Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=as-ta.net
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 08, 2025
Valid Until
February 07, 2026
85 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
0F:02:D7:48:28:D6:68:77:C4:EE:D9:BB:7D:5D:D2:27:1D:1F:B8:0F:47:EE:83:60:C3:42:72:D4:15:F6:55:81
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.zeio.app
www.1ce.uk
aarambh.tech
pascasarjana.ipdn.ac.id
www.acrobatiq.us
alternantexchange.com
attractiontest.amero.dk
as-ta.net
ajmal.aurify.global
noushad.aurify.global
barbalhoambiental.com.br
intern.bbe.nu
blackpool.is
breve-ai.com
painel.cadeer.com.br
chessbd.app
www.chinomante.com
www.cipafkenya.org
www.cipmtest.com
spixmedia.com.ng
pawpaw-note.crowworks.kr
darakproperties.com
www.darakproperties.com
stats.denizerdogan.net
dentisoftperu.com
www.dentisoftperu.com
dgiigobdo.xyz
gym.dianajuncher.dk
crono.dorsal.cat
empireof.one
dashboard.end2endcourier.com
www.sandbox.eternamath.com
evoadm.com.br
fengmaiji.top
www.fengmaiji.top
www.filmyprofiles.in
funyiraskomarom.hu
g-gang.ru
tadmin.heptone.io
tm-admin.heptone.io
www.hiremints.com
hoffmann.holdings
hunchpeople.com
www.identichat.ai
inhouseenglishlearning.com
www.inhouseenglishlearning.com
devv2.inseat.menu
violeta.it.com
www.jcwservices.co.uk
joseph.engineer
kavicsfejlesztomuhely.hu
keyju.de
liikkuvarenkaidenvaihto.fi
linfieldlabs.com
www.lordstechsupport.com
chicken-stude.lucho-dev.xyz
my-app.lucho-dev.xyz
lumuslab.com.br
sales800.maquetedebolso.com.br
masfufah.com
math-adventure.com
www.medspoke.co
inventor.yori.mirano.fr
mojtabahabibi.com
www.mrenergy.me
navetteestrie.ca
novomai.com
www.novomai.com
nyibutsa.com
www.onechair.dev
www.ongginature.com
pccs.pl
planelogiq.app
journal.plantos.in
pribehvobraze.sk
dlk.qipu.com.br
flowers.rv.ua
shoplite.rw
www.sigmapilabs.com
subattery.ca
app.syncstan.com
dev.syncstan.com
syncstan.com
www.syncstan.com
www.talentolocal.net
hbs.tarbil.gov.tr.tarbil-antikortitre.info
targetgets.com
tasmeelauh.com
quiz.thewineblendinglab.com
painel.escout.trusom.com
stg.trust-rails.com
uat.trust-rails.com
www.ttv-champions.de
sdk-omega.upflowy.com
webgates.net
www.wemoopay.net
wildwayapp.com
www.xingyufei.run
xingyufei.run
digi.xiotch.com
Other domains in certificate