§Trust Page
ExpiredDemo record
V1Surface Verified
Example Shop
Owner: Example Retail · shop.example.org
Online store.
Expired · Status since
The validity period has ended and the certificate was not renewed. The results describe the product as it was on the verification date, not today.
The validity period has ended and the certificate was not renewed. The results describe the product as it was on the verification date, not today.
5 / 5
5 of 5 checks passed
Critical 0High 0
A certificate is not a promise of absolute security. It confirms the results of the checks only within the published scope, on the stated date and under the stated version of the methodology.
Not covered by this certificate
- Web application logic and payment flows
Scope of the certificate
- Components in scope
- Domains and DNS
- Domains in scope
- shop.example.org
- Environment
- Production
- Methodology
- V-Standard 2025.2
- Level
- V1 · Surface Verified
Verified checks
Each row names the check, its method, the date and a public evidence summary. Technical details are held privately by CyberSecurityV.
A · External perimeter
A01 TLS configuration and certificate validityPublic endpoints negotiate only modern protocol versions with a valid, correctly chained certificate. Automated check Passed
Public evidence summaryPublic endpoints negotiate only modern protocol versions with a valid, correctly chained certificate.
CheckSupported protocol versions and cipher suites, certificate chain, expiry, revocation information, key strength and known TLS weaknesses on every public endpoint in scope.
A02 HTTPS enforcement and HSTSAll traffic in scope is forced to HTTPS and protected by HSTS. Automated check Passed
Public evidence summaryAll traffic in scope is forced to HTTPS and protected by HSTS.
CheckPlain-HTTP requests are redirected to HTTPS, HSTS is present with an adequate lifetime, and no content in scope is served over an unencrypted channel.
A03 DNS configuration and zone hygieneNo dangling records or takeover conditions were found in the domains in scope. Automated check Passed
Public evidence summaryNo dangling records or takeover conditions were found in the domains in scope.
CheckAuthoritative servers, DNSSEC where applicable, dangling records that allow sub-domain takeover, zone transfer exposure and consistency between public and expected records.
A05 HTTP security headersSecurity headers are present and configured without unsafe exceptions on the pages in scope. Automated check Passed
Public evidence summarySecurity headers are present and configured without unsafe exceptions on the pages in scope.
CheckContent-Security-Policy, frame protection, content-type sniffing, referrer policy, permissions policy and cache directives on sensitive responses.
A06 Exposed services and open portsOnly the intended services are reachable from the internet. Automated check Passed
Public evidence summaryOnly the intended services are reachable from the internet.
CheckInventory of listening services on the public perimeter, unexpected management ports, databases or message brokers reachable from the internet.
Verification history
- Application submitted
- Certificate issued
- Certificate expired
Verify this record
The registry record behind this page is signed with the CyberSecurityV registry key. Your browser can verify the signature and the fingerprint without contacting anyone but the registry.
Record fingerprint (SHA-256): d5b5f92a4264a7fa09709655fc00c15d6ff4ea24b2729fd0accb74ddab944118
Registry signature (Ed25519): jPD1ZUc9JS/6JHYoP7rNAnVrvW6sYUsPvzZrr8ENWFU20MxxTSyAeUoTt+/8g4ygP/kBclHYMjAdcwBL6Q48Dw==