77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.playproductions.co.uk
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 22, 2025
Valid Until
January 21, 2026 74 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A7:90:43:23:CA:F6:F1:CE:FB:CB:1E:59:E3:E7:8E:E9:9A:81:39:08:AB:6E:71:8F:65:A4:87:EA:6F:F3:31:0B
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
qr-dashboard.polipay.io

Other domains in certificate

test.5kfoamfest.com
www.acuteplus.app
ahsanusman.com
akandereotogaleri.com
aliendeergames.com
amajgroup.com
andspacehk.com
areeba.ca
ayharano.dev
betterbin.app
www.budlinks.app
dev.businessideasintelugu.com
admin.caddiecertification.com
overture.chan.gallery
www.hungryd.co.in
www.spinsoft.co.th
staging-accounts.codedesign.app
www.craftdar.com
account.cxia.ie
datacuts.io
www.daysresidence.com
www.driaque.com
drinkbrightandsunny.com
drmarciomuller.drtis.com.br
dtanguy.fr
ducksoftware.net
egobuyback.com
ellacutler.com
enterprisetutor.com
gso.acbit.eu.org
feedbackclub.app
fiabilaspurcg.com
dev.freightday.com
fullpower.dev
getcareer.ru
3c3.getemplaza.com
link.glafie.com
gobitcoinsv.com
crush.goloti.com
www.goodinnotech.org
frame.groenebon.nl
akasaka.guruguru.shop
hipaatexts.com
sbb-auth.ibep-staging.com
www.interiorblissbylynne.com
apollonian.invessed.app
island-resortnasu.com
tasks.itclub.ro
jected.com
game.joeshort.net
jolowasa.com
www.jonathonemery.com
www.khubaibqaiser.com
korroshield.com
city.kortexweb3.com
mazda-performance.lernit.app
www.liamkande.com
lifecoin.ai
liveops.mobi
www.logically.app
app.dev.tandem-ai.logicwind.co
kara.madebysofi.com
www.meeko.com
meibun-house.com
www.admin.minorganisation.se
murphle.com
myfitnesslevel.app
www.myfreeagent.app
naoux.co
abi.nicolaischmid.de
njc-software.com
oshitrade.com
www.playproductions.co.uk
blog.plummmm.com
www.prayed4.app
prototypeforme.com
qixcept.com
querytalks.ai
dev.recirclable.app
forecast.rengydevelopment.com
vzdashboard.rmsc.nl
rockyandjess.ca
rosemountlawnandlandscaping.com
rusirii.com
searchandconveysolutions.co.uk
www.securityapex.com
silviocandido.com.br
skillaura.com
www.snapmathchallenge.com
softwarehatch.com
dev.stakecare.app
storeman.app
www.talkinghead.ai
www.thebase.ist
www.toonswinkelstandtechniek.nl
app.trustline.id
untitledshows.com
phraseetmot.vdapp.fr
wunschtraum.rocks