76/100 SECURITY SCORE

Certificate Information

Subject
CN=indiewar.de
Issuer
C=US, O=Let's Encrypt, CN=YR1
Valid From
June 04, 2026
Valid Until
September 02, 2026 85 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
08:89:38:D2:C4:D9:E6:C7:A5:F6:29:F9:A6:25:74:14:95:50:B8:78:B0:D1:55:AB:51:59:28:A5:80:14:A3:12
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
remotify.org *.remotify.org *.admin.remotify.org *.api.remotify.org *.app.remotify.org *.assets.remotify.org *.demo.remotify.org *.dev.remotify.org *.m.remotify.org *.vzncaapi.remotify.org *.webmail.remotify.org *.www.remotify.org *.xxmapm.remotify.org

Other domains in certificate

*.admin.auhdatacenter.com *.api.auhdatacenter.com *.app.auhdatacenter.com *.assets.auhdatacenter.com auhdatacenter.com *.auhdatacenter.com *.backup.auhdatacenter.com *.dashboard.auhdatacenter.com *.dev.auhdatacenter.com *.dlkqymailer.auhdatacenter.com *.gxzwhjcrqdmail.auhdatacenter.com *.m.auhdatacenter.com *.mail.auhdatacenter.com *.mailer.auhdatacenter.com *.marketing.auhdatacenter.com *.members.auhdatacenter.com *.qa.auhdatacenter.com *.secure.auhdatacenter.com *.staging.auhdatacenter.com *.stg.auhdatacenter.com *.test.auhdatacenter.com *.tlqltuat.auhdatacenter.com *.uat.auhdatacenter.com *.v1.auhdatacenter.com *.vpn.auhdatacenter.com *.web.auhdatacenter.com *.www.auhdatacenter.com
celebwebsite.com *.celebwebsite.com *.m.celebwebsite.com
*.api.footbolt.com *.bbs.footbolt.com footbolt.com *.footbolt.com *.m.footbolt.com *.vpn.footbolt.com
growell.net *.growell.net *.m.growell.net *.mail.growell.net *.mail2.growell.net *.wildcard.growell.net
indiewar.de *.indiewar.de
*.access.koong.com *.comune.koong.com *.dinhvu.koong.com *.eolah.koong.com koong.com *.koong.com *.rds1.koong.com *.web.koong.com *.www.koong.com
*.api.openvixia.diamonds *.app.openvixia.diamonds *.assets.openvixia.diamonds *.autodiscover.openvixia.diamonds *.demo.openvixia.diamonds openvixia.diamonds *.openvixia.diamonds *.test.openvixia.diamonds *.www.openvixia.diamonds
*.api.oukeu.com *.hostmaster.oukeu.com *.m.oukeu.com oukeu.com *.oukeu.com *.www.oukeu.com
*.dan.platinumclub.co platinumclub.co *.platinumclub.co *.www.platinumclub.co
*.random.waste-ndc.pro waste-ndc.pro *.waste-ndc.pro *.ww16.waste-ndc.pro *.www1.waste-ndc.pro