80/100 SECURITY SCORE

Certificate Information

Subject
CN=www.source7.io
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 03, 2025
Valid Until
March 04, 2026 85 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
74:22:0C:BB:17:C6:1C:B5:F4:19:95:B4:5B:66:F5:1B:80:32:AC:CE:56:EF:8B:E8:0E:A8:71:3A:F9:54:88:B4
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=86400
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
www.pointingoutway.com

Other domains in certificate

www.acodingtutor.com
www.akohub.tw
pulse.ametras.ro
skateboard-go.astroneuro.com
legal.benchmarke.io
berrybank.app
dl.bidvsmartbanking.vn
www.bimseas.com
bkit.solutions
run.brie.dev
qrcodes.builtbydoctors.com
loja.carimbosavenida.com.br
www.chenvy.com
www.chinaunited.org
pa.covid19hospitalstatus.com
crossworldmariners.com
speedo-gamepad.denolk.dev
www.diginex.news
dokart.no
www.ecofons.com
www.lczacamil.edu.sv
www.ekamay.org
eleonoraemilio.it
greatworkapp.equiem.mobi
links.webui.cplane-stg.evision.ae
learning.faqyou.de
www.felvishop.com
folktale.jp
shgc.galimo.jp
urpflanze-editor.genbs.dev
getalvira.com
www.gotraxs.com
pay.xbd.gr4vy.app
fireb1.hermanhome.com
www.highlow-demo.com
imbianchinovicenza.it
www.indian-tribe.com
injurymap.app
www.inviter.world
drugs.joshuabennett.dev
juliamechina.ru
www.jumpspot.io
just-one.kdosha.com
kgnot-app.com
lemartva.dev
lifespaces.app
listoapp.co.uk
lnkd.design
www.localifyapp.com
www.loyalhomes.co.uk
loyaltt.app
demonstration-dashboard.luciole-app.com
app.machank.com
matters.band
www.meadowcrestinsurance.com
codelabs.moveblo.de
munawarmehraj.com
gn.support.nexusplatform.co.uk
nicola-zanon.com
staging.admin.nyby.com
onvi.be
ownliga.com
api.peyda.app
www.pharmresfoundation.in
phraselocker.app
vr.phuket.run
dogby.pixoby.space
www.prolensolutions.com
psypack.com
linkmba.qualifica.com.br
rambandevelopers.com
roman.jetzt
runbit.app
www.seiqui.com
events.sempra.com
www.simplefractal.com
www.software-engineering-books.com
merlet.solquima.com
www.source7.io
www.sparkiotai.com
www.stellarmining.gy
thestewards.co.za
tigerstorm.dev
meeting.toyotakhonkaen.com
training.tradedash.com
www.trendingtopicc.com
trvls.app
gimnasioelite.turnosweb.app
firebase.ueno.org
bees.underdog.mx
dev-pos.urcupcafe.com
www.vigilus.com
app.wfhgo.com
www.whereswork.com
whoisgod.name
www.yourroll.app
firebase.ysdapps.com
codeology.zubatomic.com
www.zugai.com