Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=daanrutten.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 27, 2025
Valid Until
February 25, 2026
88 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
FD:C1:E4:3F:D9:D5:52:69:71:0F:2C:4D:F6:3A:34:4B:CE:42:59:91:78:E1:29:A7:9E:40:50:E1:BF:60:8D:BB
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
margariinteriorismo.com
mybobs.3dcloud.io
www.4track.mx
admin.360.audion.fm
adrien-clavaguera.fr
www.akabuti.com
aloisiodecoracoes.com.br
americanbandinstrumentrecycling.com
link.andme.org
apostoladodelapreciosisimasangre.com.ar
converter.apphive.io
experience.beautifulcode.co
bitcoin-pt.com
eservis.caracal-machines.cz
www.chatfinder.app
www.chowdashi.com
chrisogdenfilms.com
lens-by-example.chrispenner.ca
wfmannotation.clearquote.io
www.ligled.com.my
sga-admin.connectblue.com.br
www.covaliu.dev
daanrutten.com
deepsense.app
depfly.com
tam.eddress.co
demo.equix.app
www.dashboard.etc-cat.com
leapfire.exelor.com
auth.fanspo.com
ggx01006-002.gadabout.games
app.get21stnight.com
url.getemit.com
dev.globalfleetsolutions.co.za
gottatrip.com
grandmamarilynn.com
grenutvikling.no
gundu.id
haikuthunder.com
www.igruyere.ch
app.inbodyhome.tw
indiakka.com
admin.iskconsolapur.org
isxo.dev
weddinginvitation.itsyourdayofficial.com
xujhs-famday.jameventsph.com
janebrinquedoseutilidades.com.br
www.kentkad.im
lend.test2.kiki.finance
kumaravelumapathy.com
order.la-cherie.in
labson5th.com
www.laquintacumbres.com
contracts.m.works
3d.mabiloft.com
www.marsolier-electricite-fougeres.fr
test3.matchtal.com
www.medule.com
app.memento.ge
michaelwebcork.com
miku.fashion
www.milestores.com
duovoice.mmcallsapp.com
smartchat-stage.mysmarthotel.co
fireworks.nabehide.com
test.wsd.netbulls.io
nse-edc.in
dev.nuuphealth.com
www.o-o.sh
pimpmyhouse.be
etcheby.pinkbeton.com
www.plus-class.jp
hourskeeper.polycents.com
pernambucanas.presen.ca
signin.purple.fit
auth.qistudy.com
app.regnspotter.dk
reyemb.io
docs.rookout.com
sinan-club.com
birthcertificate.sirancheevi.com
lanouvelleboutiquedevitrolles-transdev.sky-boy.com
www.spartanjs.org
steelemart.in
mjhealthtesting.studiossolution.com
www.thehotelsmanager.com
www.theorigami.io
tomas.do
tashcoleman.tombewley.com
www.torvgarden-tannklinikk.no
document-submission-web-page.review2.trustdock.io
hook.qa.videolink.app
wedoedu.uz
www.whist-score.dk
dashboard.woodcountyoh.app
xenthropic.com
www.yalla-content.com
amaira.yanalcom.com
www.yentrox.com
j.yookos.com
Other domains in certificate