DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt Active incidents

Certificate Information

Subject
CN=nationwideasbestos.co.uk
Issuer
C=US, O=Let's Encrypt, CN=YR1
Valid From
June 01, 2026
Valid Until
August 30, 2026 87 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
EB:87:06:65:A6:A6:54:4C:05:37:9D:9F:05:01:85:7F:14:42:71:51:02:F2:20:1A:4E:8F:A1:09:3A:DB:43:15
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
avationweather.com *.avationweather.com

Other domains in certificate

*.0022.93.be *.142.93.be *.163.93.be *.209.93.be *.338.93.be 93.be *.93.be
beautyadvisor.au *.beautyadvisor.au *.ww25.beautyadvisor.au *.ww38.beautyadvisor.au
bollandbranch.me *.bollandbranch.me
cameltoecity.com *.cameltoecity.com
ces7fv1t.com *.ces7fv1t.com *.helpdesk.ces7fv1t.com *.ww25.ces7fv1t.com *.ww38.ces7fv1t.com
comingofchrist.com *.comingofchrist.com *.ww25.comingofchrist.com *.ww38.comingofchrist.com
elvalipotec.com *.elvalipotec.com *.ildcard.elvalipotec.com *.ww38.elvalipotec.com
fendi90years.com *.fendi90years.com *.ww16.fendi90years.com *.ww38.fendi90years.com *.www.fendi90years.com
kalloch.com *.kalloch.com *.mail.kalloch.com
*.der.landtravel.com landtravel.com *.landtravel.com *.ww25.landtravel.com
*.administrator.nationwideasbestos.co.uk *.ftp.nationwideasbestos.co.uk *.mx.nationwideasbestos.co.uk nationwideasbestos.co.uk *.nationwideasbestos.co.uk *.owa.nationwideasbestos.co.uk *.remote.nationwideasbestos.co.uk *.webmail.nationwideasbestos.co.uk
*.admin.passoin.com *.hd.passoin.com passoin.com *.passoin.com *.ww38.passoin.com
*.mail.pharmlex.com pharmlex.com *.pharmlex.com *.random.pharmlex.com *.ww16.pharmlex.com
*.caam.sbc-global.net *.cache.sbc-global.net *.cpanel.sbc-global.net *.kjzx.sbc-global.net sbc-global.net *.sbc-global.net *.ww38.sbc-global.net
*.random.shpgoodwill.com shpgoodwill.com *.shpgoodwill.com *.ww25.shpgoodwill.com *.ww38.shpgoodwill.com
*.cicd.streameasy.to *.staging.streameasy.to streameasy.to *.streameasy.to *.v2.streameasy.to *.ww38.streameasy.to
tacticalshotgun.com *.tacticalshotgun.com *.ww5.tacticalshotgun.com
teenidol.com.au *.teenidol.com.au *.ww25.teenidol.com.au *.ww38.teenidol.com.au
thenewyorkpalace.com *.thenewyorkpalace.com
traillers.com *.traillers.com