77/100 SECURITY SCORE

Certificate Information

Subject
CN=kilage.de
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 19, 2026
Valid Until
October 17, 2026 35 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
7F:A3:E4:6F:DF:39:55:17:E9:72:34:29:C1:1A:DA:16:03:74:59:3F:36:F4:15:6E:1F:75:D0:EB:82:A0:96:61
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
www.saveragraphics.com

Other domains in certificate

9punk.dev www.9punk.dev
aitruthx.com www.aitruthx.com
alinthsystems.com
arabi.in
athreya.codes
bbpproperties.mom www.bbpproperties.mom
www.bismilkaratasnakliyat.com
sunrise.botspring.in
buerweg.com
cape.fire.capefiregrill.com
www.cardandboard.com
log.cbstore.life
changeuu.xyz
testapk.clipboux.online
www.codematesdev.in
blog.coderoad.pl
codnamfede.com.ar
coloraturacollection.com www.coloraturacollection.com
crucible.wine
registration.cwed.org.in
dande-wedincle.com
dars-goftarha.ir
saimarshad.dexvoa.site
www.dogmeet.at
games.dogonahorse.com
auth.domnu.com.br
www.dreamarq.pt
api.drivestic.com
eatablestories.com www.eatablestories.com
enelgremw.com
unifiedportal.dev.evertransit.com
monitor.expedientecheck.com
filmerch.com
firetap.app
fitnessplate.in
shop.fixit.bike
ft365.kr
generation-eiffel-bm.fr
lms-sandbox.getfinstack.in
gokulisareewali.com
greenlightguideuk.com
auth.h8xesports.xyz
www.healthgenieapp.com
ibmuzik.com www.ibmuzik.com
auth.iltersinan.com
instantech.com.br
jacobwale.se
www.jhguitar.co.uk
kilage.de
www.lglopes.art
maggandpartners.com
trip.maiyun.eu
malvixai.com www.malvixai.com
cocoon.marc-wieser.fr
marval.app
medinalake.live www.medinalake.live
deeplink.megaafiliado.com
mintedadvisors.com www.mintedadvisors.com
moocowgames.com
mskd.jp
www.mybrighthaus.com
app.obacana.com.br
www.obsidianct.com
andrewlewis.paconottechnologies.com
www.pratikvaidya.com
productionbudget.in
www.productivitygenieapp.com
quehayhoyapp.com
quldo.hu
ragwapos.com
poc.ciiar.relu.app
auth.richmond-holidays.com
admin-staging.ridge-form.com
www.runopoolhavuzculuk.com
rutitest.cl
samschiedermayer.com www.samschiedermayer.com
sernorcaixilharias.com www.sernorcaixilharias.com
openbible.thefallingscompany.com
tonyavmadden.com
cdn.tputrading.com
trishikharosalesservices.co.in www.trishikharosalesservices.co.in
www.truquioh.com
www.vantrisgroup.com
auth.wcvote.com
whatifreadingcircle.com
auth.wizeenglish.com
zamieszkajwkamperze.pl