DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=chainagoods.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 07, 2026
Valid Until
May 08, 2026 88 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
99:A2:88:B7:B6:08:C6:44:90:B5:C1:D3:54:9F:11:85:20:07:40:5D:08:2A:70:2F:03:3B:8A:E9:3F:6B:0E:AA
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
centralismo.com *.centralismo.com *.beta.centralismo.com *.random.centralismo.com

Other domains in certificate

anipo.link *.anipo.link
balancetransfers.com.au *.balancetransfers.com.au
chainagoods.com *.chainagoods.com *.cpcontacts.chainagoods.com
*.app.chatragazze.it chatragazze.it *.chatragazze.it
cleverbrewing.com.au *.cleverbrewing.com.au *.ww38.cleverbrewing.com.au
ctenarskyklub.cz *.ctenarskyklub.cz
eveskiss.com.au *.eveskiss.com.au *.random.eveskiss.com.au *.ww38.eveskiss.com.au
*.app.fastshopai.com fastshopai.com *.fastshopai.com *.jukebo.fastshopai.com *.spring-api-lunar.fastshopai.com
*.desktop.formasi.it formasi.it *.formasi.it
knorth.com *.knorth.com *.relay.knorth.com *.tdban.knorth.com *.vgceroiha.knorth.com
*.2210.masssenddark.live *.230.masssenddark.live *.2316.masssenddark.live *.2317.masssenddark.live masssenddark.live *.masssenddark.live *.wildcard.masssenddark.live *.www.masssenddark.live
meilinksafe.com *.meilinksafe.com *.random.meilinksafe.com *.w.meilinksafe.com *.ww25.meilinksafe.com *.ww38.meilinksafe.com
no207az.com *.no207az.com
onlinepaymentsystems.com.au *.onlinepaymentsystems.com.au *.ww25.onlinepaymentsystems.com.au
parkhomenko.com *.parkhomenko.com
portabletrainer.com *.portabletrainer.com
powerboost.pro *.powerboost.pro
relish.at *.relish.at
safeguardretirement.com *.safeguardretirement.com *.wildcard.safeguardretirement.com *.ww1.safeguardretirement.com *.ww16.safeguardretirement.com *.ww25.safeguardretirement.com *.ww38.safeguardretirement.com
*.anal.sexfilmen.de *.sex.sexfilmen.de sexfilmen.de *.sexfilmen.de
sleepcare.us *.sleepcare.us *.static.sleepcare.us
vipgallery.com *.vipgallery.com *.vpn.vipgallery.com *.www.vipgallery.com
*.random.xn--sstdtereisen-icb.de xn--sstdtereisen-icb.de *.xn--sstdtereisen-icb.de
*.secure.yanngsetiaaa.click *.sitemap.yanngsetiaaa.click *.ww25.yanngsetiaaa.click *.ww38.yanngsetiaaa.click yanngsetiaaa.click *.yanngsetiaaa.click