77/100 SECURITY SCORE

Certificate Information

Subject
CN=gripp.pensioenbij.nl
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
January 24, 2026
Valid Until
April 24, 2026 84 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
EF:9C:6F:CE:CF:C9:C1:9F:F4:75:AE:BD:A4:66:64:FF:C6:85:C4:6F:C5:F4:0E:A8:6B:82:73:CF:88:33:C0:31
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
app.dewizgolf.com

Other domains in certificate

creatures.100p.nu
amiibos.portfolio.adamhemeon.com
to-api.ak.hr
boxworld.appgrate.net
biederbuch.de
bijouxartigianali.com
lion42109465.bluesageusa.com
demo.bytekast.io
www.calvincareinfotech.com
www.cedeppe.global
www.chinesein10.com
www.christiankrutsche.cz
cinexg.com
cipt.in
www.mnyumba.co.ke
www.hinco.co.kr
docs.inboxiq.co.zw
fizz.code-promo.info
kcnonline.column.us
lemari.gethyred.com.my
ptsem.pingpower.com.tw
www.confettipartydecor.com
app1.cookdtv.com
www.crossavenueauto.com
dp.ctravell.ru
deporty.com.co
www.dh-app.tech
doxutostudio.top
scanfood.durban.cat
duyqk.click
usecases.emporix.com
selfcovid19.eskwela.app
fagerlund.fi
acgroup.fastvalue.vn
findeck.eu
edit.flowlinks.app
crm.freemasoncrm.com
girnarbhakti.in
www.glowscore.app
partner.healiam.com
ihgwot-stg.page
feedbacktrial.impaktid.com
tennis.impetus.network
app.stg.innbenefits.pl
connect.investpack.in
anime.joshuabennett.dev
jotterbox.io
kloa.in
kohlitraders.in
portfolio.guillaume.lemer.be
ques-prod.da.letsdive.io
www.magiccalculator.com.br
maidon.cl
managudifoundation.in
marchandise.dev
www.martintornros.com
www.mondaypicks.com
my-existence.com
www.tubeoptimist.my.id
thienphan.name.vn
card.narvizit.com
scuola-italiana.noovo.cl
admin.nxt1sports.com
omputag.com
tafmekrandomizer.onclearning.com
onelectricalservices.org
panjurcubodrum.com
parcel.cool
peekolabs.app
gripp.pensioenbij.nl
app.placementmaster.in
www.prep-oil.com
rehan-marketing.com
app.rep60.com.br
rocktowntv.com
rozgaro.com
mit.sagskompas.dk
assets.salixhub.com
seogenie.app
www.shahnatapp.com
harshoutdoor.showitbig.com
sikandersaleem.com
www.simpleservice.com.au
game.snapmentor.no
www.spaceflora.com
admin.spectalmanagement.com
app.spitokalivaki.com
staige.nl
staxtechshop.com
takeyabcn.es
whoisin.techno-soft.com
staging.tellustheodds.com
mc.tiahealth.com
www.tusabeondetem.com.br
hr.vectorsolv.com
www.vincent.by
waitoc.wejugo.earth
yetuglobal.com
www.yichallenge.com