77/100 SECURITY SCORE

Certificate Information

Subject
CN=mersp.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 27, 2025
Valid Until
January 25, 2026 49 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A9:4F:34:D0:BF:53:B7:20:7E:DA:57:C1:2B:70:E6:D9:CD:8D:C0:1B:D0:EF:40:BF:BD:3D:3F:38:40:0E:02:3E
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
dev.myprism.co.za

Other domains in certificate

2018.formfunctionclass.com
360.audion.fm
lowes-kitchen-dashboard.3dcloud.io test-89-da.3dcloud.io
ai-jihye.com
perambalur.aravindtravels.in
aromach.me
www.arunav.in
bentolabs.net
besttoolbars.net
dash.bidotravel.com
brutapp.eu
bucatekel.net
admin.captureme.app
schedule.jpexgarage.co.kr
codenames.us
people.creators.fi
crowde.nrw
ctuperg.com
www.cuadre.io
recover.cuona.io
dentalcentrum-nordwest.de
dreambard.org
www.einfach-anstellen.com
embrace-tech.de
central.eudania.com
dev.double-ethiopia.fairchain.org
dev.flashdex.app
a059.foodle.su
www.frec.app
gianlucaesposito.it
www.glowfishlabs.com
www.gripwell.com
gustavosantos.me
cname-to-different-domain-https.horo.jp
www.houseoftramp.it
www.icuda.net
ivitz.eu
maravillaspsicologicas.jonathancaballero.org
kumanda.app
admin.kypson.com
cars.luciusweb.es
monty-hall-problem.maitake.org
mersp.com
ariyalur.mukunddroptaxi.com
www.myresistor.com
www.n2-dev.com
www.ncincindiqala.co.za
neillcorlett.com
nestbirds.com
www.nextgn.co.uk
www.admin.noubodiez.com
app.nuestrodiario.com
numerandos.com.br
www.olickalgoldloan.in
online-video.club
staging.onshop.lk
api.onyxandrosehemp.com
padata.org
www.pedroanibarro.com
penmate.app
playboxtcg.com
connect.polaradventure.com
user.quarpay.io
www.quicksquiz.com
www.railroadsolitaire.com
rarefind.llc
www.reallybooking.com
shorturl.ridecell.net
rokuproductadvisor.com
www.sbolel.dev
tasbih.segitiga.id
www.setoi.kr
www.singletapps.dev
www.sketchthat.com
souvenr.com
www.sportscampsatstonybrook.com
lego-duplo-marvel.storytoys.com
aac.summitgyms.com
www.sweetrolls.net
www.tanibott.com
www.team-ead.com
www.tempbutton.com
expert.tiime.app
travelengine.app
testing.trioli.app
umi2u.com
amahoro.umuganda.digital
v20cricket.com
vectorkids.com
www.visionpointedu.in
www.vislect.com
vivadigital.hk
bridge.voyista.com
www.whfinder.com
wishify.cz
patriotact.writerduet.studio
chat.zipeventapp.com
staging-app.zubut.com