77/100 SECURITY SCORE

Certificate Information

Subject
CN=simonverhoeven.dev
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 29, 2025
Valid Until
December 28, 2025 47 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
8A:45:C9:60:5A:E7:77:DD:42:86:13:6F:12:F9:9B:4A:9A:EB:2D:E0:C8:7F:63:02:FF:05:74:66:95:7D:36:31
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
yvonne-hegenbarth.de

Other domains in certificate

24zz.com
3wordsfortune.com
aaron-pham.com
www.agmented.com
www.alexcoded.com
alrazi-academy.com
www.appkasa.com
www.artistekbuilders.com
www.autoservice-maasland.nl
behandlo.dk
www.bioschwartzoffers.com
staff.blackskye.app
staging.blockpulsev2.dev
www.calendarhero.app
app.canarystudent.com
catsonvspawl.live
chegaja.online
chickashamugs.com
voting.clearercode.com
luminaace.com.ng
www.controlsmart.app
shop.craftonthego.app
ww.demersdesigns.com
firebase.hackman.divint.co.uk
x4ys92f2l.easyapp.co xdra6.easyapp.co xk7y5o8goye6t3.easyapp.co xypnhw.easyapp.co
ehs.elsa.sg
enjoyharmonica.com
book.eventsite.co
f0go.com
www.filzquadrat.ch
firestore.cloud
www.fomo-no-no.co.uk
www.foodsygreenpak.com
dev.fyreflysystems.de
www.gayan.dev
goktugyumusak.site
gospodarstworodzinne.pl
guideo.me
hellomick.com
horaexacta.cl
www.indelevelseguros.com.br
platform.instaconnect.io
www.isyou.io
ite.fyi
academy.jaysoni.dev
kings.cards
langlangmakan.org
app.ldklog.com
www.liam-watson.com
ucp-robot.logixpie.com
luzquinos.net
michang-d-admin.m1studio.co
www.malikalmarmar.com
app.managemanufacturing.com
www.markusmengel.com
www.medtrance.com
muscle-meals.de
rendering.nkportfolio.com
app.opingo.club
www.overbet.app
rdxangrilafm.pampa.com.br
icelantic.parkalot.io
gerente.pegueleve.com
physisches-theater-bayern.de
www.pondryhills.com
staging-ba-trial-tenant.qburst.in
rammalvarez.com
referkinghq.com
www.restaurantsakura.es
whenwillitbesunnynexttime.romantique.jp
safemission.net
sanpolychem.com
sarthilab.com www.sarthilab.com
admin.scoreside.app
sedap.info
www.shrikantpatnaik.com
demo.sieclipse.com
simonverhoeven.dev
www.simplezakat.com
dispatcher.simpliroute.com
sivaastudio.in
www.skadisoft.com
spacepewpew.com
link-yakuodo.stailer.jp
www.swedishtechmafia.com
www.tadpoleteam.com
theantai.com
epsilonstudio.timp.io
deepsquare.tozex.io
ukon.dev
http.velaar.nl
app.vysioneer.com
waynetech.link
www.wireless.coffee
yesherdi.com