Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=www.authentication-philippines.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 27, 2025
Valid Until
February 25, 2026
64 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
0A:C3:8E:D2:75:6B:19:4F:A0:B7:62:6D:AF:EB:4A:2A:E9:79:17:C0:CE:6F:BF:9C:3C:E9:58:08:B7:2D:44:44
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.paradisemalahide.com
320.dog
ai-shala.com
www.authentication-philippines.com
www.azashi.dev
www.app.buerger.io
carmya.com
charitonmutual.com
brussels.complementagestion.com
app.conferencecaptioning.com
coreyalexandersmith.com
cruzcourse.com
www.danielledev.co
davie.com
disko-babel.de
www.drycleanerlocator.com
easytip.us
www.fight.reviews
www.finnishairports.fi
fysiotherapie-beetz.nl
auth.good-eats.xyz
govea.tech
grenzmuseum-schirnding.de
1clickauth.gupshup.io
docs.helgo.io
hellofolx.com
hisayasu-juki.jp
blog.i-ailab.com
old.iidahakala.com
chat.involv.app
p.iscr.com.au
jasonkomoda.com
jbgsoftwaresolutionsgroup.com
www.jbgsoftwaresolutionsgroup.com
www.kangarooedu.net
www.kashikina.com
aff.english.kidsup.net
www.kihon.fr
www.kpmgbusinessplanning.com
www.lacasadelchefrancagua.cl
launchctrl.co.za
loveingame.fr
grillus.lupi.delivery
www.marekvoe.cz
wuensche.maxweiss.rocks
memegame.cards
future-cities.mettle.studio
link.morelli.uk
www.newco.cz
nextbetz.ai
oneclick-apps.com
onlinetagebuch.de
marilou.opatry.net
app.panavizo.com
pascalnjue.com
www.paulrichter.org
beta.predigle.com
www.primaxx.at
genealogy.pringles.net
autoauction.staging.progi.com
proto.software
vito.pueribauer.at
www.purplelabs.dev
rb-tech.ch
tsat-carga-qa.rgn.io
ct1-comm.specc-dev.riddler.co.jp
strategicplan.salem.edu
se-calculator.com
link.secureserviceform.com
dashboard-dev.self-diet.it
sibrafe.com.br
reset.siftlink.com
www.singnano.com
www.smajlik.info
smartcontx.com
guardiansrace.sqwadhq.com
pioleagueboisepredictadmin.sqwadhq.com
pioleagueglacierrangepredictadmin.sqwadhq.com
pioleaguegreatfallspredict.sqwadhq.com
pioleagueidahofallspredict.sqwadhq.com
pioleagueidahofallspredictadmin.sqwadhq.com
pioleaguemissoulapredict.sqwadhq.com
pioleaguemissoulapredictadmin.sqwadhq.com
starvehiclefilm.com
unencumbered.tallis.dev
www.tapp.world
theoryoflife.com
www.tianacuisine.com
tnguyen.dev
travisbowen.dev
cf.api.trellisconnect.com
auth-prev.tu-med-videos.jp
velociraptor.run
www.vevisolutions.com
www.vrb.me
www.wacharaconcrete.com
weavinn.com.br
www.wiggs.dev
women-kegel.com
wspito.com
Other domains in certificate