DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=alicianegron.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
December 26, 2025
Valid Until
March 26, 2026 43 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
3D:A5:4B:FB:64:31:F2:5A:9F:88:5C:B3:6D:CE:AE:7B:D2:D3:CA:C3:B9:BA:45:45:EA:98:47:51:FD:21:E0:D3
Alternative Names
88 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

88 domains
shopee.sh *.shopee.sh *.ad.shopee.sh *.annuairedunet.shopee.sh *.attmail.shopee.sh *.aufserver4.shopee.sh *.backend.shopee.sh *.bandi2000.shopee.sh *.chatbot.shopee.sh *.clone.shopee.sh *.foms.shopee.sh *.help.shopee.sh *.infra.shopee.sh *.live-test.shopee.sh *.livestream.shopee.sh *.livetech.shopee.sh *.mms.shopee.sh *.ph.shopee.sh *.seller.shopee.sh *.staging.shopee.sh *.test.shopee.sh *.thirdparties.shopee.sh *.tracking.shopee.sh *.vod.shopee.sh *.ww25.shopee.sh

Other domains in certificate

alicianegron.com *.alicianegron.com *.blog.alicianegron.com *.nursingnow.alicianegron.com
cullinan.digital *.cullinan.digital
debilligflug.de *.debilligflug.de *.random.debilligflug.de
ferienwohnung-mewes.de *.ferienwohnung-mewes.de *.random.ferienwohnung-mewes.de
*.d.galaxie.de galaxie.de *.galaxie.de *.rc.galaxie.de
genalogienetz.de *.genalogienetz.de *.random.genalogienetz.de
grossman-menyu.site *.grossman-menyu.site
lilmaver.site *.lilmaver.site
luxus.au *.luxus.au *.mailserver.luxus.au *.ww38.luxus.au
meds24.site *.meds24.site
moviesheist.site *.moviesheist.site
*.4d0c7462-4c5a-4ac7-9b99-0fd6dd758ed7.outdoorbars.com.au *.c5ae1926-4117-4404-9d58-a5fe64ef69d1.outdoorbars.com.au *.m.outdoorbars.com.au outdoorbars.com.au *.outdoorbars.com.au *.www.outdoorbars.com.au
rawfree.io *.rawfree.io *.ww16.rawfree.io
*.heatmap.rutan.io *.link.rutan.io *.links.rutan.io rutan.io *.rutan.io *.www.rutan.io
theak.com *.theak.com *.www.theak.com
*.api.transport.bio *.geo.transport.bio *.reports.transport.bio transport.bio *.transport.bio *.truck.transport.bio *.webservice.transport.bio *.webservices.transport.bio *.www.transport.bio
xn--rhrenlampen-rfb.de *.xn--rhrenlampen-rfb.de
*.31.xx478peiupp7qxm2qs3w7w.com xx478peiupp7qxm2qs3w7w.com *.xx478peiupp7qxm2qs3w7w.com