Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=mountaibike.de
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 13, 2026
Valid Until
December 12, 2026
55 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
40:5A:35:0D:B9:93:D2:CB:CE:3D:77:10:2C:1C:5C:E0:E8:9A:8D:BC:A0:20:3E:44:4A:2F:60:13:D9:6E:AC:58
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
advertisingrecruitment.com.au
*.advertisingrecruitment.com.au
adventurepass.com.au
*.adventurepass.com.au
agriloan.com.au
*.agriloan.com.au
aircraftinsurance.com.au
*.aircraftinsurance.com.au
airlinedeal.com.au
*.airlinedeal.com.au
avexpo.com.au
*.avexpo.com.au
batclaysus.com
*.batclaysus.com
bestairline.com.au
*.bestairline.com.au
bootycalls.com.au
*.bootycalls.com.au
broached.living
*.broached.living
cartoonpla.net
*.cartoonpla.net
*.ww16.cartoonpla.net
*.ww25.cartoonpla.net
*.ww38.cartoonpla.net
cinemaguide.com.au
*.cinemaguide.com.au
digitalnotetakers.com.au
*.digitalnotetakers.com.au
fairlightrealestate.com.au
*.fairlightrealestate.com.au
flatscreens.com.au
*.flatscreens.com.au
foodshop.com.au
*.foodshop.com.au
gaybourhood.au
*.gaybourhood.au
lesbianescorts.com.au
*.lesbianescorts.com.au
longlifemilk.com.au
*.longlifemilk.com.au
*.ku.lose.au
lose.au
*.lose.au
microbrewery.com.au
*.microbrewery.com.au
microdistiller.com.au
*.microdistiller.com.au
mountaibike.de
*.mountaibike.de
naru.life
*.naru.life
papazsports532.pro
*.papazsports532.pro
phalloplasty.com.au
*.phalloplasty.com.au
plasmatvs.com.au
*.plasmatvs.com.au
puki.it
*.puki.it
riverboatcruises.com.au
*.riverboatcruises.com.au
schnapps.com.au
*.schnapps.com.au
scooteralarms.com.au
*.scooteralarms.com.au
sibaru.com
*.sibaru.com
*.sitemap.sontips.com
sontips.com
*.sontips.com
*.ww1.sontips.com
*.ww25.sontips.com
sportcoupe.com.au
*.sportcoupe.com.au
studentexpo.com.au
*.studentexpo.com.au
teeball.com.au
*.teeball.com.au
temporarystaff.com.au
*.temporarystaff.com.au
tennisnews.com.au
*.tennisnews.com.au
*.hostmaster.thebalcony.it
thebalcony.it
*.thebalcony.it
truckguide.com.au
*.truckguide.com.au
vnls.com
*.vnls.com
Other domains in certificate