Open
Cached
·
just now
75/100
SECURITY SCORE
Certificate Information
Subject
CN=www.pizzeria-da-salvatore.de
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
November 25, 2025
Valid Until
February 23, 2026
39 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
DF:1E:FD:9A:AE:DB:3D:9C:EB:AC:44:32:EF:82:EF:28:0E:DF:0C:03:4B:81:95:96:34:9F:3A:8B:61:E7:46:B5
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
auth.fills.app
beta.adiutor.co
links.adiutor.co
agrapine.com
aguiladorada.org
www.albertovaldez.com
antitesa.com
arbetsjournalen.app
roast.bitofgaia.com
brixcondominios.com
cafespicenewcastle.co.uk
s.canadiary.com
censusai.com.au
www.censusai.com.au
mobile-order.ecr.cm.com
busy-tlv.co.il
thehumanedit.co.ke
smartbox.com.iq
money.vdo.com.my
copyverve.com
www.copyverve.com
demosite-lvdemo5.cox2m.com
demosite-lvdemo6.cox2m.com
development-city-kiosks.cox2m.com
development-smartcities.cox2m.com
hgreg-dlry.cox2m.com
manheimatlantaindoor-ilvaaain.cox2m.com
cpavance.com
auth.daishohq.com
decari.de
dramastudio.ai
drtahminaalam.com
dutiap.com
elouenprojet.com
eshopax.com
www.ffftickets.com
firepeak.tech
auth.flvw.app
gameoffate.com
hitanshenterprises.com
www.hivelabsinnovation.com
hiwayhostmotelpasadena.com
illicons.com
school.illumine.app
stellarcapital.io.vn
fld.isanegc.org
www.mpo900.it.com
ite.fyi
www.iwas.llc
www.joycedongstudio.com
app.leiej.com
leoyzhang.com
www.lesik.site
www.linear-hub.com.br
mahdymuratov.com
alex.mamaev.net
fg-poll.mapoll.de
www.megalapak.org
www.minhthong.group
partners.nativelayer.ai
natmedconf.com
osgpro.sy
www.parlixa.com
pasturalfresh.com
www.philoshea.com
www.pizzeria-da-salvatore.de
r6skins.cc
care.ramlabs.eu
tasks.rbdl.uk
redbeacon.cl
referee.dev
pk.reliablepunching.com
ryotalks.ryoclouds.com
sahakorn.org
sarthilab.com
www.sarthilab.com
www.servielec.cl
www.setitonline.com
sgharem.org
shoppingsyren.com
auth.tdatdev.software
thedaysofraj.uk
toavisando.com.br
deepsquare.tozex.io
alpha.transect.com
trustme.bot
ttvipsg.com
www.turbi.com.br
dashboard.ugcakes.com
ustayol.com
vkis.ee
agent.rtm.vnlp.ai
test.vygo.app
othello.wadahome.com
wee-delhi.com
wiredlamb.com
dispatcherv6.wiyak.com
wundercity.wunderlabs.ai
y2meta.rest
app.zoony.com.br
Other domains in certificate