DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=ango.net
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 09, 2026
Valid Until
May 10, 2026 89 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
7A:8D:EC:5C:46:CD:C0:6C:58:22:61:9F:27:06:BD:10:1E:CB:E5:4C:8D:AE:5A:3F:B2:20:13:8F:D8:0B:09:0F
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
indexlien.com *.indexlien.com *.ac31.indexlien.com *.acrobate.indexlien.com *.annuref.indexlien.com *.arbres.indexlien.com *.astre.indexlien.com *.blog.indexlien.com *.bowling.indexlien.com *.brochure.indexlien.com *.cherchertrouver.indexlien.com *.citrouille.indexlien.com *.entreprise.indexlien.com *.iledefrance.indexlien.com *.journaliste.indexlien.com *.pcref.indexlien.com *.peugeot.indexlien.com *.policier.indexlien.com *.reftopliens.indexlien.com *.requin.indexlien.com *.reservoir.indexlien.com *.siteprefere.indexlien.com *.table.indexlien.com *.tapis.indexlien.com *.ustensile.indexlien.com *.xn--vtrinaire-b4ab.indexlien.com

Other domains in certificate

*.ai.ango.net ango.net *.ango.net *.beta.ango.net *.hostmaster.ango.net *.preprod.ango.net *.qa.ango.net *.sandbox.ango.net *.uat.ango.net *.ww25.ango.net
codeify.cfd *.codeify.cfd *.gaudinot-villefontaine.codeify.cfd *.narrow-one-glitches.codeify.cfd *.rdw-sd-degeri-dusuklugu-nedir.codeify.cfd
*.analyze.guy.fi guy.fi *.guy.fi *.tlirsoitolijkvpod.guy.fi
*.anyconnect.instantop.com *.anywhere.instantop.com *.branches.instantop.com *.clientesvpn.instantop.com *.email.instantop.com *.gateway.instantop.com *.gp.instantop.com *.hjyssgp.instantop.com *.info.instantop.com instantop.com *.instantop.com *.local.instantop.com *.locations.instantop.com *.mobileconnect.instantop.com *.mx7.instantop.com *.portal.instantop.com *.rds.instantop.com *.rds1.instantop.com *.rdweb.instantop.com *.share.instantop.com *.sslvpn2.instantop.com *.store.instantop.com *.stores.instantop.com *.studentsvpn.instantop.com *.vdi.instantop.com *.vpn.instantop.com *.vpn2.instantop.com *.vpn3.instantop.com *.vpnssl.instantop.com *.webmail.instantop.com *.www.instantop.com
jzygdp.cc *.jzygdp.cc *.mobile.jzygdp.cc *.web.jzygdp.cc
*.ildcard.miocrosoft365.com miocrosoft365.com *.miocrosoft365.com
*.dashboard.sweetpeaksbakery.com sweetpeaksbakery.com *.sweetpeaksbakery.com *.web.sweetpeaksbakery.com
*.mobile.yurakgorst.top yurakgorst.top *.yurakgorst.top