DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=crossovers.com.au
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
December 27, 2025
Valid Until
March 27, 2026 43 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
7C:EA:28:A9:2C:EC:D7:3E:0C:8E:23:66:1E:78:9C:97:2B:A7:53:6C:F3:6E:99:2B:9B:9B:48:DE:79:3C:C9:AE
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
brainstack.com.au *.brainstack.com.au *.2men.brainstack.com.au *.brainstackhubcom.brainstack.com.au *.bs.brainstack.com.au *.chinnok.brainstack.com.au *.demo.brainstack.com.au *.fzengineering.brainstack.com.au *.letstriagepk.brainstack.com.au *.luke.brainstack.com.au *.messymum.brainstack.com.au *.mycrm.brainstack.com.au *.sbp.brainstack.com.au *.scelta.brainstack.com.au *.secure.brainstack.com.au *.ws.brainstack.com.au *.wulp.brainstack.com.au

Other domains in certificate

aeron-training.co.uk *.aeron-training.co.uk
alcovebar.com.au *.alcovebar.com.au *.argo.alcovebar.com.au *.com.alcovebar.com.au *.data.alcovebar.com.au *.kafka.alcovebar.com.au *.preview.alcovebar.com.au *.ww25.alcovebar.com.au *.ww38.alcovebar.com.au *.www.alcovebar.com.au
catlii.online *.catlii.online *.sitetest1.catlii.online
crossovers.com.au *.crossovers.com.au
doctrine-prod.tech *.doctrine-prod.tech
*.affiliates.hostinger.cm hostinger.cm *.hostinger.cm *.ww38.hostinger.cm
ikametvip.com *.ikametvip.com *.www.ikametvip.com
kandles.uk *.kandles.uk
*.bvzweqod.kardiolog-garwolin.pl *.fpmsr.kardiolog-garwolin.pl kardiolog-garwolin.pl *.kardiolog-garwolin.pl *.rlxgvrom.kardiolog-garwolin.pl *.rnqkdtu.kardiolog-garwolin.pl
*.ajh.knjw1.homes *.eou.knjw1.homes *.epw.knjw1.homes *.hnk.knjw1.homes knjw1.homes *.knjw1.homes *.random.knjw1.homes *.upi.knjw1.homes
mathsproblemsolving.com *.mathsproblemsolving.com *.ww38.mathsproblemsolving.com
*.175792405894823720.mustangcard.com *.comune.mustangcard.com *.crm.mustangcard.com *.lbvvfwww.mustangcard.com mustangcard.com *.mustangcard.com *.mx.mustangcard.com *.out.mustangcard.com *.smtpmail.mustangcard.com *.ww25.mustangcard.com *.www.mustangcard.com
*.gbeqdx2bxn.rareestudy.site rareestudy.site *.rareestudy.site
sawadikap25.click *.sawadikap25.click
style-hairandbeauty.co.uk *.style-hairandbeauty.co.uk
*.tui.v50help.me v50help.me *.v50help.me
*.random.webconference.com.au webconference.com.au *.webconference.com.au *.ww25.webconference.com.au
weeleyinbloom.co.uk *.weeleyinbloom.co.uk