89/100 SECURITY SCORE

Certificate Information

Subject
CN=xanderj.nl
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 07, 2026
Valid Until
November 05, 2026 85 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
8E:55:CF:B1:26:C8:69:9D:4D:1D:52:B6:7C:9D:A8:42:57:54:94:31:09:CB:20:23:72:7A:32:CD:01:3C:43:71
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains
Content-Security-Policy
Weak
frame-ancestors Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
  • Consider adding 'preload' to HSTS for maximum security
  • Significantly strengthen CSP directives
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
app.geldfinancial.com

Other domains in certificate

dashboard.4run2.com
thanjavur.akdroptaxi.com tiruvallur.akdroptaxi.com tiruvarur.akdroptaxi.com
meals.akgstudios.net
aramuna.org
atlas-systems.net
docs.autheid.com
axomrefurbisher.com
testenv.beanposapp.com
www.bloomplex.com
auth.bluefaucet.com
smagglo.uat.bluspark.io
www.breastfeedingoklahoma.com
candev.io
commande.chibi-sushi.re
api.dev.clevateam.io
quote.clia.ca
i.codehack.jp
coldmountain.studio
contextask.com
crazysprite.com
cshold.ing
cuieaglesathleticcamps.com
www.danielmodig.com
dramadee.com
app.easywpk.ch
caja.restaurantes.eficiente.co
www.eightstreets.online
emkty.com
www.flexofab.ai
www.flexofab.com
www.flooroperatingsystem.com
fluxloopdesign.com
gabrieldragan.com
insideview.gatheround.com
get-in-line.com
www.gitflowchart.com
gmontejo.com.mx
sms.grayfish.com
www.gridframe.ca
app.gymnexapp.com
www.hanstullmann.com
www.haritist.com
illumin.shop
integracefetrj.com
jobpostings.internu.com
www.jainrubbers.com
jamesho.ai
www.jashnkalabyyami.com
slides.jishnuraj.rocks
jsonverify.com
kalalayaacademy.com
www.loserthovaobrazy.cz
5star.madhive.com
maumcrafted.com
www.max-index.com
painel.dev.mdopix.com.br
melpike.dev
mentor-motor.com
tvlovers.nac.africa
neofiling.com
is-this-ip-private.net-tools.info
admin.notearkiv.no
opencausation.org
ouipool.com
preview-touch.plenion247.eu
poonam.online
psicohub.pro www.psicohub.pro
survey.ptmss.co.id
meetings.rentor.com
reuniakbarfem.com
www.riseloapp.com
rm3logistics.com
quiz.rojgarfix.com
pms.rundev.in
safari-restaurant-wilpattuwa.com
login.sankanime.web.id
mtid.bomify.solongo.app
spacecoasteva.club
utm.spotfitness.app
www.swiftlineautomation.com
syarihu.dev
thaigai.app
artwork.theorygenerator.com
thesenatorhotel.com
setubal.turnosweb.app
undrstanding.com
agrodata.valke.com.ar
deeplink.staging.vendpark.io
mail.videopop.ai
walkinsalon.app
creative.webtest.io.vn
link-qa.wifiesta.com
admin.willingcharitable.org
wsr-starfinder.com
xanderj.nl
www.zweitblick-lektorat.at