DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=socalcottages.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 19, 2026
Valid Until
May 20, 2026 88 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
DB:1E:58:FB:8D:C3:8A:C6:1B:8A:80:7E:22:E6:72:5E:BB:AC:9C:7A:72:87:9D:8B:31:A3:77:24:BE:44:02:75
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
nonol.com *.nonol.com *.access.nonol.com *.admin.nonol.com *.api.nonol.com *.asa.nonol.com *.autoconfig.nonol.com *.autodiscover.nonol.com *.backup.nonol.com *.cisco.nonol.com *.ciscovpn.nonol.com *.cloudvpn.nonol.com *.cpanel.nonol.com *.cpcalendars.nonol.com *.cpcontacts.nonol.com *.dev.nonol.com *.email.nonol.com *.exchange.nonol.com *.gateway.nonol.com *.gp.nonol.com *.imap.nonol.com *.mail.nonol.com *.portal.nonol.com *.ra.nonol.com *.remote.nonol.com *.secure.nonol.com *.ssl.nonol.com *.sslvpn.nonol.com *.store.nonol.com *.test.nonol.com *.vpn.nonol.com *.ww1.nonol.com *.ww17.nonol.com *.ww25.nonol.com

Other domains in certificate

abarca.com *.abarca.com *.anyconnect.abarca.com *.apiarios.abarca.com *.asa.abarca.com *.careers.abarca.com *.ce.abarca.com *.cisco.abarca.com *.ciscovpn.abarca.com *.cloud.abarca.com *.cloudvpn.abarca.com *.confluence.abarca.com *.connect.abarca.com *.cpanel.abarca.com *.cpcalendars.abarca.com *.finques.abarca.com *.ftp.abarca.com *.gate.abarca.com *.ivan.abarca.com *.kl.abarca.com *.mvideo.abarca.com *.ojqojm.abarca.com *.ra.abarca.com *.ravpn.abarca.com *.relay.abarca.com *.remote.abarca.com *.secure.abarca.com *.ssl.abarca.com *.wiki.abarca.com *.ww1.abarca.com *.ww11.abarca.com
*.applications.bestmix.it bestmix.it *.bestmix.it *.connect.bestmix.it *.email.bestmix.it *.go.bestmix.it *.mywork.bestmix.it *.post.bestmix.it *.remoteon.bestmix.it *.vpn2x.bestmix.it *.vpnpa.bestmix.it
*.app.fantasyjumpshot.com fantasyjumpshot.com *.fantasyjumpshot.com *.sitemap.fantasyjumpshot.com *.sitemaps.fantasyjumpshot.com
*.admin.socalcottages.com socalcottages.com *.socalcottages.com *.x-domainkey.socalcottages.com
*.sitemap.xinaobo.net *.vpn.xinaobo.net xinaobo.net *.xinaobo.net