Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=lauraboon.nl
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 11, 2025
Valid Until
January 09, 2026
46 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C2:59:A1:A4:C9:85:F8:A0:EB:42:4D:32:36:D5:86:0C:65:E3:D7:A5:E0:D4:80:61:47:4C:32:A7:1B:A8:DB:54
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
buydeez.app
whaleapp.12traits.com
powerpoint.active-class.app
link.agriavardguide.se
aguasmacamo.com
alabwatravels.com
www.alexwhitehead.me
anakorangpintar.online
artboxtoy.com
dev.hub.arvohealth.com
auth-dev.atrius.io
www.bebrickwise.com
valuetest.ben.partners
bhandarefinserve.com
bokoblinet.com
bordesposada.com
boucherpl.com
bryanbouaoun.com
www.buildit3.com
staging.cadreporting.com
staging.app.cambri.ai
beta.chorfit.de
monsrestaurant.com.ph
comercializadoradepollosanjuan.com.mx
adasa.cydocs.cl
darlastonsmith.com
valet.ddzone.xyz
devecap.com.mx
dignochurros.com.br
dmvquestionbank.com
dombertolin.com.br
drivify.com.br
easyavs.site
static.elegantsoftware.co.uk
erikrcoll.com
filterprice.net
flightpod.ai
a0f9.foodle.su
spacetime.gchouse.org
geoquiz.pl
app.integration.get-and-share.com
goodsoulsui.com
app.gridty.com
www.highgroundllc.com
nguyenthituquyen20225223.id.vn
aristo.ignitemanager.com
auth.indienuggets.com
kanzlerperformance.com
teamradar.katalysatorduravermeer.nl
kenngumonan.com
kinderboerderijwesterweide.nl
ladylp.com
lauraboon.nl
web.dev.rack.leanh.sa
www.letzgoland.com
librolibre.org
oauth-strava.locusmap.app
lovenjoycretions.com
www.macecek.eu
q.makesense.org
massif3d.fr
moca.app
links.multimap.es
miplan.mymoons.cl
app.myop.eu
narebasu.com
app.nebraskaimoveis.com.br
www.neclabs.com
app.nuna.ai
pacificrimgc.net
pinoytech.ca
sheetmonitor.planckunits.io
application.pluto.markets
qubdesign.ro
nice.recursyve.io
resebingo.se
events.rotarydistrict7030.org
scown.co.nz
www.senahasa.com
sharma.ai
exchange-v1.sishi.finance
speakylink.ca
links.stepupfordemocracy.com
tepco-sante.org
admin.staging.terrific.live
www.thesimpleeconomics.de
appilpp.aot.to.it
ios.toggletooth.com
www.tomthu.co.uk
lena.topolko.com
www.twinpeaks.dev
www.ungathleticscamps.com
venleycapital.co
vestaconstructiongroup.com
app.staging.videolevels.com
chmodx.vnetes.com
quorum.votei.app
widget-demo.wagercraft.org
qa.ypodonin.space
zofranaqsha.com
Other domains in certificate