DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=ggg.ca
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
December 28, 2025
Valid Until
March 28, 2026 47 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
68:6B:AA:3B:5B:10:65:9A:2D:44:57:E5:39:92:65:72:69:68:07:3A:B1:DC:EA:A5:CC:70:C4:18:3F:6C:16:EB
Alternative Names
87 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

87 domains
cheapflight.ca *.cheapflight.ca *.befr.cheapflight.ca *.in.cheapflight.ca

Other domains in certificate

artetfacts.co.uk *.artetfacts.co.uk *.our-artists.artetfacts.co.uk *.ww25.artetfacts.co.uk
*.00.autoscout24.au *.adobe.autoscout24.au autoscout24.au *.autoscout24.au *.mta.autoscout24.au *.recovery.autoscout24.au
careerinpsychology.org *.careerinpsychology.org *.ww38.careerinpsychology.org
centiry21.com *.centiry21.com
cochoutlet.com *.cochoutlet.com *.hostmaster.cochoutlet.com *.ns1.cochoutlet.com *.ns2.cochoutlet.com
fitnessmonitors.com.au *.fitnessmonitors.com.au *.random.fitnessmonitors.com.au
*.aau.ggg.ca ggg.ca *.ggg.ca
gsmarena.com.au *.gsmarena.com.au *.ww38.gsmarena.com.au
*.clickww25.hugegame.click hugegame.click *.hugegame.click *.ww25.hugegame.click
laserhairclinic291406.icu *.laserhairclinic291406.icu
*.ambassador.marketersudip.com *.ambassadorw.marketersudip.com *.ecommerce.marketersudip.com *.emails.marketersudip.com *.hardware.marketersudip.com marketersudip.com *.marketersudip.com *.marketing.marketersudip.com *.online.marketersudip.com *.www.marketersudip.com
michellesflowers.co.uk *.michellesflowers.co.uk *.ww38.michellesflowers.co.uk
nnsheatingengineer.co.uk *.nnsheatingengineer.co.uk *.ww25.nnsheatingengineer.co.uk
painpills.com *.painpills.com *.ww38.painpills.com
*.api.sekaiapk.xyz *.d.sekaiapk.xyz *.dev.sekaiapk.xyz *.m.sekaiapk.xyz *.mail.sekaiapk.xyz *.qylaeftp.sekaiapk.xyz sekaiapk.xyz *.sekaiapk.xyz *.webdisk.sekaiapk.xyz *.ww25.sekaiapk.xyz *.ww38.sekaiapk.xyz *.www.sekaiapk.xyz
smarthomegadgets.com.au *.smarthomegadgets.com.au *.ww38.smarthomegadgets.com.au
*.news.somfilms.net somfilms.net *.somfilms.net *.warar.somfilms.net
*.bi2.srs.bio *.gateway.srs.bio *.reset.srs.bio srs.bio *.srs.bio
*.lxa4o9w8i89an6yk.zahnarzt-rostock.online *.mobil.zahnarzt-rostock.online *.ww25.zahnarzt-rostock.online zahnarzt-rostock.online *.zahnarzt-rostock.online