Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=mergeleague.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 08, 2026
Valid Until
November 07, 2026 89 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D1:CF:87:4F:A2:4E:32:A3:07:67:D7:2E:4C:EF:EB:4F:94:95:94:B5:DA:ED:45:C7:6A:BC:92:73:FB:27:64:C5
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
www.axonlab.tech

Other domains in certificate

2600fitfest.com
demo.3past7.de
www.acquiregame.io
suppliers.alaarabea.com
algisipetcare.ch
www.apartment-nice.com
thiruvallur.aravindtravels.in
finance.arcehub.cl
greencarbon.basehit.com.br
blauwevlinder.be
www.buildingtherapies.com
byteepoch.dev
sable.camelloapp.com
www.centrohogarenmanuel.com
samantha.chekt.com
www.cube.danrcohen.com
daydreamcode.eu
demo.dezifi.ai
edwincaspers.nl
eotech.com.tr
evenvehicle.com
fidooo.com
staging.peru.fitpass.app
www.futbol-akademija.com
gamestudio17.com
garden-tracker.com
getevoapp.com
www.gothewholewideworld.com
insutrack.grsp.ch
o2up.gruppo4d.com
madhankumar-poornima.gysite.in
app.hariel.co.il
www.hotelroyalgardendaman.in
scc.icwd.co
inkomenslastentoets.nl
iskconapp.com
italkdoc.com
jacobgold.me
chat.jitsu.ninja
johanekroth.com
juliapp.in
app-dev.justonechesed.org
kagalakan.info
datacapacity.keshif.me
qlweather.kuhi.to
unews.livebusinessupdate.com
paperclip.lordos.tech
app.staging.mega.lol
memewarsusa.com
mergeleague.com
www.mirayes.com
mmpjo.com
msabbott.co.uk
www.mushroomtales.in
www.nerdshub.co.in
app.ninjasalary.com
optimacc.com
yonani-app.oz-tms.com
admin.paiazo.app
parkwhisperer.net
www.pivaz.it
m.pixical.com
console.plancknetwork.com
authuser.praktika.de
admin.prismpaintutah.com
auth.projectocasta.org
pubhalls.com
www.qrbring.com
krishnagiri.rainbowsdroptaxi.com
ricobeti.ch
www.rolling-dinner.com
s.scannow.gg
seesmexico.com
app.shiftly.net.au
shurooqal.com
silvanadrian.ch
www.sktech.tk
www.smitetroll.com
macutriviabtripodi.sqwadhq.com
stst-jp.com
tacolulu.com
tandcmutual.com www.tandcmutual.com
teddykossoko.com
teddyphoto.com
telltouch.co.nz
www.temporalflux.co.uk
thisheat.org
admin.trotapinares.com
dev.turtletank.org
www.tusoft.us
tuttalaromea.it
twistaura.com
qa.usesidebar.ai
storage.vendpark.io
vendresonfondsdecommerce.fr
www.wealthawk.com
whlth.com
yasserali.org