Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=vlastuin.pensioenbij.nl
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
June 28, 2026
Valid Until
September 26, 2026
35 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
6F:9D:92:E8:8B:E7:62:77:ED:D9:05:45:45:83:2E:CA:70:89:44:11:EB:CA:5C:E7:DE:3F:5B:EB:1F:20:20:62
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
astrabrains.com
mind-map.2xnz.qzz.io
sexual-repression-calculator.2xnz.qzz.io
src.2xnz.qzz.io
fitness.44agents.com
www.aestruturadigital.com.br
troglodyte.angelnerd.com
preview.arque.app
www.atmchretien.com
dinhduong.aurafitness.club
pluscar.autoshoppingimigrantes.com.br
www.booplog.xyz
brainbotindia.in
brezdev.com
www.cenergia.es
www.certifyrn.com
l.chikiriki.ru
www.corporatesolution.com.br
crelve.com
deliverypro.com.uy
deniskarpenko.ru
dinhthaison.id.vn
docs.dokumentor.com.br
app.encontreprestadores.com.br
countingsheep.fabricemontfort.com
reviews.fudus.de
app-dev.gastropos.ai
www.goldrushcomputing.com
blueshifted.gorewood.games
card.horehronie.sk
hustcv.hust44.id.vn
ispartacoskunmakine.com.tr
www.ithryv.app
joaocotralha.com
jundiaidroneinspections.com.br
www.karadenizpideny.com
catalog.kideai.com
v1admin.kinderlabs.kr
home.kleinsoft.com.au
tool.kolhub.top
komehyo-buyers-aiapp.com
cleanlogistics.kro.kr
www.lecomercee.com.br
auth-staging.lightsoutbingo.com
loqr.app
dashboard.lotusocean.vn
www.mariebelfashionagency.be
mentible.com
ai.moonlist.app
app.linenmanagement.mountainhops.co.za
aliciaedelman.demo.movello.se
mtmartin.com
easyride.bo.netvolution.it
fr.newsengine.co
ngocnguyenviet200609.id.vn
dashboard.nivara.id
nivin.space
nnuseum.me
www.andrea.notaiofalcinelli.com
www.onegoodbit.today
ordetidag.no
www.pagco.in
vlastuin.pensioenbij.nl
persona-types.com
www.pinselmoment.ch
www.playtitanslegacy.com
www.postgenpro.com
quiosquesiriojantar.com.br
rhp.law
auth.ritm.ink
estabelecimentos.rvpedidos.com.br
train.schemasim.com
servicinu.co
shoppinglistplus.ru
estagio-tjmg.sln.tec.br
www.snacksyndicate.org
app.spinion.app
su2025.co.kr
taara.co.kr
takara-t.co.jp
admin.td.edu.vn
thin-k.ing
thonly.org
app.totstaxi.net
traditionalwear.co.za
recruit.trustagent.io.vn
bible.tulia.study
upstream.vn
www.vnsft.co
www.wazimahassanali.com
shin-tech-blog.webriki.com
www.whatsappsforms.com
whattodo.lk
wisddy.com
wordesk.ai
www.xinchao.cfd
www.yodiinn.com
yuwanglin.cyou
www.yxpress2u.com
zython.ai
Other domains in certificate