DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=hdmovies23.life
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
December 20, 2025
Valid Until
March 20, 2026 41 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
6A:58:C3:2A:7F:70:0E:55:91:3D:EB:D6:38:38:14:EB:11:26:30:DD:96:06:AA:F2:1B:2C:DF:41:D4:5B:A9:5B
Alternative Names
74 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

74 domains
dhe.com.pl *.dhe.com.pl *.activesync.dhe.com.pl *.autodiscover.dhe.com.pl *.cas.dhe.com.pl *.correo.dhe.com.pl *.dev.dhe.com.pl *.eas.dhe.com.pl *.email.dhe.com.pl *.mail.dhe.com.pl *.mail1.dhe.com.pl *.mail2.dhe.com.pl *.mobile.dhe.com.pl *.mymail.dhe.com.pl *.outlook.dhe.com.pl *.owa.dhe.com.pl *.sitemap.dhe.com.pl *.sitemaps.dhe.com.pl *.staging.dhe.com.pl *.sync.dhe.com.pl *.wp.dhe.com.pl

Other domains in certificate

codientta.com *.codientta.com *.cpcontacts.codientta.com
dealcenter.xyz *.dealcenter.xyz *.mailhost.dealcenter.xyz *.ww25.dealcenter.xyz *.www.dealcenter.xyz
*.admin.dogebank.io *.airflow.dogebank.io *.analytic2-alpha.dogebank.io *.dev.dogebank.io dogebank.io *.dogebank.io *.gitlab.dogebank.io *.hostmaster.dogebank.io *.image.dogebank.io *.imap.dogebank.io *.ite.dogebank.io *.m.dogebank.io *.mail.dogebank.io *.metabase.dogebank.io *.sitemap.dogebank.io *.staging.dogebank.io *.std-superset.dogebank.io *.stg.dogebank.io *.superset-production.dogebank.io *.uat.dogebank.io *.vpn.dogebank.io *.wildcard.dogebank.io *.ws.dogebank.io *.ww1.dogebank.io *.www.dogebank.io
enlace.club *.enlace.club *.hostmaster.enlace.club *.j.enlace.club *.mail.enlace.club *.random.enlace.club *.tu.enlace.club *.v.enlace.club
*.04d8ab74-0747-4e44-8529-fb3f8ba6bbf5.hdmovies23.life hdmovies23.life *.hdmovies23.life
razvinetwork.net *.razvinetwork.net
*.cc-download.wondreshare.cc wondreshare.cc *.wondreshare.cc *.ww1.wondreshare.cc *.ww16.wondreshare.cc *.ww2.wondreshare.cc *.ww38.wondreshare.cc