Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=xn--billigflger-0hb.de
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 13, 2026
Valid Until
December 12, 2026
33 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
6C:6F:33:88:B9:AF:D1:AC:16:45:83:06:E5:C4:30:38:A8:ED:F2:F5:54:80:7C:E3:5C:91:1A:BB:71:61:47:20
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
b-m.org
*.b-m.org
*.kozig.b-m.org
adbrain.com.au
*.adbrain.com.au
aeromanagement.com.au
*.aeromanagement.com.au
apartmment.com
*.apartmment.com
billifgfluege.de
*.billifgfluege.de
blacksunaeon.com
*.blacksunaeon.com
broadbandservice.com.au
*.broadbandservice.com.au
dickssportinggoods.au
*.dickssportinggoods.au
*.ww25.dickssportinggoods.au
*.ww38.dickssportinggoods.au
dogtopia.com.au
*.dogtopia.com.au
edwhitfield.au
*.edwhitfield.au
fixachip.co.uk
*.fixachip.co.uk
fuer.net
*.fuer.net
*.hostmaster.fuer.net
*.uni.fuer.net
hcat.ai
*.hcat.ai
hmk.au
*.hmk.au
*.random.hmk.au
*.ww38.hmk.au
indiigo.ca
*.indiigo.ca
*.mailout.indiigo.ca
*.random.indiigo.ca
*.test.indiigo.ca
*.ww25.indiigo.ca
ingas.cyou
*.ingas.cyou
*.ww25.ingas.cyou
limelocal.com.au
*.limelocal.com.au
men.it
*.men.it
mercatofoot.net
*.mercatofoot.net
michigantalent.org
*.michigantalent.org
*.ww1.michigantalent.org
*.ww11.michigantalent.org
*.ww25.michigantalent.org
nationalappliances.com.au
*.nationalappliances.com.au
*.com.offervisiontrack.com
offervisiontrack.com
*.offervisiontrack.com
*.ww16.offervisiontrack.com
onlinebidding.com.au
*.onlinebidding.com.au
oooo.com.au
*.oooo.com.au
partyhiregoldcoast.com.au
*.partyhiregoldcoast.com.au
primeviedo.com
*.primeviedo.com
qebimoi.online
*.qebimoi.online
*.www.qebimoi.online
rcautosales.com
*.rcautosales.com
sacredspacesinprofanebuildings.com
*.sacredspacesinprofanebuildings.com
*.random.shopselect.com.au
shopselect.com.au
*.shopselect.com.au
telesystem.de
*.telesystem.de
whichmechanic.co.in
*.whichmechanic.co.in
whiplashinjury.com.au
*.whiplashinjury.com.au
womenshealthgrouptn.com
*.womenshealthgrouptn.com
xn--billigflger-0hb.de
*.xn--billigflger-0hb.de
Other domains in certificate