DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=heals.it
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 09, 2026
Valid Until
May 10, 2026 89 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
40:26:F3:15:8E:78:4D:D4:45:52:41:5D:F4:2D:1E:69:92:9E:D5:DA:A4:65:E4:34:07:1E:9A:4F:46:6C:9C:70
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
fudian.com *.fudian.com *.hr.fudian.com *.owa.fudian.com *.test-cdn.fudian.com *.ww16.fudian.com *.ww25.fudian.com

Other domains in certificate

12raja.vip *.12raja.vip *.admin.12raja.vip *.b14d1fc2-3585-408a-89fd-1681804de79c.12raja.vip *.docs.12raja.vip *.external.12raja.vip *.hostmaster.12raja.vip *.hr.12raja.vip *.portal.12raja.vip *.sharepoint.12raja.vip *.teste.12raja.vip *.vip.12raja.vip
3335688xx1.shop *.3335688xx1.shop *.com.3335688xx1.shop
anjalika.com *.anjalika.com *.m.anjalika.com *.mautic.anjalika.com *.sitemap.anjalika.com *.sitemaps.anjalika.com *.ww38.anjalika.com
apwj.com *.apwj.com *.b.apwj.com *.bia.apwj.com *.hard.apwj.com *.mta-sts.apwj.com *.push.apwj.com *.wxi.apwj.com
*.autoconfig.cctv-us.net cctv-us.net *.cctv-us.net *.demo.cctv-us.net *.random.cctv-us.net
*.ad.clublist.info *.adblock.clublist.info *.adguard.clublist.info *.agh.clublist.info *.api.clublist.info *.app.clublist.info clublist.info *.clublist.info *.dns1.clublist.info *.doh.clublist.info *.doh1.clublist.info *.go.clublist.info *.intranet.clublist.info *.ns.clublist.info *.portal.clublist.info *.resolver.clublist.info *.resolver1.clublist.info *.shop.clublist.info *.sitemap.clublist.info *.store.clublist.info
freexxx.click *.freexxx.click *.hostmaster.freexxx.click
hautenet.com *.hautenet.com
heals.it *.heals.it
iresearchnet.org *.iresearchnet.org *.ww25.iresearchnet.org
*.blog.kkaaaa.com *.forum.kkaaaa.com *.forums.kkaaaa.com kkaaaa.com *.kkaaaa.com
*.insights.pinetwork.finance pinetwork.finance *.pinetwork.finance
pixiepress.com *.pixiepress.com
*.hostmaster.turister.com *.m.turister.com *.novo.turister.com *.sitemap.turister.com turister.com *.turister.com *.ww1.turister.com *.ww16.turister.com