SSL Certificate Analysis for schlafwandel.com - Security Grade & TLS Configuration

Open Cached · just now

76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1

Let's Encrypt Active incidents

Certificate Information

Subject

CN=activitycenter.it

Issuer

C=US, O=Let's Encrypt, CN=YR1

Valid From

June 04, 2026

Valid Until

September 02, 2026 68 days

Public Key

RSA 4096 bit Strong

Signature Algorithm

SHA256-RSA

SHA-256 Fingerprint

06:60:B2:8C:83:EC:B2:D7:13:7D:19:75:F1:FF:B2:51:A5:63:26:D9:7D:7E:99:C1:8E:5F:DD:9D:82:51:11:E3

Alternative Names

90 domains

Security Configuration

TLS Protocols

TLS 1.2 TLS 1.3

Forward Secrecy

Supported (Modern clients use PFS)

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains

schlafwandel.com *.schlafwandel.com *.nuatdrds.schlafwandel.com *.staging.schlafwandel.com

Other domains in certificate

activitycenter.it *.activitycenter.it

*.admin.artsign.it artsign.it *.artsign.it *.blog.artsign.it *.mail.artsign.it *.remote.artsign.it *.superset.artsign.it

betlineexch.info *.betlineexch.info *.easuwzrg4p9.betlineexch.info *.fb60a26d-3064-445e-8b05-2e4d113c56dd.betlineexch.info *.mail.betlineexch.info *.test.betlineexch.info

*.alecia.carriejgarcia.online carriejgarcia.online *.carriejgarcia.online *.jean.carriejgarcia.online *.latasha.carriejgarcia.online

*.2af0736a-5ec5-4829-a144-37f2652548f6.gallophile.info *.a.gallophile.info *.api.gallophile.info *.dev.gallophile.info *.fb378154-206c-490f-a277-865975b32553.gallophile.info gallophile.info *.gallophile.info *.hlfvtkio.gallophile.info *.www.gallophile.info

*.autodiscover.kjj.it *.backend.kjj.it *.correu.kjj.it *.email.kjj.it *.ex02.kjj.it *.exchange.kjj.it *.ftp.kjj.it *.imap.kjj.it kjj.it *.kjj.it *.mail.kjj.it *.mymail.kjj.it *.ogrencieposta.kjj.it *.owa.kjj.it *.smail.kjj.it *.sslvpn.kjj.it *.superset.kjj.it *.zimbra.kjj.it

*.a.kodegacor.info *.api.kodegacor.info *.app.kodegacor.info *.assets.kodegacor.info *.backup.kodegacor.info *.demo.kodegacor.info *.dev.kodegacor.info *.f3f63739-3527-4c40-a080-90fdf4adbdb3.kodegacor.info *.fd419dae-4093-4b65-ad89-ada0592c6327.kodegacor.info kodegacor.info *.kodegacor.info *.members.kodegacor.info *.staging.kodegacor.info *.test.kodegacor.info *.testing.kodegacor.info

*.sitemap.thelastjournalist.com thelastjournalist.com *.thelastjournalist.com

*.a.uniquejanitorial.info *.byfyat.uniquejanitorial.info *.f411c135-88f6-460e-aedd-67b111cc9d3f.uniquejanitorial.info uniquejanitorial.info *.uniquejanitorial.info *.www.uniquejanitorial.info