Open
Cached
·
just now
95/100
SECURITY SCORE
Certificate Information
Subject
CN=*.pp.mrd.com
Issuer
C=US, O=Amazon, CN=Amazon RSA 2048 M04
Valid From
October 17, 2025
Valid Until
November 15, 2026
321 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
0D:FE:89:FF:05:C9:9A:2E:DF:B5:16:55:FB:ED:E9:10:36:CF:99:9D:73:99:4C:88:7F:5A:93:7A:C6:26:AD:B1
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=31536000; includeSubDomains; preload
Content-Security-Policy
Good
default-src; style-src; child-src; +14 more
default-src 'self' https://www.google.com;style-src 'self' 'unsafe-inline' https://*.googleapis.com https://*.google.com https://mrd-food-marketplace-images-prod.s3.eu-west-1.amazonaws.com;child-src 'self' 'nonce-1df0e803-1911-4876-ac34-f387bd776da3' https://order.pp.mrd.com;frame-src 'self' https://*.google.com https://*.snapchat.com https://*.doubleclick.net 'nonce-1df0e803-1911-4876-ac34-f387bd776da3' https://order.pp.mrd.com;connect-src 'self' https://*.googleapis.com https://*.google.com https://*.gstatic.com https://*.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://*.snapchat.com https://*.clarity.ms https://*.bing.com https://*.facebook.com https://sentry.io 'nonce-1df0e803-1911-4876-ac34-f387bd776da3' https://api.pp.mrd.com https://takealot1461247963.zendesk.com;script-src-attr 'unsafe-inline';font-src 'self' https://fonts.gstatic.com data: https://mrd-food-marketplace-images-prod.s3.eu-west-1.amazonaws.com;form-action 'self' https://tr.snapchat.com;img-src 'self' https://*.googleapis.com https://*.gstatic.com https://*.google.com https://*.googleusercontent.com https://*.google-analytics.com https://*.googletagmanager.com https://t.co https://*.twitter.com https://*.bing.com https://*.facebook.com https://*.qccerttest.com https://*.quantserve.com https://*.google.co.za https://*.clarity.ms data: https://img.pp.mrd.com;script-src 'self' 'unsafe-inline' https://*.google.com https://*.googletagmanager.com https://*.google-analytics.com 'nonce-1df0e803-1911-4876-ac34-f387bd776da3' https://order.pp.mrd.com;base-uri 'self' about:;report-uri /api/csp-violation;report-to /api/csp-violation;frame-ancestors https://order.pp.mrd.com;block-all-mixed-content;object-src 'none';upgrade-insecure-requests
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Present
geolocation=(self "https://order.pp.mrd.com")
Recommendations
- • Strengthen CSP by removing 'unsafe-eval'
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
- • Consider adding 'issuewild' records to control wildcard certificate issuance