DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=lucettelagnado.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 05, 2026
Valid Until
April 05, 2026 77 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
25:E5:CC:6A:E6:5E:7B:6A:0D:A5:44:86:5F:1A:DD:A3:99:2F:CA:12:5D:14:78:FC:16:A9:01:85:BE:05:2E:2C
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
win918.net *.win918.net *.a0326.win918.net *.bet365.win918.net *.bet777.win918.net *.br.win918.net *.csagent.win918.net *.dev.win918.net *.dev0101.win918.net *.dev0201.win918.net *.dev0301.win918.net *.dev0501.win918.net *.dev0701.win918.net *.dev0801.win918.net *.dm01.win918.net *.dm04.win918.net *.dmthb.win918.net *.en.win918.net *.home.win918.net *.mm001.win918.net *.oebet.win918.net *.p8.win918.net *.royalclub.win918.net *.th.win918.net *.vn.win918.net *.wangzheking.win918.net *.ww25.win918.net *.z8.win918.net

Other domains in certificate

1xbett.me *.1xbett.me
3xnunglon.pro *.3xnunglon.pro
afrifootball.com *.afrifootball.com
*.admin.cgvnp.info cgvnp.info *.cgvnp.info *.hostmaster.cgvnp.info *.ww1.cgvnp.info
ddpbbs.net *.ddpbbs.net
ecoinvestab.pl *.ecoinvestab.pl
lucettelagnado.com *.lucettelagnado.com
personal-loan-option-now.life *.personal-loan-option-now.life
schrr.net *.schrr.net
*.gw.stratogy.com *.mailgate.stratogy.com *.ms1.stratogy.com *.root.stratogy.com stratogy.com *.stratogy.com *.wildcard.stratogy.com
*.ad.thefutureis.digital *.af-south-1.thefutureis.digital *.ap-northeast-1.thefutureis.digital *.ap-northeast-2.thefutureis.digital *.app.thefutureis.digital *.ca-central-1.thefutureis.digital *.cdn-staging.thefutureis.digital *.cdn-v1.thefutureis.digital *.compute-1.thefutureis.digital *.compute-search.thefutureis.digital *.es.thefutureis.digital *.eu-west-3.thefutureis.digital *.geo.thefutureis.digital *.gl.thefutureis.digital *.gw.thefutureis.digital *.ha.thefutureis.digital *.limit.thefutureis.digital *.map.thefutureis.digital *.ns128.thefutureis.digital *.ns129.thefutureis.digital *.ns25.thefutureis.digital *.ns77.thefutureis.digital *.rds.thefutureis.digital *.sa-east-1.thefutureis.digital *.server.thefutureis.digital *.sessions.thefutureis.digital thefutureis.digital *.thefutureis.digital *.us-gov-east-1.thefutureis.digital *.v1.thefutureis.digital *.view.thefutureis.digital *.ww31.thefutureis.digital
xinkanpian.com *.xinkanpian.com