Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=thekitcollective.fit
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 03, 2026
Valid Until
December 03, 2026
81 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B1:08:24:B4:F8:B2:2B:EF:8D:98:D9:99:74:B3:DB:CB:CE:FF:DA:68:1D:B9:84:79:33:1E:ED:39:F6:AC:4E:56
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.terrariapi.com
www.9ten.biz
olam.abhiyanpa.in
www.airfieldmemorialunion.com
akceylon.buzz
alesca.com.br
portale-rcd.anccp.it
antoinegamache.com
bartzatelier.com.br
www.bpan.digital
www.breastfeedingblackbabies.com
auth.genesis.brightmind.com
devis.bude-brus.be
checkmategpt.com
chrisagency.site
civilia.io
webapp.cleverti.me
www.conceptssalon.in
www.creartidley.com
portal.prod.crilabs.net
app.ctadel.io
www.dc-developpement.fr
app.eeule.de
evanstonpaw.org
www.evanstonpaw.org
fdata.vn
fdsbuilders.lol
www.fdsbuilders.lol
feeltonemusic.com
dev.festen.dk
www.fgelite.buzz
friendlylocal.ca
www.stream.gakuseiguild.co.jp
devfest2019.gdgcraiova.com
www.graid.io
www.hnwoodworks.autos
huhtecoy.fi
imchinese.help
www.ingatuneew.dk
secretsanta.inspiritvision.com
iristylist.co.il
jmdglobalstones.co.uk
johar-edge.in
onlinestoresample.juanmg.com
kmpelite.lat
bookings.kusol.co.nz
littlelearnersacademy.xyz
lovejulesleather.ca
malpractice.network
www.manishparui.com
marshallnetwork.services
www.mavdock.com
link.michaelsalamone.be
lp.msaca.jp
test.applink.netcomace.com
dev.api.nicegit.com
www.novonext.hu
pagat.online
whitelist.pethereum.io
work.petshandler.com
www.postureworkout.com
qbcar.vn
quantumcats.dance
www.reach-quiz.com
account-dev.reveliolabs.com
dpd.righttraffic.com
rihlatravels.in
imsv2dev.rnlawgroup.com
demo.rpsoftech.net
app.sangha.one
sbimob.com
www.shautt.com
sims4storytelling.com
southerncaliforniagps.com
msi-rss.spundev.com
stormheg.co
www.superant.kr
www.tailoredmediaplus.net
taskcrum.com
www.tempo.club
thekitcollective.fit
tiratom.com
app.traderoid.io
angular.trogels.com
www.troubleindustries.com
uac.net.in
ulysse.ovh
velosyselectronics.com
www.vertigodgames.com
app.victorvdb.be
vkchhapiacompany.com
www.vkchhapiacompany.com
www.vorsorge360.ch
vrcenter-007.vrplus.info
stage.admin.wagnerguide.com
webmetaverse.jp
choom-raffle.wehive.global
staging.yai.finance
www.yanek-k.com
your-medical-insights.org
Other domains in certificate