DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=deepexchange.tech
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 03, 2026
Valid Until
May 04, 2026 83 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D9:74:88:43:23:CE:5D:2B:E7:B3:8A:A4:7D:D7:D1:83:B1:D8:EA:23:F4:E1:7D:64:7D:8F:C6:A8:E6:80:0F:CC
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
homepics.com *.homepics.com

Other domains in certificate

142011.com *.142011.com
18885.loan *.18885.loan
208273.vip *.208273.vip
25925.loan *.25925.loan
297228.loan *.297228.loan
322houuoh-jiasusujia09.com *.322houuoh-jiasusujia09.com
41455.locker *.41455.locker
44971646.top *.44971646.top
51017.academy *.51017.academy
513044.mobi *.513044.mobi
55503.locker *.55503.locker
67332.locker *.67332.locker
aifuelcells.com *.aifuelcells.com
byramhealtgcare.com *.byramhealtgcare.com
certifiedelectronicmail.com *.certifiedelectronicmail.com
datafromtheblockchain.com *.datafromtheblockchain.com
deepexchange.tech *.deepexchange.tech
dmlap.shop *.dmlap.shop
dqfanfeedbback.com *.dqfanfeedbback.com
drus.org *.drus.org
e4yf12m.cyou *.e4yf12m.cyou
ecoroofingsystems.com *.ecoroofingsystems.com
esrf4q.shop *.esrf4q.shop
floridacrackeroutdoor.com *.floridacrackeroutdoor.com
forecomsolution.com *.forecomsolution.com
gruppoazzurra.com *.gruppoazzurra.com
hdfilms.red *.hdfilms.red
heavyhenry.com *.heavyhenry.com
hotelgyldenlowe.com *.hotelgyldenlowe.com
jofrink.com *.jofrink.com
newyork-stringquartet.com *.newyork-stringquartet.com
tassametro.com *.tassametro.com
theresidency.org *.theresidency.org
toukiden.eu *.toukiden.eu
trylensteam.com *.trylensteam.com
umryn07.com *.umryn07.com
votio.pl *.votio.pl
vvv234.live *.vvv234.live
watola.com *.watola.com
*.api.xn--xlr637b.com xn--xlr637b.com *.xn--xlr637b.com
zangaodasorte.bet *.zangaodasorte.bet
zensuppliercredit.com *.zensuppliercredit.com
zrrck.pro *.zrrck.pro