Open Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=khattratechsolutions.ca
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 28, 2025
Valid Until
January 26, 2026 52 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
49:31:34:64:A6:14:2C:C2:DE:C0:B7:46:8F:30:54:8F:BA:3D:2A:21:EA:59:C4:07:36:3A:FD:C9:7B:68:6A:88
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
www.pskolka.de

Other domains in certificate

status.airshot.io
akemenid.com
test2.altalk.com
appsflow.appsbroker.info
ltt.arbr.dk
fluid.architectmindframe.com
password-change-dev.ashirase.com
ashishsoni.ca
adeem-test.awaed.co
www.aysconsulting.co
basantsocialfoundation.in
www.beacondrycleaners.com
www.brinkfolio.com
www.buraktokses.com
vip.busybisi.com
www.campfi.app
www.clipule.com
demo.clivi.com.mx
admin.harshitajain.co.in
app.deliverymagnet.com
hotovo.deskbooking.app qiagen.deskbooking.app
www.dheller.de
jeopardy.dougie.tech
www.drivernotebooks.org
teste-materdei.drtis.com.br
www.emilraji.com
thebailey.equiem.mobi
moderateur.esbabi.com
www.estacionamentojuveve.com.br
www.fabnimitta.com
fantasydragleague.co.uk
fmabril.com.ar
forestbirdnest.com
frec.app
ggranum.com
greatnet.app
www.group-ab.com
stg.ps.hacci.live
harajuku-art-village.com
dev.employee.highridge.app
idraulicolatina.it
in-3minterijeri.com
institutobenessere.com.br
iptvsubscription1.com
test.jetsend.ca
join.jin-soku.biz
jobakirei.com
khattratechsolutions.ca
knivmastarna.se
www.laiveliai.lt
www.lightmixweb.com
www.listopad.app
venicecitytours.lithodomos.com
map.martianpremierleague.com
mattmc.co.uk
app.k3vo.me.ke
lims2.metaclinic.com
www.metroartbrentwood.com
www.milkflowmonitor.co.uk
www.niconico.llc
omscs-notes.com
icims.onsitecollab.com
thomast.orchestra4edu.com
www.oscardelgadolegal.com
www.ozgunozdemir.com
pacbee.com
www.pauldelourmel.fr
piinkpoint.com
planners.fi
app.portalentryways.com
www.prerakmehta.in
www.puzzlepass.io
surv-qa.qservus.com
memorial-app-dev.rakisoft.cl
renomart.com.au
richardszilagyi.com
ridytechsolutions.com
robertmayerturntables.com
relic.saffy.games
sandeep.life
app.scribespace.ai
app.sharpchat.ai
simonehomeandgarden.com
test.snippethub.dev
watvindtdestad.stadsgehoorzaal.nl
connect.staples.com
www.systb.io
docs.techsoft-sensai.io
click.tlvbible.app
www.topcarepvtltd.com
umadelicia.com.br
umstud.se
www.unibot.cloud
rimigo.visa2fly.com
api.wardice.club
wholetale.org
share.with-map.com
loggisto.yatto.com.br