DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=chicago.gifts
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 31, 2026
Valid Until
May 01, 2026 88 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B9:92:60:39:AA:43:CA:FA:8D:E1:4F:17:D7:BE:C0:DB:0F:17:40:9F:A9:36:30:60:90:EB:E7:F3:E3:7C:CD:CB
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
amlspotter.com *.amlspotter.com *.blog.amlspotter.com *.fb.amlspotter.com *.mobile.amlspotter.com *.test.amlspotter.com *.users.amlspotter.com

Other domains in certificate

*.adobe.blzee.com blzee.com *.blzee.com *.dash.blzee.com *.zr.blzee.com
chicago.gifts *.chicago.gifts *.mx.chicago.gifts
clubdeamigos.com *.clubdeamigos.com *.dev.clubdeamigos.com *.mymail.clubdeamigos.com
freetowinghawaii.com *.freetowinghawaii.com *.ww17.freetowinghawaii.com
impressionnumerique.com *.impressionnumerique.com *.ww38.impressionnumerique.com
*.bi.itmentor.online *.data.itmentor.online itmentor.online *.itmentor.online
janwer.com *.janwer.com *.ww11.janwer.com
jasola.com *.jasola.com *.mail.jasola.com
*.app.maitreyaradio.love *.bjgtxdev.maitreyaradio.love maitreyaradio.love *.maitreyaradio.love
*.86dfcde2-9a48-4693-9feb-1d7d8bd2d893.mend.love *.comune.mend.love *.demo.mend.love *.development.mend.love *.dhqwrgju.mend.love *.docs.mend.love *.krvmjfiq.mend.love *.lvfwpdoz.mend.love *.mail5.mend.love mend.love *.mend.love *.muhjqrnd.mend.love *.smtps.mend.love *.staging.mend.love *.stg.mend.love *.store.mend.love *.u.mend.love *.usjnerfk.mend.love *.vrwxjiqh.mend.love *.ww7.mend.love *.www.mend.love
*.dev.msgking.com msgking.com *.msgking.com
plyoball.com *.plyoball.com *.sitemap.plyoball.com
prairiehawk.com *.prairiehawk.com *.ts.prairiehawk.com
*.ebay.seginco.com *.iompostaging.seginco.com *.mail.seginco.com *.sber.seginco.com seginco.com *.seginco.com *.sitemap.seginco.com
*.home.thefuncompany.com *.login.thefuncompany.com thefuncompany.com *.thefuncompany.com
*.oak.trus.com trus.com *.trus.com
*.portal.vandevenne.com vandevenne.com *.vandevenne.com
*.rdp.viccy.com viccy.com *.viccy.com