DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=graniteholder.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 10, 2026
Valid Until
May 11, 2026 88 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
AD:84:97:E4:4F:C4:5C:29:BA:74:9B:34:0C:6B:54:1A:F0:43:49:72:D2:B0:53:F0:FB:FD:06:DE:16:5D:51:4B
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
karou.com *.karou.com *.ww01.karou.com

Other domains in certificate

agedcareselect.com.au *.agedcareselect.com.au
*.2cc548b7-01b9-4eef-a6f7-2d97e588b436.avabprogram.com *.analytic.avabprogram.com *.app.avabprogram.com avabprogram.com *.avabprogram.com *.backend.avabprogram.com *.bjxeirqd.avabprogram.com *.dashs.avabprogram.com *.dev.avabprogram.com *.dgw.avabprogram.com *.forum.avabprogram.com *.forums.avabprogram.com *.hostmaster.avabprogram.com *.lime.avabprogram.com *.lwew.avabprogram.com *.m.avabprogram.com *.mx7.avabprogram.com *.notexistsapi.avabprogram.com *.notexistsbackend.avabprogram.com *.notexistsdev.avabprogram.com *.wiki.avabprogram.com *.workflow.avabprogram.com *.ww1.avabprogram.com *.ww5.avabprogram.com *.ww9.avabprogram.com *.www.avabprogram.com
cinghiali.com *.cinghiali.com *.dash.cinghiali.com *.e622f7df-c1a2-4ef5-a903-a98502ad4822.cinghiali.com *.emv1.cinghiali.com *.mail.cinghiali.com *.pericolo.cinghiali.com *.sitemaps.cinghiali.com *.wildcard.cinghiali.com
droop.io *.droop.io *.staging.droop.io *.webdisk.droop.io *.webmail.droop.io
graniteholder.com *.graniteholder.com *.ww38.graniteholder.com
grrekxy.xyz *.grrekxy.xyz *.intranet.grrekxy.xyz *.kwid9.grrekxy.xyz *.shop.grrekxy.xyz *.wakkl.grrekxy.xyz *.webmail.grrekxy.xyz
*.admin.nagarhaveliinsurance.com *.assets.nagarhaveliinsurance.com *.blog.nagarhaveliinsurance.com *.demo.nagarhaveliinsurance.com *.hostmaster.nagarhaveliinsurance.com *.insight.nagarhaveliinsurance.com *.intranet.nagarhaveliinsurance.com *.m.nagarhaveliinsurance.com nagarhaveliinsurance.com *.nagarhaveliinsurance.com *.photos.nagarhaveliinsurance.com *.portal.nagarhaveliinsurance.com *.rds.nagarhaveliinsurance.com *.remote.nagarhaveliinsurance.com *.shop.nagarhaveliinsurance.com *.staging.nagarhaveliinsurance.com *.store.nagarhaveliinsurance.com *.vpn.nagarhaveliinsurance.com
*.abcd123.safetylab.io *.ftp.safetylab.io *.localhost.safetylab.io *.mtvuadev.safetylab.io safetylab.io *.safetylab.io *.smtp.safetylab.io *.test.safetylab.io *.webmail.safetylab.io *.www.safetylab.io
*.box.texastech.online *.bwan.texastech.online *.hermes.texastech.online *.m.texastech.online texastech.online *.texastech.online *.toba.texastech.online