Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.sparkhousedigital.org
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
May 22, 2026
Valid Until
August 20, 2026
89 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
12:99:E0:1F:9A:8A:EC:EC:DB:F2:0F:CA:D4:DB:FA:CB:88:FE:CF:EC:60:12:B6:6C:B5:9D:CD:F9:01:C4:C8:C6
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
findmovers.co
activestudyskills.com
aethercollective.studio
www.aethercollective.studio
agape4acc.com
www.ahrstudios.in
aiober.com
akcjareaktywacja.pl
app-carrental.com
archerline.com
www.archerline.com
asociaciondemujeres3c.com
atlantaloverseas.com
azad.club
balajisaree.com
bemanager.site
www.betamaker.co
www.bitappsteam.com
blackoppfuel.com
www.braid.tech
www.bsanju.in
admin.bunnacafe.me
www.capeandcay.co.za
test.catshark.dev
clef-phytoad.clef-innov.com
coolthrifts.com
crestpass.com
croutoncatastrophe.click
www.ctzen.mu
www.customlifestyle.co.za
app.cyrencare.com
daekyoace.com
deadoshandmade.uy
divlight.net
dvinfradevelopers.com
elacies.com
evalugrade.com
ezitechno.com
f.friendness.it
www.gishub.com.au
cmap.heychao.com
hitech-lab.vn
www.humanasalud.app
hvkale.com
auth.idea2pitch.com
auth.inbase.cl
ingreso360.com
ivanviladrich.com
jonathancheung.co.uk
jvsexshop.com.br
kaibeixiong.lol
kharisnight.com
koalendar.com
mutteri.kuljetusrinki.com
www.dev.listy.no
malierdogan.com
www.memoriesstudio.in
auth01.mindest.pro
mndesai.in
app.motivian.io
www.my-alert.be
app.my-union.eu
www.mydropy.com
nationsburgerstation.com
www.onderzoekportaal.nl
orutrust.com
pdpremier.com
questions.pentabilities.com
webgl.pochicon.games
embed.prima.golf
quicktree.jp
app.readonepubreader.com
sandilya.xyz
seller.sbox.shop
www.scancon.ca
selamsafety.com
www.sentryspotlight.com
www.sobiech.co.uk
solucionesintegralessilva.com
sortoutcs.com
www.sparkhousedigital.org
sparkinkgemcraft.com
sysadmin-staging.staffshift.com
app.theexamcentral.com
www.thelawcentral.com
thongnt.id.vn
sat.trato.com.br
classmanager.trelson.com
www.vantaq.net
www.vcmehub.com
vicbosa.co.ke
www.wedevnow.com
yt-embed.woofiepie.me
uploader.eu.wowworks.org
wuerfelmosaik.ch
xcala.co
www.zebri.eu
go.zikup.fr
zivotopis-online.sk
pos.zobaze.com
Other domains in certificate