Open
Cached
·
just now
80/100
SECURITY SCORE
Certificate Information
Subject
CN=vote.kurpfaelzer-bierclub.de
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 21, 2025
Valid Until
March 21, 2026
57 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D6:C2:2B:33:12:E1:D9:48:EC:7A:E4:B6:0D:7A:5F:0A:08:68:E1:CD:E9:CB:F8:6B:FC:B1:37:42:28:36:73:B5
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
Wildcard CAs
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • You have authorized 6 CAs - consider limiting to only the CAs you actively use
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
Subject Alternative Names
100 domains
junnyapps.com
spyfall.adrianocola.com
aeiwa.com
aicentia.ai
aicentia.com
www.aicentia.com
allaboardbitcoin.com
www.alphaenum.com.br
antitigrinho.com.br
sepet.ardacar.com
autoil.app
bucket-combine-dev.bce.dev
www.message.beeperlink.com
nailstudionewmarket.bookingbeauty.co.nz
professionailbotany.bookingbeauty.co.nz
www.boskemper.net
airesearxhlabs.bsrsdigital.in
bsrsdigital.in
www.builatrailrace.ro
ios.buzzer.life
dev.master.codergym.fit
leadleader.com.ua
lafabricaempanadas.com.uy
deleoncarpetcleaning.com
deyaatech.com
www.deyaatech.com
kalk.digi.no
www.diplomska.mk
link.drivelah.sg
ema-facility.de
vamospadel.epicss.io
equinoxstudios.ca
www.equinoxstudios.ca
staging-app.escapectrl.com
www.ethangranato.com
me.pokymon.eu.org
www.eyedocassociates.net
feedsyncai.com
www.freetesthub.com
freiermuthcialtda.com
www.freiermuthcialtda.com
daily.ghandoura.cc
applink.segov.ma.gov.br
groeibaken.nl
icetouch.org
www.inertium.app
intertics.com.mx
iolite.software
irdirectory.ir
app.jibun-apps.jp
www.johnshortland.com
www.k6c.co
www.katits.com
leadership-profile.kevinlaird.me
knownsense.ai
konkamaanta.com
www.kotoko.fi
ktty.nl
vote.kurpfaelzer-bierclub.de
box.labellecom.fr
www.littlemoorsportsandsocialclub.co.uk
app.lyeons.com
metatree.eco
www.mitchelsevere.tech
monad.social
www.monad.social
multiversaltracer.com
dbbapp.nbn23.app
nfbeats.io
www.nutech.io
link.staging.part2.link
quintadacoitada.pt
appstaging.rapidbotz.com
go.regage.io
revrec.software
soapmaker.richiesawesomewood.com
www.ricoss.com.br
rojhalatoil.com
roshanenterprises.org
schoolframe.net
cv.shayden.me
registration.smbe-qa.skipr.ninja
slash.ro
squinty.app
stock-poker.eu
linkstage.storybox.cloud
link.superplan.de
tabacchirun.it
tenderstrip.com
thehomemade.app
www.unifiedministries.life
customeradmin.untied.io
urmysoulmate.com
wealthtrails.net
app.pasksb.webapiservices.in
nazar.zleep.dev
rana0.zleep.dev
zoppi.site
avatar.zwanedev.co.za
zwanedev.co.za
Other domains in certificate