Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=www.impfdashboard.de
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
February 02, 2026
Valid Until
May 03, 2026
89 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D9:79:E3:C4:E8:D6:BB:B6:59:DD:8D:1F:F2:28:00:91:F1:4D:F4:CC:B8:BF:71:2A:8D:93:63:AD:F3:EE:D2:78
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
backyardfilms.co
10t.app
app.1ludo.in
internal.4-sure.net
www.app-vitabilanz.de
happeningnow.arcasoftwares.com
arhive.co
arvglobalcreations.in
dvi.dev.autoserve1.net
www.behaviorhelpcenter.com
firebase.bits-sutechteam.org
www.caargo.mx
www.zeo-solar.cadense.net
carestack.com.br
i.go.tc.clinicbyclevelandclinic.com
commandprint.com.au
www.covidseverityindex.org
datawin-pronos.com
splash.delx.co.za
desurfbus.nl
unimedvtrp.drtis.com.br
popupondemand.easysignage.app
ecellstmenmimsnavimumbai.tech
admin.einfach-anstellen.de
electronicsgarden.com
www.enriquecendojuntos.com.br
www.estradaeliteenterprises.com
dev.eztrackr.app
admin.felicette.app
financebuddy.financialtravelbuddy.com
franksfootballstudios.com
gentyo.ng
staging-studio.getgalatea.com
giustoholdings.com
gkh.engineer
www.glenridgefaces.org
gorillasports.lv
foerderverein.grundschule-ribbesbuettel.de
www.henrylawson.net
www.idleelem.net
ileco2.pl
console.immigreat.global
www.impfdashboard.de
www.informag.pt
inhausi.com.br
recipes.javatheory.net
jibunchallenge.com
www.joinwana.com
jornaldasnoticias.com
www.knowbetterhiphop.com
kolberg-kollegen.de
kralj.info
www.latortuecommande.be
www.lethrodou.gr
levii.app
lightboxglobal.com
links.londonlibraries.app
www.marketplace.marcofailli.com
play.memu.live
mila.co.jp
files.mobonapps.com
moonshinevfx.com
www.mrgeoffrey.app
notools.indra-is.my.id
mims.mycosense.app
www.mynd.partners
app.stg.nakipower.com
newcastlescouts.com
nexusly.ai
notone.lv
www.oilwellness.company
www.onetwentyone.games
signatures.patientflow.com.au
ufc.demo.pbj.live
www.petportrait.photography
probellbi.app
forms.prolase-medispa.com
psycholog-bialek.pl
quizatron.app
riderepairs.in
www.riskfi.network
www.sababa.news
sumsara.seita-consulting.com
admin.semplicementecomunita.it
www.simplematter.io
www.sinanamaki.com
sklb.app
spendingspotlight.org
tesla-discount.net
therealvdevelopers.in
www.therealvdevelopers.in
www.timespace.io
www.tinkermachines.app
www.tradesindicate.in
hiring.treadtransportation.com
ummanupa.um-manu.com
auth.vigilantesdosono.com
www.walstrat.com
www.workinside.com.br
zahnarztpraxis-alkayed.de
Other domains in certificate