Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=simonverhoeven.dev
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 29, 2025
Valid Until
December 28, 2025
47 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
8A:45:C9:60:5A:E7:77:DD:42:86:13:6F:12:F9:9B:4A:9A:EB:2D:E0:C8:7F:63:02:FF:05:74:66:95:7D:36:31
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
yvonne-hegenbarth.de
24zz.com
3wordsfortune.com
aaron-pham.com
www.agmented.com
www.alexcoded.com
alrazi-academy.com
www.appkasa.com
www.artistekbuilders.com
www.autoservice-maasland.nl
behandlo.dk
www.bioschwartzoffers.com
staff.blackskye.app
staging.blockpulsev2.dev
www.calendarhero.app
app.canarystudent.com
catsonvspawl.live
chegaja.online
chickashamugs.com
voting.clearercode.com
luminaace.com.ng
www.controlsmart.app
shop.craftonthego.app
ww.demersdesigns.com
firebase.hackman.divint.co.uk
x4ys92f2l.easyapp.co
xdra6.easyapp.co
xk7y5o8goye6t3.easyapp.co
xypnhw.easyapp.co
ehs.elsa.sg
enjoyharmonica.com
book.eventsite.co
f0go.com
www.filzquadrat.ch
firestore.cloud
www.fomo-no-no.co.uk
www.foodsygreenpak.com
dev.fyreflysystems.de
www.gayan.dev
goktugyumusak.site
gospodarstworodzinne.pl
guideo.me
hellomick.com
horaexacta.cl
www.indelevelseguros.com.br
platform.instaconnect.io
www.isyou.io
ite.fyi
academy.jaysoni.dev
kings.cards
langlangmakan.org
app.ldklog.com
www.liam-watson.com
ucp-robot.logixpie.com
luzquinos.net
michang-d-admin.m1studio.co
www.malikalmarmar.com
app.managemanufacturing.com
www.markusmengel.com
www.medtrance.com
muscle-meals.de
rendering.nkportfolio.com
app.opingo.club
www.overbet.app
rdxangrilafm.pampa.com.br
icelantic.parkalot.io
gerente.pegueleve.com
physisches-theater-bayern.de
www.pondryhills.com
staging-ba-trial-tenant.qburst.in
rammalvarez.com
referkinghq.com
www.restaurantsakura.es
whenwillitbesunnynexttime.romantique.jp
safemission.net
sanpolychem.com
sarthilab.com
www.sarthilab.com
admin.scoreside.app
sedap.info
www.shrikantpatnaik.com
demo.sieclipse.com
simonverhoeven.dev
www.simplezakat.com
dispatcher.simpliroute.com
sivaastudio.in
www.skadisoft.com
spacepewpew.com
link-yakuodo.stailer.jp
www.swedishtechmafia.com
www.tadpoleteam.com
theantai.com
epsilonstudio.timp.io
deepsquare.tozex.io
ukon.dev
http.velaar.nl
app.vysioneer.com
waynetech.link
www.wireless.coffee
yesherdi.com
Other domains in certificate