Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=laven.eu
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 12, 2026
Valid Until
December 11, 2026
36 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
DC:4D:04:D7:48:C3:4E:DF:AB:2C:EC:C6:B6:6F:82:0B:52:C3:6F:D3:1F:20:5D:28:2F:27:1C:8C:16:AD:21:9A
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
neednow.it
*.neednow.it
888pandacasino.com
*.888pandacasino.com
*.ww25.888pandacasino.com
anastasya.com
*.anastasya.com
*.ww38.anastasya.com
bayfederalbank.com
*.bayfederalbank.com
*.ww25.bayfederalbank.com
eyg.au
*.eyg.au
*.random.eyg.au
*.ww16.eyg.au
*.ww38.eyg.au
gotreameast.link
*.gotreameast.link
*.preview.gotreameast.link
*.ww16.gotreameast.link
*.ww25.gotreameast.link
henraihaven.com
*.henraihaven.com
huet.org
*.huet.org
*.ww38.huet.org
jackies.it
*.jackies.it
kennel.it
*.kennel.it
kvernes.com
*.kvernes.com
*.preview.kvernes.com
*.test.kvernes.com
laven.eu
*.laven.eu
middleground.it
*.middleground.it
*.analytic.mobileline.it
*.dashboards.mobileline.it
*.dashs.mobileline.it
*.hostmaster.mobileline.it
*.imap.mobileline.it
*.metric.mobileline.it
mobileline.it
*.mobileline.it
*.owa.mobileline.it
*.remote.mobileline.it
*.wwww.mobileline.it
monitorwandhalterung.de
*.monitorwandhalterung.de
mvamd.com
*.mvamd.com
*.random.mvamd.com
northerncalifornia.it
*.northerncalifornia.it
nuaughtyamerica.com
*.nuaughtyamerica.com
nunber.com
*.nunber.com
*.temp.nunber.com
*.tmp.nunber.com
outperform.org
*.outperform.org
peapcocktv.com
*.peapcocktv.com
racecarmarquees.com.au
*.racecarmarquees.com.au
redunipaz.co
*.redunipaz.co
*.ww38.redunipaz.co
sourgrapes.it
*.sourgrapes.it
*.32.spinunsur138c.xyz
spinunsur138c.xyz
*.spinunsur138c.xyz
standwithtina.org
*.standwithtina.org
*.ww25.standwithtina.org
stroitelsvo-domov.store
*.stroitelsvo-domov.store
thock.de
*.thock.de
xn--kreuzwortrtsellser-utb97a.de
*.xn--kreuzwortrtsellser-utb97a.de
xn--lotosblte-w9a.de
*.xn--lotosblte-w9a.de
*.hostmaster.xpages.it
xpages.it
*.xpages.it
Other domains in certificate