Open
Cached
·
just now
81/100
SECURITY SCORE
Certificate Information
Subject
C=DE, ST=Bayern, O=Friedrich-Alexander-Universitaet Erlangen-Nuernberg, CN=www.rrze01.fau.info
Issuer
C=GR, O=Hellenic Academic and Research Institutions CA, CN=GEANT TLS ECC 1
Valid From
December 18, 2025
Valid Until
December 18, 2026
334 days
Public Key
ECDSA
384 bit
(P-384)
Strong
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
7E:1A:B3:FF:54:A0:C4:8F:E7:2E:4F:DF:2F:26:CB:75:C7:0D:BF:E6:25:7F:02:B7:F1:ED:73:60:3E:C2:9E:29
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=15552000
Content-Security-Policy
Basic
default-src; script-src; style-src; +3 more
default-src 'self' blob: *.youtube.com *.youtube-nocookie.com *.uni-erlangen.de *.uni-erlangen.org *.fau.de *.rrze.de *.fau.eu *.fau.tv cdn2.fau.tv cdn2.video.uni-erlangen.de *.siteimprove.com eveeno.com jobspreader.com www.youtube.com vimeo.com publish.twitter.com www.slideshare.net open.spotify.com karte.fau.de karte.uni-erlangen.de *.fau.tv *.video.fau.de *.video.uni-erlangen.de www.youtube-nocookie.com youtu.be *.slideshare.net www.br.de; script-src 'self' 'unsafe-inline' 'unsafe-eval' siteimproveanalytics.com *.siteimprove.net *.siteimprove.com *.youtube.com *.ytimg.com *.uni-erlangen.de *.uni-erlangen.org *.fau.de *.rrze.de *.fau.eu cdn2.fau.tv jobspreader.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: *.gravatar.com *.uni-erlangen.de *.uni-erlangen.org *.fau.de *.fau.eu *.fau.tv *.siteimprove.com *.siteimproveanalytics.io img.youtube.com cdn2.video.uni-erlangen.de cdn.bsky.app; connect-src 'self' *.siteimprove.com *.uni-erlangen.de *.uni-erlangen.org *.fau.de *.rrze.de *.fau.eu *.fau.tv cdn2.fau.tv jobspreader.com; font-src 'self' data: public.slidesharecdn.com
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
96 domains
fsv.uni-erlangen.de
hardware.uni-erlangen.de
mail.uni-erlangen.de
portal.uni-erlangen.de
software.uni-erlangen.de
wiki.uni-erlangen.de
datennetz.rrze.uni-erlangen.de
exchange.rrze.uni-erlangen.de
formulare.rrze.uni-erlangen.de
fsv.rrze.uni-erlangen.de
fsv.zuv.uni-erlangen.de
hardware.rrze.uni-erlangen.de
izh.rrze.uni-erlangen.de
jobs.rrze.uni-erlangen.de
mail.rrze.uni-erlangen.de
mmz.rrze.uni-erlangen.de
software.rrze.uni-erlangen.de
windows.rrze.uni-erlangen.de
www.fsv.uni-erlangen.de
www.hardware.uni-erlangen.de
www.mail.uni-erlangen.de
www.portal.uni-erlangen.de
www.software.uni-erlangen.de
www.wiki.uni-erlangen.de
www.datennetz.rrze.uni-erlangen.de
www.exchange.rrze.uni-erlangen.de
www.formulare.rrze.uni-erlangen.de
www.fsv.rrze.uni-erlangen.de
www.fsv.zuv.uni-erlangen.de
www.hardware.rrze.uni-erlangen.de
www.izh.rrze.uni-erlangen.de
www.jobs.rrze.uni-erlangen.de
www.mail.rrze.uni-erlangen.de
www.mmz.rrze.uni-erlangen.de
www.software.rrze.uni-erlangen.de
www.windows.rrze.uni-erlangen.de
datennetz.rrze.fau.de
exchange.rrze.fau.de
formulare.rrze.fau.de
fsv.fau.de
fsv.rrze.fau.de
fsv.zuv.fau.de
hardware.fau.de
hardware.rrze.fau.de
izh.rrze.fau.de
jobs.rrze.fau.de
mail.fau.de
mail.rrze.fau.de
mmz.rrze.fau.de
portal.fau.de
software.fau.de
software.rrze.fau.de
wiki.fau.de
windows.rrze.fau.de
www.datennetz.rrze.fau.de
www.exchange.rrze.fau.de
www.formulare.rrze.fau.de
www.fsv.fau.de
www.fsv.rrze.fau.de
www.fsv.zuv.fau.de
www.hardware.fau.de
www.hardware.rrze.fau.de
www.izh.rrze.fau.de
www.jobs.rrze.fau.de
www.mail.fau.de
www.mail.rrze.fau.de
www.mmz.rrze.fau.de
www.portal.fau.de
www.software.fau.de
www.software.rrze.fau.de
www.wiki.fau.de
www.windows.rrze.fau.de
rrze01.fau.info
www.rrze01.fau.info
datennetz.rrze.de
exchange.rrze.de
formulare.rrze.de
fsv.rrze.de
hardware.rrze.de
izh.rrze.de
jobs.rrze.de
mail.rrze.de
mmz.rrze.de
software.rrze.de
windows.rrze.de
www.datennetz.rrze.de
www.exchange.rrze.de
www.formulare.rrze.de
www.fsv.rrze.de
www.hardware.rrze.de
www.izh.rrze.de
www.jobs.rrze.de
www.mail.rrze.de
www.mmz.rrze.de
www.software.rrze.de
www.windows.rrze.de
Other domains in certificate