Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=app.mba-minori.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 08, 2026
Valid Until
November 06, 2026
74 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F4:57:4B:6A:1F:8B:F2:87:75:C9:72:F5:69:E7:CB:63:FB:FC:18:96:9C:C9:5C:D9:10:33:58:C1:F7:A7:68:FF
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.pipsnote.com
app.3xpointssystem.com
aarchi.dev
aeropath.app
codelogic.ajce.in
ui.alpop.com.br
beatcode.it
valueawareness.ben.partners
bikefreetour.com
birdmaster.app
qa.blind-tasting.app
bubblio.cz
cartelerahoy.com.ar
chapterly.co.in
www.chs.jp
cobaltbuild.net
conlavenia.co
cal.cranville.com
crax.biz.id
www.dair2.com
www.declutterorganise.co.uk
dgmindsacademy.com
link.doctoralia.cl
doctorpestcontrol.in
www.drivingtestroutesapp.ie
dualintelligencepartners.com
www.dualintelligencepartners.com
www.e2t.space
ecclesiaflow.com.br
spinledger.elnaqah.com
campus.esxent.com
flowtrack-cargo-tech.com
gabrielamarko.com
www.gabrielamarko.com
www.gect.club
yardcard.getcusts.com
glophy.me
hostambola.com
www.hp-parts.at
en.ifckr.ru
coverage.infiniteconsultingcorp.com
itdbt.com
am-back.jackintheboxmenu.me
menu.jackintheboxmenu.me
order.jackintheboxmenu.me
khalisaponsel.com
join.kokomonster.com
kryocafe.food
leadspilot.cloud
global.lite.legal
liveflowpro.online
lunexai.co
www.makerfestkerala.in
admin.manabadminton.in
manabadminton.in
app.mba-minori.com
meikai-x.space
mymodelink25.com
nailedit.beauty
nearlala.com
pic-admiralch.mentor.neccton.com
neorenovateenergy.com
newerwebsite.com
www.newerwebsite.com
osolitaire.com
vacant.owenlee.net
padelbooking.no
padelislands.com
pensiunsyariah.com
app.petpantrypro.com
www.progavio.com
www.wiki.projectmammut.com
qska.com
admin.quickox.in
rhgconsulting.com.au
saqinn.com
www.sarmis.gr
shreyasvalves.com
www.shreyasvalves.com
solarsailer.com
www.soypatriciamoya.com
analyzer.stechsolucoes.com
crm.studyhubadviser.sbs
lp.tasuketag.com
thebbapp.com
thesportsheet.net
www.thesync.sg
fischer.threadkeepr.org
fun-fact.toleva.app
www.fun-fact.toleva.app
tronzstudio.com
tryshortly.pro
vcstores.com
viewroom.co.uk
www.vigirat.com
pre-alpha.volorca.com
wellgrowproducts.com
bioai.willyelton.dev
workflowytemplates.com
zgcintl.com.br
Other domains in certificate