Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=info.diwima.de
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
March 24, 2026
Valid Until
June 22, 2026
43 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E5:3D:DD:B0:0F:7A:20:83:15:B0:1C:60:DB:4F:AC:DA:0D:4B:02:DB:6F:F6:77:4E:31:8C:C9:DF:D6:56:05:1C
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
sunandsand.in
www.sunandsand.in
100usdt.fun
3stechnology.org
www.aarnavjindal.com
www.aldysalon.com
mentorships.alienbrains.in
aserpsolution.shop
www.aveeconsulting.com
benthebarnekov.dk
www.bitscheduler.com
bluz.app
plaza-campestre.bss.name
staging-business.buzzbee.com
report.yourflare.bycopilot.com
www.c2-systems.com
caddeikebir.com.tr
www.camaswallball.com
applink.campermate.com
join.campusshare.de
cdmedia-croatia-staging.contentcard.com
ctxgrowthagency.in
sesja.dastudnia.pl
www.dentalmap.jp
www.digishala.com
info.diwima.de
dubplanner.com
api.ehadapi.com
elevatetech.id
learn.finickel.fr
www.fintra-web.com
ganyvel.fr
avery-docs.haco.tw
hommys.com
huaizhi.rest
tankgame.huseyinsamisari.com
main-dashboard.hutupia.com
iamdavidonuche.com
mandataire.monjuridique.infogreffe.fr
viewer-testing.input4you.be
iottable.online
www.javierslatincuisine.com
www.jenperson.dev
jisetf.org
www.joinaudience.com
jren.dev
justdivinehealing.dk
www.khetivalah.com
www.kittimurkl.com
lighttour.world
lingoforge.org
lynkostudio.online
www.app.magazzn.com
www.maheshatech.com
www.masat.dev
app.mazoragroup.com
game-dev.mcast.edu.mt
app.micarritosv.com
mvpjourney.agency
mypeoplego.com
nejahi.dev
www.niravpokar.in
olgascheese.net
www.oppaidius.com
www.oynio.com
www.painjournalapp.com
password-reset-qa.partnerdri.com
passportcannabistours.com
permanent-cleaning.com
www.crm.petspot.in
www.picken.ch
pwa.pixtuner.app
pksprojects.org
plazariococa.com
self-tour.powerproleasing.com
pradhoom.in
leaders.prepagram.com
prepear.app
ambar.rankversity.com
stg.leeminhyuk.re2fe.com
www.recrutamento-onlinejp.com
roboalchemist.com
www.sandrasemeghini.com.br
santaines.com.ar
www.scs-rybnik.pl
driver.selflane.com
sistemreklam.com.tr
snuscount.xyz
prudential-app-test.ssd.co.ke
statement-gateway.com
mail.sveam.vn
www.telemedlist.com
tincta.art
trst.no
app.vacctrack.com
www.walljam.app
www.wedagedara.org
app.econ.dev.int.weeswares.com
zackapp.me
oculos-demo.zeero.tech
Other domains in certificate