75/100 SECURITY SCORE

Certificate Information

Subject
CN=xn--flge-2ra.de
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 28, 2026
Valid Until
December 27, 2026 58 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
AB:C1:6B:F1:78:84:7C:B4:AE:7A:3E:12:87:4A:BD:72:3E:0C:F4:81:53:1D:74:E8:28:26:AA:98:2B:78:4B:43
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
fixx.com.au *.fixx.com.au *.analytics.fixx.com.au *.cms.fixx.com.au *.demo.fixx.com.au *.dev.fixx.com.au *.laravel.fixx.com.au *.new.fixx.com.au *.panel.fixx.com.au *.ww16.fixx.com.au *.ww17.fixx.com.au *.ww38.fixx.com.au

Other domains in certificate

abh.llc *.abh.llc *.accounts.abh.llc *.admin.abh.llc *.app.abh.llc *.dashboard.abh.llc *.dev.abh.llc *.oauth.abh.llc *.partner.abh.llc *.services.abh.llc *.staging.abh.llc *.test.abh.llc
*.aff.betou.bet *.app.betou.bet betou.bet *.betou.bet *.dashboard.betou.bet *.ww38.betou.bet
confucius.bio *.confucius.bio *.staging.confucius.bio
differences.com.au *.differences.com.au *.gitlab.differences.com.au *.random.differences.com.au *.ww25.differences.com.au
dropship247.com.au *.dropship247.com.au *.gitlab.dropship247.com.au *.www.dropship247.com.au
*.auth.emergencycare.com.au emergencycare.com.au *.emergencycare.com.au *.idpd.emergencycare.com.au *.incoming.emergencycare.com.au *.mail.emergencycare.com.au *.palovpn.emergencycare.com.au *.remote.emergencycare.com.au *.vant.emergencycare.com.au *.vps.emergencycare.com.au *.webmail.emergencycare.com.au
*.admin.fashionstock.it *.api.fashionstock.it *.app.fashionstock.it *.backend.fashionstock.it *.dashboard.fashionstock.it *.demo.fashionstock.it *.dev.fashionstock.it fashionstock.it *.fashionstock.it *.metrics.fashionstock.it *.owa.fashionstock.it *.random.fashionstock.it *.report.fashionstock.it *.stats.fashionstock.it
*.crm.feedbin.com.au feedbin.com.au *.feedbin.com.au *.gitlab.feedbin.com.au *.ns0.feedbin.com.au
*.ftp.kronprinzenpalais.de kronprinzenpalais.de *.kronprinzenpalais.de *.mail.kronprinzenpalais.de *.mailout.kronprinzenpalais.de *.mx0.kronprinzenpalais.de *.random.kronprinzenpalais.de *.webmail.kronprinzenpalais.de *.ww16.kronprinzenpalais.de
rango.pro *.rango.pro
*.dns.rtpliveslotgacor.id rtpliveslotgacor.id *.rtpliveslotgacor.id *.www.rtpliveslotgacor.id
xn--flge-2ra.de *.xn--flge-2ra.de