DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=bgreen.construction
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 05, 2026
Valid Until
May 06, 2026 84 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
45:77:EF:31:ED:D2:F4:95:F2:DE:AC:6F:8C:FC:56:B5:56:9E:52:23:F2:F6:47:5F:3F:CF:5B:CC:57:22:2A:67
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
bpl.ch *.bpl.ch

Other domains in certificate

bgreen.construction *.bgreen.construction
biomedinet.com *.biomedinet.com
blackseed.it *.blackseed.it
blibli.in *.blibli.in
blockchainphobia.com *.blockchainphobia.com
box88.best *.box88.best
breathesportswear.com *.breathesportswear.com
bu-experten.com *.bu-experten.com
businessflix.cfd *.businessflix.cfd
businessvoice.org *.businessvoice.org
buytheatretickets.com *.buytheatretickets.com
bx817.com *.bx817.com
cafepatika.com *.cafepatika.com
canadass.com *.canadass.com
cashdomains.com *.cashdomains.com
casinoffers-au.com *.casinoffers-au.com
casinolevant1720.com *.casinolevant1720.com
cclondres.org *.cclondres.org
chauffeur.cc *.chauffeur.cc
choivua88.shop *.choivua88.shop
chrishoffmann.org *.chrishoffmann.org
cmdkeyzz.xyz *.cmdkeyzz.xyz
cnameweb789.vip *.cnameweb789.vip
cohleycompanyengage.com *.cohleycompanyengage.com
conundrum.org *.conundrum.org
corporate-software-directory.click *.corporate-software-directory.click
cqzfcw.cam *.cqzfcw.cam
culniosdalaryhub.shop *.culniosdalaryhub.shop
cyberneticrevolt.com *.cyberneticrevolt.com
deeplinks.org *.deeplinks.org
dietitians-light-352044402.click *.dietitians-light-352044402.click
dificoins.com *.dificoins.com
digitalke.com *.digitalke.com
discoversouthdakota.org *.discoversouthdakota.org
ditty.it *.ditty.it
diyinnovationlab.xyz *.diyinnovationlab.xyz
domesticapplianceparts.com *.domesticapplianceparts.com
dxufrwf.us *.dxufrwf.us
dybwj.pro *.dybwj.pro
e5464993.vip *.e5464993.vip
e5484332.vip *.e5484332.vip
esh2qfesnekesfn.xyz *.esh2qfesnekesfn.xyz
evpick.com *.evpick.com
f64435940.com *.f64435940.com