77/100 SECURITY SCORE

Certificate Information

Subject
CN=clubbajozero.store
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 09, 2025
Valid Until
January 07, 2026 34 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
44:B4:28:D5:BC:85:EE:AE:FF:C8:F7:F3:9C:C2:5D:F3:CA:67:A1:A2:A1:37:0F:42:35:68:AF:E0:8E:64:F2:3D
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
www.marcel-garbrecht.de

Other domains in certificate

abextransport.com
agendacmc.online
www.aiatelier.live
www.ainexas.com
emr.alleviationtherapeutics.com
anatomyofhome.co.za
arbsafe.com www.arbsafe.com
ariaease.site
ashwik.com
awakeprobiotics.com
bimedya.online
perk.bluvern.com
app.brillianx.xyz
bucklescan.com
staging-disputes.buslane.com
www.caseyenglishstory.com
chamoliphysio.com
clubbajozero.store
www.suvarnabhumihotel.co.th
consmart.in
daves.bar www.daves.bar
decentre.io
defion.network www.defion.network
defmap.network
deploydesarrollo.com
www.dezoko.com
die-katzenkuschlerin.de
ekopsan.com
elviana313.com
em.doctor
admin.enermatch.com
fcrypto.online
admin.flamabirrayburgers.com.ar flamabirrayburgers.com.ar
gaugler.family
gem-repair.online
give.codes
simulador.habitamaster.com
simulador.habitaprov.com
simulador.hamanncorp.com simule.hamanncorp.com
app.hefrias.ng hefrias.ng
chijin.koujii.jp target.koujii.jp
learousevents.in
llcpayments.shop
muvii.store
tuning.my.id
app.myvitalsvault.com
parampara-utsav.namastey.co
nathan-archibald.org
portal.neembo.digital
newlegacyit.com
nexor.network www.nexor.network
kochbuch-test.nijo.dev
novopolo.site
nubifica.co
admin.nutriverseai.in
www.packwhisperer.com
parkinglesalqueries.com
paula-gallikova.com
punjabductcleaning.com www.punjabductcleaning.com
icaroglauco.qzz.io
saadmobile.com
bergenlive.shed.no glittertind.shed.no orkla.shed.no ostengen.shed.no rema.shed.no thon.shed.no
avarn.shedtest.no cemasys.shedtest.no eldorado.shedtest.no grieg.shedtest.no help.shedtest.no storebrand.shedtest.no vilje.shedtest.no
www.simaspeaks.com
socialconnect.online www.socialconnect.online
street-ttl.com
syncscore.com.br www.syncscore.com.br
takereply.com
thelinehauler.com
portal.thelinestudio.com
www.trainpeak.ca
veagdemo.vacantvectors.com
verisys.network www.verisys.network
wedpy.com
xternitygroup.com
yayilsin.com