Open
Cached
·
just now
80/100
SECURITY SCORE
Certificate Information
Subject
CN=www.michaelwillmott.co.uk
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 27, 2025
Valid Until
February 25, 2026
81 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
22:2C:C1:6A:8F:4E:08:EE:A5:72:6E:A6:F5:2B:79:36:82:5C:9F:88:6B:E2:67:B1:F2:DE:8C:7B:F2:49:AD:A5
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
Wildcard CAs
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • You have authorized 5 CAs - consider limiting to only the CAs you actively use
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
Subject Alternative Names
100 domains
superblackgames.com
axona.in
auth.bankio.co.uk
www.betninja.pro
bsovi.com
www.charlesbrianhead.com
dev.maltia.cleversecdesarrollo.app
www.rsei.co.in
bidesh.com.np
hhmobile.com.vn
condicandy.com
contratosabiertos-bo.org
www.dance-virus.com
droidmakk.dev
clinicapluris.drtis.com.br
stu247-link.ehubstar.com
www.erdz.org
www.everyours.de
fasti.space
fatihsanal.net
duxreapp.garwinpryce.info
gccdigitals.com
www.frame.groenebon.nl
art.guillaumeisabelle.com
almaty.mobilitymonitor.habidatum.com
app.hadronai.com
fr.happysports.app
www.hochschulsportmuenster.de
ifferent.com
www.inclusivefuturefoundation.org
www.inky.dev
www.intouchhr.pl
hw-001.jerryibrahim.com
jijig.co.uk
jkoimarket.com
jotaifriends.dev
hamina-dev.kesselrun.dev
kesselrun.xyz
www.kodapay.ng
kubakh.name
www.kunst-bild.ch
www.lawili.com
www.leoz.it
ourwedding.letter-weddio.com
lhv2.pt
stage.limitlessminds.com
www.lohnn.se
avalanches.lupi.delivery
manuelparra.dev
www.mapleinvoices.com
widgets.marketcheck.com
www.meestory.hu
mermaidexport.net
www.michaelwillmott.co.uk
micto.info
app-homolog.minascap.com
mintko.com
www.miyakosystemengineering.dev
mohddanishkhan.com
moonscion.com
nkotattoo.com
app-starknetkit-v1.nostra.finance
onedoesnotsimp.ly
oodledocs.com
products-dev.ordercloud.com
www.orgchartgo.com
www-test.originsme.com
www.outsidethebunker.com
paicanducred.com.br
www.long2.pedidomovil.es
pensionspenguin.com
mediva.pharmanerd.online
present.photowish.com
www.physix.in
www.beta.planostim.online
rainydaysapp.com
rawfatcats.com
next.gem.referee.golf
www.rocktowntv.com
rootstone.jp
app.se-bayern.de
links.uat.selfsea.org
www.servicefromhome.com
sgj-gems.com
sigerowatch.com
infinitycrm.sitegator.in
login-int.skykit.com
www.solarmed.pl
pioleaguegrandjunctionpredict.sqwadhq.com
share.stat-stars.com
www.stonksroyale.com
amng.stylers.cloud
tlb-college.com
demo.trackmygiving.com
staging.vendpark.io
mail.webcrft.com
whatsmyweight.com
www.xcala.co
xtranslate.ru
link.yolabs.com
Other domains in certificate