Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=eats.sparwerx.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 18, 2025
Valid Until
January 16, 2026
54 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B3:CD:55:5E:B4:50:12:1F:25:BB:01:57:10:52:9F:FD:F7:CA:81:FC:F8:C0:8C:93:A4:45:9F:1F:22:D4:D2:33
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
khushibudhwar.ca
options.21ifm.com
www.affordableappliance.net
agamaengenharia.com.br
www.agamaengenharia.com.br
www.aimtambala.com
alhikmahglobal.com
allmond.dev
newsite.alrehwan.com
apftapp.com
asistentevisual.com.ar
crypto.asmar.work
www.audreylininger.com
samples.azure-vr.com
dev.dashboard.azzle.com
backoffice-dev.balance-emotionnelle.fr
www.berktunc.com
dev.blushedapp.com
test.bmarken.com
issuer.brex.vc
relamem.calexo.com
codesearch.calyxhealth.com
roi.captron-solutions.com
staging.api.ch00ze.co
cts-staging-api.closedcaptionconverter.com
copthon.org
www.damatoelectricidad.com
manager.dkvapp.dkv.be
dlombasegglvodralb.de
demo.dyware.com
echobridge.io
emaislab.com.br
epageot.com
link.epap.app
mta-sts.exabel.com
funkcijait.com
www.gestorgip.app
dashboard.getchatty.com.au
global-ai-hub.com
app.gonerdify.com
merchant.heycitrus.com
www.holyfamilycenterforlife.com
app.trial.hu-care.com
quiz.inclose.com.au
www.josiahrininger.com
www.karenmedicus.com
celestialsphere.kevinbigay.dev
pet-playground.kreatewebsites.com
la-calculatrice-aurep.com
demo.gateway.labcare.cloud
www.m4ttbit.dev
transform-x.madebyenzo.com
pic-alteatec.mentor.neccton.com
neuteeclothing.com
nosuapps.com
okayuhotel.com
oppo-studio.com
app.dev.panda-cloud.co.uk
panda-patrimoine.fr
app-stage.paradisefoods.com
www.pardiikidz.com
performartech.com.br
user.phonetag.co
splitter.pierresucker.com
pscm.piticommerce.com
placementshare.co.za
www.plansandbills.com
playjoz.com
poetryofthemachine.com
www.porays.com
pranavbadgi.com
prochac.cz
propelhire.com
przyczepyargocar.pl
pyralabs.xyz
thanjavur.rainbowsdroptaxi.com
tirunelveli.rainbowsdroptaxi.com
tiruvannamalai.rainbowsdroptaxi.com
trichy.rainbowsdroptaxi.com
www.reflectonearth.com
www.rosshollingsworthjohnston.com
www.sadnoxx.com
stage.sealog.co.uk
seedsgame.com
sheikmohideen.com
shipzzer.com
simplelifegame.com
sohamdaga.com
eats.sparwerx.com
samaroham-offline-donations.statueofequality.org
symbiosum.nl
tanyawedsaman.com
app.tribeoutdoors.co
urjaap.com
www.vahebi.se
meu.vendergas.com.br
www.whatsmyweight.com
wiresareobsolete.com
xvistolittia.fun
www.zhinestark.xyz
Other domains in certificate