Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=stg.epex-album.re2fe.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 30, 2025
Valid Until
February 28, 2026
89 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
6F:04:2F:63:22:63:00:E2:16:70:0D:E7:79:93:AD:FB:C9:32:6B:47:02:36:A8:2A:E8:34:3E:01:35:ED:03:50
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.talentrom.ro
abhinavranjan.me
gtd.agustinallamanocosta.com
app.aitalks.cl
www.angelstrail.com
apnatcher.com
appsinfinity.com
auth.arcade.software
autx.net
babantu.com
battleplan.uk
bayatechllc.com
casarural.co.uk
hcp-webapp.qa.clipboardhealth.org
admin.lowcars.co.in
www.hermiso.com.my
pricelist.combimix.com
cornerstone-builders.net
www.dbaonline.com.au
decartrade.com
dejavu.science
www.depaulathleticscamps.com
www.dylanvarghese.com
emarcotte.com
www.enemiesofthepeoplemovie.com
www.ennellgroup.com
ephwords.com
eredimonticelli.it
faithinafrica.org
figure.gallery
flordeldia.com
gcip.dev.help.fnzsupport.com
foxmitigation.com
app.crm.gcunit.com
www.gossippartyboutique.com
hbu.gmbh
www.howmanydayssincefsuhasbeatenuf.com
hs-lepus.com
hydropneumaticonline.in
preview-dev.interplay.io
law.ixorax.com
dl.jazztv.pk
staging.klearly.com
kodybyte.com
lavchat-user-styles.lavenirapps.co
ling8.co
dev.localbuddy.co.uk
dashboard.lugus.digital
www.lutreeco.com
pathfinder.madhive.com
www.marcbaiges.com
bangbegin.meander.media
yorksandhumber.partners.medics.academy
ak-marines-data.merthincloud.net
www.millerkrish.co.uk
mohammedhassanlatif.uk
www.mouldtechsol.com
nanwani.in
nativealien.co.nz
go.niyama.academy
www.notfalltag-heilbronn.de
icici.app.onfinance.ai
onlydigitals.in
orkanx.com
www.owefoundation.org
apply.pod.insure
prayersend.com
dashboard.promopromo.be
stg.prooface.net
psicologiareversa.com
quest.mn
radartechnosoft.com
stg.epex-album.re2fe.com
www.recyclingpioneers.ca
www.renderobjects.com
www.ripariansoft.com
sageg17.com
app.sanchoai.com
www.santuario.travel
academy.sestrasolutions.com
www.shalomfuelportal.com
www.sharemylocation.org
simgepanjur.com
skillnav.in
smart-pet-coverage.com
somex.in
auth.stylecarousel.com
bodadiaznerio.swanmoments.lat
bodagrijalvasalinas.swanmoments.lat
www.swipelab.com
tinyd6.games
www.truzen.com
inv.dev.usemason.com
i.valerahealth.com
vivinatural.com.ar
go.wanderoo.it
wondersofwater.com.au
openmob.yodelit.co
yureto.com
www.zenblends.com.ar
Other domains in certificate