Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=planningsc.pieteraerens.eu
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 28, 2025
Valid Until
March 28, 2026
71 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
EF:93:5E:45:18:E4:05:5F:AA:5E:59:2C:BB:54:E1:C2:5F:81:7F:15:79:60:16:F1:B9:A5:64:9F:CE:12:78:4B
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
doesroverlive.com
m365.5min.co.jp
amritaai.org
anirandom.com
antoinebrahimi.com
appdynasty.com
arantismusic.com
ashwinvelraj.com
www.aspevo.com
atechytechnologies.com
bauschhaus.com
voice1.betiaworld.com
ksp-commnet-planner.blaarkies.com
botrice.games
boundary.llc
s.brasil-tv.net
charviagarwal.com
www.chicagoteluguassociation.org
omv-well-flow-rates.cogniteapp.com
www.cossette.com
www.daenis.com
danicastar.com
app.dap.cl
derekdelizo.com
onorwebapp.desimone.dev
devramoscesar.info
dlshufa.cn
drinkortreat.com
drkathynielsen.com
engenius.com.br
www.falconscourt.org
get.fanamp.co
admin.fiatbolsa.com.br
www.fieldreport.org
cdn-staging.firebase.com
fitness-hlb-sarah.com
www.flexips.com
gamepyong.xyz
gateway-71.com
www.qa.plataforma.gestio.school
www.get-ride.pt
globalprompt.com.mx
qa2.comical.dev.gree-dev.net
sandbox.gtmstac.com
news.hishig-edu.com
privacy-calculator.ignytetechnologies.in
caleb.cast.immwx.com
www.isnix.gay
elp-api-qa.itxi.aero
volvotrucks.jawsapp.online
jonathanevey.com
joshuas.software
s.jpn.icu
kekspace.lol
kikt.ru
retreats.lakeofdreams.org
grandslamforcause.leaguesquare.com
leoscha.com
www.lounastaja.app
www.luchomartin.net
www.markbobrov.com
mediformtechnology.com
www.milindkumarv.com
monefy.me
monostematicos.com
www.monostematicos.com
carritos.moons.rocks
app.muster.io
mutafawkeen.school
www.nebdevtech.com
www.nova-gang.com
www.owenkanzler.com
iosdc-cfps.penginmura.tech
petpate.ch
planningsc.pieteraerens.eu
precisebid.com
www.prsolucionsolar.com
www.robotpak.com
dl.practice.rummytime.com
sandgroup.pl
dev.sios.life
smartcaptureapp.com
gladstar.snapmentor.no
login.soulsuccess.de
stefimiteva.com
hillsvet.thepetdoor.net.au
www.thesense.jp
theskinrefugebiglake.com
ticketsparaestacionamientos.com
tiendana.co
vanny.com
vida-studio-prd.vdms-remote.com
anexos.verfrut.cl
eatwelltobewell.waafi.ca
www.wavlabs.org
weartama.in
whatsspot.in
whatyouseeapp.com
y-swim.com
yoshikiokamura.art
Other domains in certificate