangha.one
seanderham.com
steeliax.com
app-staging.streamlinehq.com
teamcanvas.app
demo.technaur.co.za
www.thebarestapp.com
me.thefranconiancoder.studio
admindev.ticksy.app
old.trackletic.app
translamore.com
thpt.tretrau.vn
zielsport.turnosweb.app
server.u0000.qzz.io
umiral.com.uy
staging-digimanie-admin.un-42.com
staging-shw-admin.un-42.com
staging-tryhard-admin.un-42.com
zsbiotech.org
Other domains in certificate