DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=sparkmovementfit.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
December 18, 2025
Valid Until
March 18, 2026 36 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
42:39:21:2A:9C:8D:36:E2:C8:EC:B4:6B:10:32:D5:A3:2B:4B:B8:81:B2:07:19:83:43:F9:F2:AC:2A:BE:23:03
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
imagen.com *.imagen.com *.andreinaflores.imagen.com *.anime.imagen.com *.bison.imagen.com *.crane.imagen.com *.dingo.imagen.com *.emn.imagen.com *.ffffffffffff.imagen.com *.gatekeeper.imagen.com *.google.imagen.com *.mi.imagen.com *.moira.imagen.com *.omarenciso.imagen.com *.pro.imagen.com *.reciclaje.imagen.com *.ros.imagen.com *.sales.imagen.com *.tu.imagen.com *.webmail.imagen.com *.ww16.imagen.com *.ww25.imagen.com

Other domains in certificate

*.8dd9bd0a-2138-4863-9e72-c16728f39638.aepohi.com *.admin.aepohi.com aepohi.com *.aepohi.com *.analytic.aepohi.com *.analytics.aepohi.com *.api.aepohi.com *.app.aepohi.com *.b4cb4443-138a-413a-980c-7c4f7d06dd96.aepohi.com *.backup.aepohi.com *.bbs.aepohi.com *.beta.aepohi.com *.blog.aepohi.com *.crm.aepohi.com *.da7edc4b-1211-47d2-b937-dc27fdfeffef.aepohi.com *.data.aepohi.com *.dev.aepohi.com *.edu.aepohi.com *.explore.aepohi.com *.explorer.aepohi.com *.forum.aepohi.com *.forums.aepohi.com *.fpbavstg.aepohi.com *.insights.aepohi.com *.intelligence.aepohi.com *.intranet.aepohi.com *.jenkins.aepohi.com *.knxxjbi.aepohi.com *.m.aepohi.com *.mail.aepohi.com *.mailer.aepohi.com *.marketing.aepohi.com *.member.aepohi.com *.metrics.aepohi.com *.ndom.aepohi.com *.new.aepohi.com *.office.aepohi.com *.online.aepohi.com *.panel.aepohi.com *.portal.aepohi.com *.qa.aepohi.com *.random.aepohi.com *.rd.aepohi.com *.rds.aepohi.com *.remote.aepohi.com *.reporting.aepohi.com *.scm.aepohi.com *.secondary.aepohi.com *.shop.aepohi.com *.stg.aepohi.com *.store.aepohi.com *.superset.aepohi.com *.temp.aepohi.com *.test.aepohi.com *.uat.aepohi.com *.ubyarreport.aepohi.com *.v2.aepohi.com *.web.aepohi.com *.www.aepohi.com *.xzckymetrics.aepohi.com
*.lzpeuinen8.sparkmovementfit.com *.m.sparkmovementfit.com *.old.sparkmovementfit.com sparkmovementfit.com *.sparkmovementfit.com *.test.sparkmovementfit.com *.webdisk.sparkmovementfit.com