Open Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=events.mercyships.org.uk
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 07, 2025
Valid Until
January 05, 2026 45 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
47:37:B4:99:12:E7:F6:39:DB:0F:0F:9E:04:30:20:31:F8:69:F3:78:40:9D:66:0E:D3:7F:19:25:F7:F6:EE:8F
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
sparkoftrade.com

Other domains in certificate

11521261.stratics.io
agilesprintsolutions.com
agsecurityresearch.com
newarkgaming.alexlockhart.me
www.amiprojects.io
anagramfinder.co.uk
courses.banoqabil.pk
bayview-harbour.com.au
www.biblicana.com
bjkdigital.com
borishe.com
bullshit.wtf
www.caligolabs.com
chief.clau.io
www.click-clock.com
platform.cloudious.net
body-weight.dh.co.at
www.chessmoney.co.th
nanistudy-dev.oneclass.com.tw
www.ctkca.com
dawn-clock.com
desconfieja.com
discolive.app
stage.dope.domains
q2-nps.dpdlocal.co.uk
e-arch.co.uk
portal.eaiamigo.com.br
farhan.elmizan.com
start.anwenderforum-smart-textiles.enra.app
expo.fishfacts.fo
fixthis.app
s2.freeup.app
ui.gaapunity.app
www.gertrude.tech
web.godigi.app
gravenight.app
www.greener-buildconstruction.co.uk
report.grmechanical.co.uk
www.staging.growcentralstation.com
www.haeywa.ai
donate.hivepass.app
ddlong07.id.vn
www.imcomex.com.mx
www.kohinoordiepolish.com
app.komerzio.net
kotlinquiz.com
polymer.lirujia.com
www.livestreams-voor-theaters.nl
benih-test.lumbungkedai.com
www.lynnandedcarl.com
machupicchu.viajes
makeawebdream.com
margueritemoods.fr
intro.mayamd.ai
events.mercyships.org.uk
www.mergersub.com
app.moonlightapp.co
firebase.muzigal.com
nass.im
testomgeving.neerlandia.com
adminsite.nivethacrackers.com
clemson.nkportfolio.com
www.northmiamibeachpermits.com
alpha.opengrid.xyz
login.otomi.ai
games.pablosspot.com
afswealth.portfoliolink.co.za
auth.quantilever.com
obc.queliga.com
www.ram3n.com
www.ramgarhiasewaksabhakolkata.com
ieteikumi.rdks.lv
www.riccardosuardi.com
jc01-cal.riyo.io
ryan.romanch.uk
roundu.uk
rubion.it
www.runbot.app
m.sgfv.be
www.shuttlepay.jp
registration.test.skipr.ninja
stephenjanrei.com
stoodfarback.com
thesimpleclub.net
thesperia.it
www.thestacks.io
www.tiui.mx
explorer.tokenwolf.trade
tomflyons.com
uboh.info
privacid.uywapets.com
www.vazquezconsultores.com.mx
test.villagemap.net
www.vinamravaani.com
www.vipapp.com.br
www.wearelomo.com
welinq.xyz
whoisyari.com
admin.ritzmed.wowdesk.jp