DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=heals.it
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 11, 2026
Valid Until
May 12, 2026 89 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
2C:24:B0:33:1B:F7:35:02:3B:24:67:7A:19:A3:E0:C0:70:05:E2:39:4E:3F:64:0A:18:6F:CE:8F:EC:03:97:A3
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
fudian.com *.fudian.com *.hr.fudian.com *.owa.fudian.com *.test-cdn.fudian.com *.ww16.fudian.com *.ww25.fudian.com

Other domains in certificate

3335688xx1.shop *.3335688xx1.shop *.com.3335688xx1.shop
apwj.com *.apwj.com *.b.apwj.com *.bia.apwj.com *.hard.apwj.com *.mta-sts.apwj.com *.push.apwj.com *.wxi.apwj.com
boost-team.com *.boost-team.com *.debra.boost-team.com
*.autoconfig.cctv-us.net cctv-us.net *.cctv-us.net *.demo.cctv-us.net *.random.cctv-us.net
downloadmem.website *.downloadmem.website
ecitonunjolly.website *.ecitonunjolly.website
*.api.fontenaysousbois.com *.cms.fontenaysousbois.com *.dev.fontenaysousbois.com fontenaysousbois.com *.fontenaysousbois.com *.mail.fontenaysousbois.com *.test.fontenaysousbois.com *.ww1.fontenaysousbois.com *.ww38.fontenaysousbois.com
freexxx.click *.freexxx.click *.hostmaster.freexxx.click
hautenet.com *.hautenet.com
heals.it *.heals.it
*.archif.idaratarbawya.com *.archive.idaratarbawya.com *.arhive.idaratarbawya.com *.comwww.idaratarbawya.com idaratarbawya.com *.idaratarbawya.com *.test.idaratarbawya.com *.w.idaratarbawya.com *.ww1.idaratarbawya.com *.www.idaratarbawya.com *.wwww.idaratarbawya.com
iresearchnet.org *.iresearchnet.org *.ww25.iresearchnet.org
*.53.mexico-usvisa-info.com mexico-usvisa-info.com *.mexico-usvisa-info.com *.ww1.mexico-usvisa-info.com *.ww25.mexico-usvisa-info.com *.ww38.mexico-usvisa-info.com *.ww53.mexico-usvisa-info.com *.ww62.mexico-usvisa-info.com *.ww82.mexico-usvisa-info.com
*.insights.pinetwork.finance pinetwork.finance *.pinetwork.finance
pixiepress.com *.pixiepress.com
*.mail.shoepia.com shoepia.com *.shoepia.com *.vpn.shoepia.com *.wildcard.shoepia.com *.www.shoepia.com
*.hostmaster.turister.com *.m.turister.com *.novo.turister.com *.sitemap.turister.com turister.com *.turister.com *.ww1.turister.com *.ww16.turister.com
wyalf.com *.wyalf.com