77/100 SECURITY SCORE

Certificate Information

Subject
CN=karuvarakundukmcc.org
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 14, 2025
Valid Until
February 12, 2026 89 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C4:E6:31:4B:A3:32:BE:A8:6D:74:96:F5:82:0F:8D:22:C2:6A:3D:E5:D4:8E:B7:85:8F:3F:52:94:C9:E5:23:92
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
www.starmemory.ca

Other domains in certificate

www.1bkochplan.com
app.absouza.com.br
apuntadechacarera.org
apyguru.com
www.arcodex.net
artistpoornima.com
avenuemagpie.art
glomocontinuity.bbva.es
bstay-demo.beroia-solutions.com
betheworld.com.ar
www.bloodandcaviar.com
kiosk.cardmena.com
cii3.page
cm-kuraz.cz
yycontractors.co.ke
codenest.al
crownpiperesolutionllc.com
dailynotes.cc
www.deepsense-robotics.com
www.durgaitravels.com
event.e-incube.com
ekser.fi
www.sigma.eshqol.com
expcomm.biz
akalmortgages.f4tek.com
app.fiyoshipping.com
www.globelaxy.com
gorgerowing.ca
pay.sandbox.solutionengine.gr4vy.app
www.greensopinion.com
spc.gretul.com
careers.guivus.com partners.guivus.com
harachan.harapeco.org
admin-panel.hexometer.com
imperial.supply
intimecares.com
kafecepte.com
karuvarakundukmcc.org
share.know2share.com
invite.languagedrops.com
app.likestoryeg.com
lolstreamers.gg
managekaro.com
www.mark-darling.com
sexy-time.mightybyte.us
api.mojojogo.com
www.muhammadmavia.com
nathanayele.com
neoticasolutions.com
www.nextclan.io
nirmithai.com
live-dev.nofilterstream.com
www.nutritionandnaturopathy.com
orbet.io
console.ouranosrobotics.com
www.paramount-ent.com
fiduciawealth.portfoliolink.co.za
dev.possibl.ai
quickgrade.app
admin.quizbiblico.app
rafiulhasan.com
www.rashad.dev
embakasi-official.reflex-bikers.club
relforcesolutions.com
reliancemortgage.ca
www.rhca.com.br
ruckacoin.xyz
medscope.scientimed.in
setso.app
www.sistersuzie.ca
skillsword.ai
www.snowgate.co.uk
srmengg.com
test.staites.com
startupcoder.in
contacto.sttega.com
www.students-res-market.co.za
www.sumobili.com
sushiexpresspanama.com
tanhaicollective.com
tecnicobr.shop
thehedgelings.com
timezonecarousel.com
tixvoy.com
stories.toammall.com
www.trasksapp.com
tryavo.com
tyoinomi-taniya.net
undobtn.com
www.versaclinic.app
www.victorvaz.dev
visgis.com
wallieai.com
winno.io
messages.wonkytech.net
qa.worky.mx
yourstaffknow.com
zonastreamin.online