DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=fastderm.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
December 16, 2025
Valid Until
March 16, 2026 32 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
3A:15:6B:25:AB:69:F3:5B:39:E2:C3:C0:01:48:32:37:5C:58:00:4C:08:D0:D8:CB:F0:8E:3A:0F:1A:29:71:92
Alternative Names
85 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

85 domains
fg4376.cc *.fg4376.cc *.3ld4.fg4376.cc

Other domains in certificate

accidenfund.com *.accidenfund.com
acsyma.org *.acsyma.org
armetheon.com *.armetheon.com *.ww38.armetheon.com
fastderm.com *.fastderm.com *.job.fastderm.com *.journal.fastderm.com *.login.fastderm.com *.madrid.fastderm.com *.mailgw1.fastderm.com *.users.fastderm.com *.wg.fastderm.com
freeone.com *.freeone.com *.m.freeone.com *.mail.freeone.com *.my.freeone.com *.ph.freeone.com *.photos.freeone.com *.w.freeone.com *.ww33.freeone.com *.www-1.freeone.com *.www.freeone.com
lightfilters.com *.lightfilters.com *.random.lightfilters.com *.ww38.lightfilters.com
mgq.in *.mgq.in
multcotax.com *.multcotax.com *.ww42.multcotax.com
*.dr.paulcraigroberts.com *.facebook.paulcraigroberts.com paulcraigroberts.com *.paulcraigroberts.com *.random.paulcraigroberts.com
pennyroyal.uk *.pennyroyal.uk
*.comunicacion.staples.es *.e.staples.es *.en.staples.es *.online.staples.es *.p.staples.es *.preprod.staples.es staples.es *.staples.es *.superset.staples.es *.u.staples.es
*.helpdesk.sundaybrunch.com sundaybrunch.com *.sundaybrunch.com
*.ava.trfl5.cfd *.azz.trfl5.cfd *.bqy.trfl5.cfd *.bwt.trfl5.cfd *.cii.trfl5.cfd *.dob.trfl5.cfd *.ecu.trfl5.cfd *.ekb.trfl5.cfd *.epa.trfl5.cfd *.gfd.trfl5.cfd *.iad.trfl5.cfd *.jvu.trfl5.cfd *.ozj.trfl5.cfd *.pra.trfl5.cfd *.psu.trfl5.cfd *.rra.trfl5.cfd *.slt.trfl5.cfd *.tpr.trfl5.cfd trfl5.cfd *.trfl5.cfd *.txr.trfl5.cfd *.tzg.trfl5.cfd *.vom.trfl5.cfd *.vyd.trfl5.cfd *.ww25.trfl5.cfd *.wzq.trfl5.cfd