DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=votepair.org
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 01, 2026
Valid Until
May 02, 2026 84 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
63:E5:B1:AB:C4:4A:95:D0:33:75:02:56:0A:98:3A:84:75:BD:8E:CB:1D:91:23:76:AB:07:91:E2:BF:80:8B:F5
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
lighte.com *.lighte.com *.latam.lighte.com

Other domains in certificate

bookmarknow.xyz *.bookmarknow.xyz *.ww25.bookmarknow.xyz
*.64.cancerservice.net *.bqkksm.cancerservice.net cancerservice.net *.cancerservice.net *.gdpmow.cancerservice.net *.gehpko.cancerservice.net *.ildcard.cancerservice.net *.kwafsb.cancerservice.net *.lxevaa.cancerservice.net *.njfmkb.cancerservice.net *.psrkcl.cancerservice.net *.qrwjzf.cancerservice.net *.random.cancerservice.net *.rlakpp.cancerservice.net *.sadlcw.cancerservice.net *.upgovj.cancerservice.net *.vnfqig.cancerservice.net *.wvsvuu.cancerservice.net *.zwthsr.cancerservice.net
*.blog.centervillage.co centervillage.co *.centervillage.co *.ww.centervillage.co *.ww01.centervillage.co *.ww1.centervillage.co *.www.centervillage.co *.wwww.centervillage.co
hertschoicehomes.org.uk *.hertschoicehomes.org.uk *.ww16.hertschoicehomes.org.uk *.www.hertschoicehomes.org.uk
*.dev.idpcheckpresenters.com idpcheckpresenters.com *.idpcheckpresenters.com
illahee.com *.illahee.com *.ww25.illahee.com
inboxbr.xyz *.inboxbr.xyz *.ww25.inboxbr.xyz
jades.life *.jades.life *.ww25.jades.life
*.login.mahjoubi.com mahjoubi.com *.mahjoubi.com *.outlook.mahjoubi.com
petcandyshop.xyz *.petcandyshop.xyz *.ww25.petcandyshop.xyz
prodromo.com *.prodromo.com *.test.prodromo.com
*.hostmaster.schlaps.com schlaps.com *.schlaps.com
serglo.com *.serglo.com *.vpn.serglo.com *.zamid1-gp.serglo.com
streameast.es *.streameast.es *.ww25.streameast.es *.ww38.streameast.es
succulenthoodia.com *.succulenthoodia.com *.ww25.succulenthoodia.com
*.e387d0b3-07ee-4b0c-9038-31236702e957.tejas.bio tejas.bio *.tejas.bio *.www.tejas.bio
theintelligentsia.com *.theintelligentsia.com *.ww16.theintelligentsia.com
*.m.venske.com venske.com *.venske.com
*.csigoodshepherdchurchchennai.votepair.org *.news.votepair.org *.org.votepair.org *.staging.votepair.org votepair.org *.votepair.org