77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.earthedltd.co.uk
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 23, 2025
Valid Until
January 21, 2026 74 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E1:B2:FE:F6:12:86:9B:8F:D4:5B:C8:B4:DA:01:2B:60:DB:5A:CE:73:09:56:DF:08:CF:19:26:A3:12:00:EF:DC
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
dev-service.univelop.de

Other domains in certificate

www.rastreo.99minutos.com
www.aldebaranarabians.com
www.aljahazi.com
www.automations.io
babyportal.com.au
bambeach.dev
app.belva.io
bintang.fun
www.blockxlabs.com
www.bluestoneagents.co.uk
bna.me
cemaligencer.com
www.alpharefrigerationcompany.co.in
www.codle.fr
contactsure.net
costumestudios.io
dannymcgee.io
app.diploma-audio.fr
admin.djobnet.com
www.earthedltd.co.uk
emedos.net
www.enablus.com
www.encantoschoonheidssalon.nl
shorturl.epaxcis.com
www.etiscloud.com
eugeneyunlaw.com
webstore.fahmpartners.com
www.fishviewer.com
fe.geminidsystems.com
genomiverse.net
realestate.giovanniliboni.it
www.gomagoma.mx
status.greenstream.io
www.guitarlessonsleicester.com
hondaaccord.site
hotelsilverleafindia.com
punchkingcmchbootcamp.impactwrap.com
www.ivan-jurasik.fr
iverzh.com
jordanhuus.me
poems.juliotati.com
keycx.com
pokerklas.krea.tools
newsletter.kreamice.com
legendarygradinginc.com
lexusgx550.site
librolibrary.com
hsapp.longhornhsa.org
www.match64sports.com
www.medicaresoutheast.com
www.megatechitsystem.com
mikemadethisbeat.com
firebase-c3.moboreader.net
moekhammeri.com
mondayclub.io
movieflixapp.online
naturheilpraxis-heetel.de
portal.negativ-bewertet.de
www.nissandrummondville.com
www.obsessivecolouring.co.uk
kanan.octet.com.mx
www.ongrocery.us
ucin-docknow.onymos.net
opd.ooca.dev
payment-zone-qa.orux.tv
pizza-frank.com
projectexit.com
rafaeltroche.com
reneechiu.com
www.righttombbs.com
www.sampann.net
www.sbajaj.in
serve-bot.com
quacks-randomizer.shalinmehta.me
2vpspinxrr5dsd6zvg4u.smartimob.io
ey.snapmentor.no
sneakerknockerz.net
pv-api.straka.dev
streamertunes.org
www.surakshasocial.in
bodagranadosmartinez.swanmoments.net
www.thecalmparent.com
thechefmasters.in
www.thefurrymarketplace.com
www.theislandline.com
maps.thelazyhiker.com
radiojovempan.themediatrade.com
template.thinktank.net
tjswholesalers.co.uk
refer.trucard.in
unmotivomas.org
urlvayu.com
www.veereshkali.com
auth.vpsnotas.com
go.wayne.io
whatch.website
mince-pie-survey.worawat.com
zhovnir.com
zivost.in