Cached · just now
88/100 SECURITY SCORE

Certificate Information

Subject
CN=www.heidrundigital.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
March 05, 2026
Valid Until
June 03, 2026 37 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
41:56:33:75:37:B9:47:61:3F:60:A4:33:72:37:A8:AE:3C:41:2F:04:42:2A:B1:04:44:0B:B6:73:7E:1E:B4:E5
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Present
camera=(), microphone=(), geolocation=()
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
cluebox.kr

Other domains in certificate

abjoy.co.za
auvi.aebc.com.vn
ecom.aeterna.com.tr
link.afs.sh
pj-marcador.alanfrancesco.com
albirechnung.albique.com
staging.alexisfourlis.shop
anpv2417226.id.vn
appialusta.fi
glosowanie.art-pmu.pl
preview.arzneiundhaut.de
www.balance-der-reviews.com
dev.bdscont.com www.bdscont.com
besthairclinicistanbul.com
www.biladebt.co.ke
event.boosteron.co.kr
bti.me
www.cimtcollege.edu.in
www.cleantogreenctg.com
dev-admin.collegiatex.com
culturalbi.org
www.cups.kr
stg.dancerooms.uk
fr8bot.devserver.cc
moonfiles.devsmoon.in
diegonunescorretor.com.br www.diegonunescorretor.com.br
dimitra-philippe.fr
divicom.hml.portalcliente.divitech.com.br
www.domind.app
www.dottorcugini-otorino.it
www.durftekleuren.nl
edinte.co.mz
odonto.emberdrago.com
portal.equipment-service.eu
www.etechsystems.eng.br
www.exoimplante.com.br
extendedsessions.ai
www.formfabric.com
ftconsulting.fi
getcheckmat.com
getpromptdeck.xyz
www.guzai.top
hayelfateh-aqar.com
www.heidrundigital.com
www.hieroglyphcode.ch
oms.regulation.iamasoft.fr
ietsielekkers.co.za
coswara.iisc.ac.in
hosting-preprod.investa.co.uk
istanbulcekiciyolyardim.com
legal.jaimesilva.co
www.jaisakthi.com.sg
kahvesiyah.com
laconic.kr
stack.leanscale.team
www.louisvillecardinalssportscamps.com
turmas.maapp.com.br
www.maler-betrieb.at
www.viking-line.mari-sto.fi
www.matchely.com.br
bestellen.med-buldern.de
formulary.medicalinfo.gr
scoring.minnal.club
moshimoshi-bousai.jp www.moshimoshi-bousai.jp
app.myausapp.com
angelamichele.nexsuite.com.br
docs.opticcount.com
oxygenincluded.com
patterndy.com
remotemanager.pineco.com
parlamentar.prdp.ro
institution.pspkdevtest.net.au
qijie.mom
hub.qna.cloud
www.raosha.top
admin.store.reite.cl
rsiq.ch
propuestas.saleshubagency.com
samuelhunterstewart.com
amigosecreto.schirrel.dev
sechi.link
auth.sermondelmontechile.cl
shafiqpatel.com
skyfinstudio.com
sme.ai.kr
soict200017214.id.vn
nova.taktik-sport.com
www.tarracoapps.com
tessxlabs.com
link.timetrek.co.kr
youth.unifactory.kr
qrnexus.valueappsolutions.com
velourabeauties.com
moon.vkl.vn
webtongkhrngjing.com
wepic.co.kr