77/100 SECURITY SCORE

Certificate Information

Subject
CN=deruytter.net
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 17, 2025
Valid Until
January 15, 2026 60 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A7:B5:7F:49:DF:F7:6A:C0:59:C7:1E:3F:A7:DE:54:FB:20:36:C4:56:26:17:79:C0:D3:0F:6D:58:95:0B:89:26
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
www.activetoo.com

Other domains in certificate

www.25secondscreative.com
dashboard.2b2tjb.jp
www.3dskatetricks.com
abhijeet.live
www.aldevmus.online
alexekman.se
www.alphasoftsys.com
andresilvase.dev
assistex.ro
www.atlantakidstherapy.com
azur-agency.org
blog.bartick.me
birkesshop.de
www.brasil-austria.com
brickellautocollisioncenter.com
brookevitale.com
www.btcregs.com
harissafood.clau.io
armi.com.tr
auth.comicaly.com
sentinel.copa-ai.com
daisymaebbq.com
delakorbooks.com
deruytter.net
desoxidate.com
test.doodlebot.ai
www.eclipselegalmarketing.com
website-quest.einargs.com
einpaarbois.de
www.replay.esp.br
fairwindslogistics.com
test-clima.farmacare.dev
www.fimbed.com
vidaa.fomo-tv.com
www.framonft.com
blog.fullbound.ai
auth.google.futsalonair.com.br
www.gamequi.cc
www.gipefarma.com.br
admin.shop.gls-spain.es
greenpathkorea.com
ignitestudents.club
inflatabletx.com
arbitrage.internal-fun-chegonibudj.com
samsungbenelux.onsite.invue-live.com
jerb.me
kbscedu.in
www.lovablenotes.com
www.madugangaboatsafari.com
makingmusicmagic.org
mock-ai-admin.mastersunion.org
www.mdhabibullah.com
mgt.co.nz
mintservices.xyz
qre.mobyarts.jp
www.mountvernoncpa.com
ear-trainer.niciadam.ch
nutikorv.ee
horai.or.jp
staff.staging.ordaap.com
phaneendraar.com
police.chat
prakashsonar.in
staging.portal.propiedapp.co
seller.pullgain.com
ceo.reevtech.in
archive.rocky.edu
sachaglace.fr
www.samskarasyoga.com
www.santorini1.gr
sarvaria.hu
sciauerta.it
app-stg-mock.site-ymobile.net
www.skillaura.com
spartansystemdevs.com
solvarea.speakylink.com
www.spheon.com
spirityourmind.com
suadev.com
www.admin.sunrayclothings.com
type.suyena.com
www.swacanada.com
www.taikastudios.com.br
teamdev.eu
almacen.tecnocommzt.com face.tecnocommzt.com
tenebrisstudio.com
testez-lexcellence.fr
www.testtolacsendig.hu
notes.thecodingco.in
attachment.theorygenerator.com
www.tinode.net
admin.dev.transportamf.ca
uwemo.com
www.vslcaterers.com
auth.winkiworld.com
winkpass.com
zandomarkets.com
zpiano.net