DNS Gurus
Cached · just now
75/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=rdiamond.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 28, 2026
Valid Until
January 26, 2027 82 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
AC:6C:98:55:BF:A3:7C:3B:26:0E:5B:FF:F6:A4:B0:FF:3C:CB:67:59:40:D0:C3:15:2F:B1:D8:17:4B:3F:EA:F1
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
rdiamond.com *.rdiamond.com *.a.rdiamond.com *.ai.rdiamond.com *.code.rdiamond.com *.food.rdiamond.com *.fr.rdiamond.com *.i87.rdiamond.com *.internet.rdiamond.com *.magento.rdiamond.com *.mail2.rdiamond.com *.mta1.rdiamond.com *.new.rdiamond.com *.newsletter.rdiamond.com *.old.rdiamond.com *.origin.rdiamond.com *.tw.rdiamond.com *.videocdn.rdiamond.com

Other domains in certificate

*.aemmobile.ccithermal.com *.amg.ccithermal.com *.asp.ccithermal.com *.blog.ccithermal.com *.campaign.ccithermal.com ccithermal.com *.ccithermal.com *.cdn.ccithermal.com *.compass.ccithermal.com *.comwww.ccithermal.com *.dev.ccithermal.com *.ezproxy.ccithermal.com *.guide.ccithermal.com *.hereweb.ccithermal.com *.invites.ccithermal.com *.itp.ccithermal.com *.jobs.ccithermal.com *.kessai.ccithermal.com *.m.ccithermal.com *.maven.ccithermal.com *.mingle-staging.ccithermal.com *.mio.ccithermal.com *.mobile.ccithermal.com *.mobilemail.ccithermal.com *.ofertas-trabajo.ccithermal.com *.old.ccithermal.com *.popcorn.ccithermal.com *.portal.ccithermal.com *.potaufeu.ccithermal.com *.prd-web.ccithermal.com *.publish.ccithermal.com *.secure.ccithermal.com *.server3.ccithermal.com *.srv.ccithermal.com *.store.ccithermal.com *.trabajo.ccithermal.com *.ug.ccithermal.com *.v2.ccithermal.com *.v5stg.ccithermal.com *.voip.ccithermal.com *.wildcard.ccithermal.com *.www.ccithermal.com
*.29cc40bd-a2a9-483d-8b28-77c4d81fad2d.dbzyw.net *.3bt.dbzyw.net *.admin.dbzyw.net dbzyw.net *.dbzyw.net *.gmo.dbzyw.net *.gwu.dbzyw.net *.keu.dbzyw.net *.lc9.dbzyw.net *.nvzr0d.dbzyw.net *.nwix1y.dbzyw.net *.o6e.dbzyw.net *.obp.dbzyw.net *.stg.dbzyw.net *.sw1.dbzyw.net *.sw1mus.dbzyw.net *.tanzi.dbzyw.net *.ukusua.dbzyw.net *.w8s.dbzyw.net *.wallet.dbzyw.net *.wicii1.dbzyw.net *.wy44ua.dbzyw.net *.zhuanjia.dbzyw.net
*.anyconnect.wholeheartedsocialmedia.com *.exchange.wholeheartedsocialmedia.com *.rd.wholeheartedsocialmedia.com *.vpnssl.wholeheartedsocialmedia.com wholeheartedsocialmedia.com *.wholeheartedsocialmedia.com