DNS Gurus
Open Cached · just now
85/100 SECURITY SCORE

Certificate Information

Subject
C=US, ST=Minnesota, O=Entrust Corporation, CN=entrust.com
Issuer
C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA OV R36
Valid From
October 28, 2025
Valid Until
October 28, 2026 355 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
97:A5:13:65:26:23:7B:2D:11:D4:CC:D9:7A:E2:DF:1D:36:9D:24:BF:AE:45:3A:43:55:D8:73:DA:E2:2B:37:D0
Alternative Names
40 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

CAA Records (Certificate Authority Authorization)

CAA Records
Configured (Restricts certificate issuance)
Current Issuer
Authorized (Matches CAA policy)
Authorized CAs
letsencrypt.org sectigo.com entrust.net
Recommendations
  • • Consider using critical flag (flags=128) for stricter CAA enforcement
  • • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
  • • Consider adding 'issuewild' records to control wildcard certificate issuance