77/100 SECURITY SCORE

Certificate Information

Subject
CN=wasserwerk.live
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
June 29, 2026
Valid Until
September 27, 2026 53 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
91:0B:E0:69:9E:2E:23:33:69:D0:CB:96:09:5A:35:C3:ED:D1:06:69:F9:EE:DB:61:5C:36:8C:CC:88:84:63:11
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
dashboard.choshg.com

Other domains in certificate

www.aibabu.tech
kufu.alulama.org
anistella.com
www.argusforesight.ai
astroclinicjsg.com
www.athensblue.com
www.auteria.com.br
demo.lcfi.autorolainspect.co.uk
awfajri.my.id
b2-jo.online
intel.blackpawinnovations.com
www.braintlab.com
builtfor.app
kuesioner.cahyamedika.com
www.call-bear.com
chirurgiczna.com
www.colors.com.sa
contestaya.io
ctrlyati.app
www.debugtoolbox.xyz
dekost.org
2022.devfest.pl
www.dubaldogames.com.br
dxt701.id.vn
www.etenderings.com
evdex.in
ficajali.com
operon.flys.com.br
gapnix.net
rec.goog.men
preprod.scarif.green-conseil.com
gscarberry.co.uk
hominyx.app
idavinci.co
www.ideacubehq.com
infurnuslogistics.com
www.innowave.kr
www.ironfistevent.net
iykyk.works
jefeljaypontejo.me www.jefeljaypontejo.me
k-connect.xyz
lasetek.in
learningcrucible.com
legalware.ai
www.lifevaultapp.co
lunexamessages.com
metodika-shilina.ru
midnight-wave.com www.midnight-wave.com
static.mscloud.xyz
murdermysteries.app
bnnb.mwata.co.zm jctr.mwata.co.zm
www.navus-consult.dk
www.noribel.com
leaves.onlinobh.com
www.opentechbox.co.th
opuswork.io www.opuswork.io
pasten.ai
shop.posbel.be
admin.prenotailtaglio.it app.prenotailtaglio.it dashboard.prenotailtaglio.it
primemix.mn
profmarianacosme.com.br
mozy.prsoft.app
www.psicologiaglobal.es
app.rallytrail.cl
catring.restaurant-buergerhaus-weiskirchen.xyz
www.app.reyoga.com.br
rudrixpmt.com
www.sindicontrol.app
sleepora.app
www.smileybakers.in
app.solarsuite.in
karnaughmapsolver.studentintellect.com
buzzer.studiohal.net
surra.pt www.surra.pt
academy.susymedia.it www.academy.susymedia.it
restaurant.swisslivraisonpro.ch
tagetes.app
thelulumarket.com
dev.secret.threeqa.com
auth.timcrush.com
tkcustomcomputer.com www.tkcustomcomputer.com
totalmarcasbdi.com
auth.tourizzy.com
vamainfo.com
music-quiz.vitterso.net
washout.co.nz
wasserwerk.live
angelica.windolf.se
y2kcostconsultancy.in
ai-next.zerothreat.ai