Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=quadrakit.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 05, 2025
Valid Until
January 03, 2026
45 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
5B:D5:09:20:0E:78:F1:04:34:1E:E2:AF:09:10:7B:82:0A:70:C1:A5:D2:32:8F:8C:4C:B2:98:74:52:1D:E0:E9
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.vinhoche.com.br
www.89ol.com
ai4solutions.com
www.alhololalthakeya.com
americaoffbalance.com
nuvola.apptodate.dev
soporte.astitel.com.mx
app.aswan-intr.com
selfserve.automegawarehouse.com.au
spseclasspilot.auxswot.com
mistotalbody.bangkokhospital.com
benger.biz
heridas.biobarica.com
api.boatbomber.com
member.bodymechanicshealthandfitness.ie
boliviapetsupply.com
bople.app
beta.api.bulletn.co
cecile-ferrier.com
chileseguimiento.com
chordace.com
jsmartapp.co.il
www.corgidev.com
www.decorativelily.com
reviews.dein-ruf.de
dinosaurdino.com
www.doa.id
alumniuemk.uem.edu.in
milifestyleadmin.eduswitch.com
app.elinkfinance.com.au
ellindero.es
www.emon.vn
www.enorre.com
entireacademy.com
www.faisalpratamaputra.com
fastrakgps.com
www.financialfun.org
francescomastrocinque.com
freshfarmfoods.co.za
gabaregulatory.com
play-dev.gera.fan
tiendademo.gestioninformatica.com
docs.gestios.es
www.ginooddone.com
upload.globalfleetsolutions.co.za
music.grifdail.fr
idolypride-lottery.com
pagos-gmm.inter.mx
s.jobs7.in
agents.kwikpay.in
connect.locus.sh
nextjs-blog-redirect.lowsk.com
manchesteraquaticclub.com
auth.meeples.app
mta-sts.9007.jp
www.netwhere.online
www.nighttimedriveband.com
lms-admin.oesonlearning.com
onewaytaxies.com
patelharsh.com
peerdrop.com
connect.petleo.app
dev-client.pharm2market.app
tour-your-way-dev.powerproleasing.com
covidzones.prasoon.me
ridwankamil.purwana.net
analytics.qa100-raksul.me
quadrakit.com
discuss.rapo.app
buyer.prod.samridh.ai
scorecast.live
scubadivingcompanion.com
seblauzsuckmyballs.xyz
florian.selent.me
app-link-dev.shabu-yuzuan.jp
shiksha.studio
www.smallmiraclesedu.info
smarttrainschedule.app
snailjetapp.com
open.staging.snapscan.io
sofatv.app
www.solarwelt-lippe.de
www.spalatoriecovoarehorezu.ro
tscan4.tapdo.dev
www.tayloratodd.com
projects.tectonicapps.com
app.tokodistributor.com
traitte.app
search.travelumrah.co.uk
stores-web-noneu.truecaller.com
app.trueilm.com
tstructures.com
cfsanjusto.turnosweb.app
urrutialeal.com.mx
locate.dev.utah.gov
valditi.com.mx
www.whatauto.app
a.yesodot.app
5th.youstar.live
constructionview.ziggu.io
Other domains in certificate