89/100 SECURITY SCORE

Certificate Information

Subject
CN=www.zahnaerzte-kroker.de
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 30, 2025
Valid Until
December 29, 2025 40 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
02:C1:C2:08:FB:A7:E6:4F:D5:66:9D:6C:80:BE:38:8E:1B:01:3B:C5:C2:B0:20:EF:EE:E4:9F:D3:E5:61:2B:EA
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=15768000 ; includeSubDomains
Content-Security-Policy
Basic
default-src; script-src; style-src; +7 more
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
repower-sommerfest.ch

Other domains in certificate

1transfer.org
abghomestay.com www.abghomestay.com
www.aetherhealth.in
www.architector.io
www.asaren.ai
ascio-studio.tech
atulsable.com
www.auscrosa.asn.au
babyinyellow.com
app.backupshield.com.br
benthebarnekov.dk
es.biobarica.com
www.bitscheduler.com
ffs.byteflipper.com
chakarapp.com
dev.chirpyplus.com.au
app.dev.claimscalc.com
offers.mitsubishi-motors.com.om
pmstrive.com.pk
dodopop-orders.crispnow.com
clms.cyberloop.ai
www.datachester.com
devistiq.com
www.dobranabidka.cz
www.drumuri.bike
admin.ejs-multivector.com
static.exam.net
www.fabricamarciana.com
my.flourishchange.com
ganyvel.fr
pharmastaging.healthdocs.co.za
heavygo.com
www.hfssadikoglu.com
tts.highku.xyz
www.imperiumlarp.com.br
innoforces.com
iottable.online
www.javiccs.com
justdivinehealing.dk
knightsync.app
www.koipack.it
www.kreedoapp.com
www.localflora.info
www.lucascodes.xyz
mascareno.org
mobagm.com
www.mosaicdirect.jp
staging.mumau.dev
nativealien.co.nz
daftarpejuang.neovasi.com
hippie-lucas.nilss.dev
www.lighting.nkportfolio.com
msk.nmfsport.com
numer3.com
dev-admin.omnicurenow.com
sintacc.org.br
stp.texbit.otobit.com
zwei.pdr.cloud
portfolio.pinneaple.com
plumasense.com
www.prideofzion.org
punksauction.com
staging.puntclub.link
tercon-consultorias.qitech.digital
fm.ranaq.com
shamrock.reinventuniforms.com
renardierewepion.be
securityjob.uk
www.shanzis.com
www.shredtheshires.co.uk
simple2master.com
www.sojurn.com
app.spacebridge.ai
adminval.sqa-io.com
stock630.com
celebracionjaime.swan.lat
speedtest.tamir.uk
www.joinus.taporty.it
edc.tasq.me
nikki.tattyhouse.com
www.telemedlist.com
apps.tenloo.com
thursdaygolfleague.com
go.timeshifter.com
tranchant.dev
www.v-cosmetic.com.au
vedamai.com
api.vera-app.de
sonepar.visionate.com
vtjs.app
www.watt.fit
edut.xsite.com
yalla-content.com
linkstaging.yevry.com
dev.yokohama-stadium.co.jp
www.zahnaerzte-kroker.de
www.dispatch.zomio.com
time.zoole.se