Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=softballca.athlete-era.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 04, 2025
Valid Until
February 02, 2026
65 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
1B:59:41:D9:0F:81:76:7F:37:E5:D0:CE:ED:0C:6A:56:48:68:67:EE:C5:2D:72:91:FE:D9:87:90:DC:8B:6B:C6
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.willandtom.com
2creative.net
4run.fit
tl.arion-dev.abilitystack.com
www.akulyanga.com
alterdata.mx
firebase-staging.ascension-app.com
softballca.athlete-era.com
www.bastiendupont.com
www.bluehouselogistics.com
kanban.bluetreelab.net
signerdemo.caisias.com
cestvs-anime.com
aura-us.cloudanvil.net
nakwonchojang.co.kr
bishalkumarsah.com.np
temp.cabinet.dah-qa.top
www.damianbreland.com
apps.dangraphs.ca
discipline-secourisme.fr
energ-sens.fr
www.enfarrados.com
live.estars.vn
excellbrands.net
www.farefirst.com
www.farnellevent.com
www.firecracker10k.com
www.fm-tech.ca
app.freelap.com
gastro.fudoma.com
marketpainreport.gaborpinter.com
namitfozzek.gaborpinter.com
e.globalhrsummit.org
grdj.com.ar
greenageme.com
www.hamish.biz
admin.hitonari.me
www.hyprview.com
ianmichaelsimon.com
adigurukul.innomonk.com
carer-discounts.landing.johnfowlerholidays.com
charity-worker-discounts.landing.johnfowlerholidays.com
joselinejimenez.com
kalpanadesign.dev
n0ble.kro.kr
htwwwcg.kythias.com
legitra.com
lilno.co.nz
www.lingualoomm.com
emp.blr2.locobear.com
waiver.blr2.locobear.com
auction.loosliredangus.com
www.lumzerti.com
www.ww.massage.org
mentblossom.com
www.met-connect.com
www.michaelkitchell.com
www.mikelehen.com
minoslabs.com
morwils.com
myquickresume.com
www.nashwalt.com
nicolafolchi.com
www.othersverse.com
letsbowl.owct.me
www.pablosanahuja.com
patradental.in
extensions.pbbbl.com
pdf2x.it
pearlcreationsllc.com
pear-studio.pearsports.com
www.pelagaggi.com
pianolessonscambridge.com
www.pianolessonscoventry.com
auctions.pro910.com
purelogicgames.com
qp-digital.com
beta.ramsai.ai
salomee-casting.com
scrapbookworldy.com
app.dev2.screencastify.com
seanmpauly.com
seika-baton.jp
www.serpicolandscaping.com
www.smartrecyclingbin.cloud
thresholdmanagement.stevemadden.com
testnet.app.superposition.finance
pizza13.tapmenu.app
tarimasistan.com
www.tekneto.com
temiskamingvet.com
blur.terpity.com
karnott.thomasgrivet.fr
top-stone-scaner.com
topibrotech.com
triggercalc.com
www.veromail.click
videogamesupercrossseries.com
weedoscopes.com
worldofopencode.com
Other domains in certificate