77/100 SECURITY SCORE

Certificate Information

Subject
CN=bananabunksmirissa.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 21, 2025
Valid Until
January 19, 2026 69 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F7:CF:94:B3:F6:05:AD:58:18:2B:13:FA:0D:C0:AD:A4:51:1D:1E:9D:4B:4F:E9:F9:7B:FD:34:2D:B4:CE:67:61
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
frontend-specialisten.dk

Other domains in certificate

ablakszerviz-gyor.hu www.ablakszerviz-gyor.hu
agaplink.com
alsaeedmedicalcomplex.com
resume.daniel.alvarado.pro
www.apaitsolutions.de
arvadev.com
bananabunksmirissa.com
app.banyan.eco
bgcatalog.app
binhsonoceanpark.net
cacambas.chegando.app
chibodo.com
status.clerkhound.com
camlicalilarturnuva.com.tr www.masterkuafor.com.tr
www.concuror.com
einvoice.cortiqa.in
cybersecurity-ai.eu www.cybersecurity-ai.eu
www.deminsy.com
www.dikshavalah.in
donadalua.com.br www.donadalua.com.br
anniversaire.lucie.dufleit.fr
elcardenalcincy.com
app.engrosappen.dk
tienda.erodistribuciones.com
featprint.com
foprex.com
rferreira.freeddns.org
www.fun60th.com
app.fxnotes.com
genautech.com
gotravelshow.online
admin.hatalabo.cloud
i-told-you-so.dk
app.immigration-check.de
ishughfreezefired.com
www.isomorphx.com
junkai.rest www.junkai.rest
external.uc.kamitsubaki.jp
kapotakkho.com
kentcottagenuwaraeliya.com
labotechnica.cz
dive-apps.da.letsdive.io
lingtime.pl
lunexai.co
menuspace.online
painel-dev.mobilizei.com.br
bookingsystem.modulealpha.com
mirar.informacion.my.id
mymishn.app www.mymishn.app
logistics.nanoguntechnology.com www.logistics.nanoguntechnology.com
www.neppri.com
pettipettimirissa.com
ll-trainer.pirotech.fr
www.plasticulture-project.com
app.platora.app
locc.pp.ua
qupiu.com
qushxonaa.uz
reactbyrohit.shop
www.realitky.online
www.restinpg.com
samsoft.rs www.samsoft.rs
www.sawag.net
sellevoll.co.uk
app.shiftpilot.co.uk
staging.insightly-archive.shuttersup.co.uk
simpfo.com
portal.soilslytics.com
soloapp.store
sosys.com.br
weddingbells.sourishmukherjee.com
dev.spot-sentry.com
metronome.stringify.com.au
dashboard.tailorai.tw
terhivanska.fi www.terhivanska.fi
bloom.thamescatalyst.com
thesbtools.com
admin.tophuntertech.io
sys.u90min.com
www.universalcalculator.net
vanea.fi www.vanea.fi
www.vesbeckhandyman.co.za
admin.videografonbudget.se
vyno.onl
webstudioexpress.xyz
w300.whazonk.com
it.world-works.co.jp
staging-portal.yurtle.co.uk
santiago.z01.be