DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt Active incidents

Certificate Information

Subject
CN=dimsystem.store
Issuer
C=US, O=Let's Encrypt, CN=YR2
Valid From
May 30, 2026
Valid Until
August 28, 2026 67 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
3B:0E:36:79:7D:D3:A9:FE:E4:9C:4D:2B:64:82:33:D7:DA:5B:3B:90:67:8B:98:90:13:A0:10:1D:58:0D:F7:8A
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
kernallabs.com *.kernallabs.com

Other domains in certificate

ctgzc.qpon *.ctgzc.qpon
datasciencesymposium.com *.datasciencesymposium.com
dimsystem.store *.dimsystem.store
dividendmap.com *.dividendmap.com
diyintegrityblueprint.xyz *.diyintegrityblueprint.xyz
donaldgloats.com *.donaldgloats.com
dreamodyssey252.shop *.dreamodyssey252.shop
epelde-mardaras.school *.epelde-mardaras.school
expires.in *.expires.in
gaigoinhatrang2.cc *.gaigoinhatrang2.cc
galacticsabers.com *.galacticsabers.com
gardenexpertexchange.live *.gardenexpertexchange.live
getpantyhoseporn.com *.getpantyhoseporn.com
goach.my *.goach.my
growthwithai.com *.growthwithai.com
hxnsmq.work *.hxnsmq.work
idmexico.com *.idmexico.com
jemz.org *.jemz.org
khlfx.my *.khlfx.my
ksafoodmenu.com *.ksafoodmenu.com
lbarakabio.vip *.lbarakabio.vip
mowodoll.com *.mowodoll.com
mtaacorp.com *.mtaacorp.com
mustmercoffee.com *.mustmercoffee.com
nandishealinghands.com *.nandishealinghands.com
nazinews.com *.nazinews.com
netfilme.com *.netfilme.com
nvsg.org *.nvsg.org
onecentart.com *.onecentart.com
otuyet.info *.otuyet.info
passionforhistory.org *.passionforhistory.org
primecircuitai.top *.primecircuitai.top
rftrans.com.br *.rftrans.com.br
rudravaastujyotish.in *.rudravaastujyotish.in
seamlesstravelsolutions.live *.seamlesstravelsolutions.live
sonomawine.net *.sonomawine.net
spychat.pro *.spychat.pro
strategicfoodsource.food *.strategicfoodsource.food
streameu.com *.streameu.com
stroke-recovery-devices-20250530-2.today *.stroke-recovery-devices-20250530-2.today
thefrankly.partners *.thefrankly.partners
txeb.org *.txeb.org
tyfuture.cn *.tyfuture.cn
uali.org *.uali.org