75/100 SECURITY SCORE

Certificate Information

Subject
CN=laven.eu
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 12, 2026
Valid Until
December 11, 2026 36 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
DC:4D:04:D7:48:C3:4E:DF:AB:2C:EC:C6:B6:6F:82:0B:52:C3:6F:D3:1F:20:5D:28:2F:27:1C:8C:16:AD:21:9A
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
neednow.it *.neednow.it

Other domains in certificate

888pandacasino.com *.888pandacasino.com *.ww25.888pandacasino.com
anastasya.com *.anastasya.com *.ww38.anastasya.com
bayfederalbank.com *.bayfederalbank.com *.ww25.bayfederalbank.com
eyg.au *.eyg.au *.random.eyg.au *.ww16.eyg.au *.ww38.eyg.au
gotreameast.link *.gotreameast.link *.preview.gotreameast.link *.ww16.gotreameast.link *.ww25.gotreameast.link
henraihaven.com *.henraihaven.com
huet.org *.huet.org *.ww38.huet.org
jackies.it *.jackies.it
kennel.it *.kennel.it
kvernes.com *.kvernes.com *.preview.kvernes.com *.test.kvernes.com
laven.eu *.laven.eu
middleground.it *.middleground.it
*.analytic.mobileline.it *.dashboards.mobileline.it *.dashs.mobileline.it *.hostmaster.mobileline.it *.imap.mobileline.it *.metric.mobileline.it mobileline.it *.mobileline.it *.owa.mobileline.it *.remote.mobileline.it *.wwww.mobileline.it
monitorwandhalterung.de *.monitorwandhalterung.de
mvamd.com *.mvamd.com *.random.mvamd.com
northerncalifornia.it *.northerncalifornia.it
nuaughtyamerica.com *.nuaughtyamerica.com
nunber.com *.nunber.com *.temp.nunber.com *.tmp.nunber.com
outperform.org *.outperform.org
peapcocktv.com *.peapcocktv.com
racecarmarquees.com.au *.racecarmarquees.com.au
redunipaz.co *.redunipaz.co *.ww38.redunipaz.co
sourgrapes.it *.sourgrapes.it
*.32.spinunsur138c.xyz spinunsur138c.xyz *.spinunsur138c.xyz
standwithtina.org *.standwithtina.org *.ww25.standwithtina.org
stroitelsvo-domov.store *.stroitelsvo-domov.store
thock.de *.thock.de
xn--kreuzwortrtsellser-utb97a.de *.xn--kreuzwortrtsellser-utb97a.de
xn--lotosblte-w9a.de *.xn--lotosblte-w9a.de
*.hostmaster.xpages.it xpages.it *.xpages.it