DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=washingtonent.com
Issuer
C=US, O=Let's Encrypt, CN=YR2
Valid From
June 01, 2026
Valid Until
August 30, 2026 75 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
04:4D:82:40:DF:E4:DC:F5:94:FE:6F:B0:4C:01:D9:91:E1:08:19:E1:90:08:A2:0E:3C:B1:B2:13:CC:F0:63:4C
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
kpus.store *.kpus.store

Other domains in certificate

affittato.it *.affittato.it *.checkout.affittato.it *.owa.affittato.it *.remote.affittato.it
*.account.anand.bio *.analytic.anand.bio anand.bio *.anand.bio *.app.anand.bio *.async.anand.bio *.cluster.anand.bio *.primary-insight.anand.bio *.visualize.anand.bio
bickerstaff-enzephalitis.de *.bickerstaff-enzephalitis.de
frmaillot.com *.frmaillot.com *.hostmaster.frmaillot.com
giovannisdanville.com *.giovannisdanville.com
info-bob.com *.info-bob.com *.www.info-bob.com
*.32.jailbookings.info jailbookings.info *.jailbookings.info *.mail.jailbookings.info *.www.jailbookings.info
*.cloud.jejakpola.com *.ftp.jejakpola.com jejakpola.com *.jejakpola.com *.rd.jejakpola.com
mainpool.space *.mainpool.space
*.app.setleri.florist *.backup.setleri.florist *.dev.setleri.florist *.gdamjstaging.setleri.florist *.gpueocwv.setleri.florist *.mail.setleri.florist *.mailer.setleri.florist *.marketing.setleri.florist *.secure.setleri.florist setleri.florist *.setleri.florist *.staging.setleri.florist *.stg.setleri.florist *.uat.setleri.florist *.v1.setleri.florist
*.h.subdesu.com subdesu.com *.subdesu.com *.test.subdesu.com *.ww25.subdesu.com
*.3402d911-8693-4ba0-b530-31871ea2dea3.uceta.com *.m.uceta.com *.paul.uceta.com uceta.com *.uceta.com *.ww01.uceta.com *.xkl.uceta.com
*.maggy.unlimitedyouthke.org unlimitedyouthke.org *.unlimitedyouthke.org
*.exchange1.washingtonent.com *.mail.washingtonent.com washingtonent.com *.washingtonent.com
*.m.xn--8eyq91c.com *.wiki.xn--8eyq91c.com xn--8eyq91c.com *.xn--8eyq91c.com
*.acc.xn--8pru15l.com *.m.xn--8pru15l.com *.sitemaps.xn--8pru15l.com xn--8pru15l.com *.xn--8pru15l.com
*.random.xn--xuww7c.com *.remote.xn--xuww7c.com *.wildcard.xn--xuww7c.com xn--xuww7c.com *.xn--xuww7c.com
*.eieylgk.xyat.cn xyat.cn *.xyat.cn *.yfd.xyat.cn