DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=niaharris.co
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
December 25, 2025
Valid Until
March 25, 2026 44 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B2:53:D6:CA:EC:B2:EA:04:38:D6:73:D5:F1:C4:EE:BB:1C:A7:F4:8B:48:78:50:B0:71:28:B1:BF:C9:AD:FA:68
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
egybest.dev *.egybest.dev *.beal.egybest.dev *.mega.egybest.dev *.seen.egybest.dev *.tika.egybest.dev *.w.egybest.dev

Other domains in certificate

3millcnc.com *.3millcnc.com *.mail.3millcnc.com
annapolis.live *.annapolis.live *.api.annapolis.live *.app.annapolis.live *.autodiscover.annapolis.live *.cdn.annapolis.live *.dan.annapolis.live *.demo.annapolis.live *.dev.annapolis.live *.kzduccdufjcmewjcgdez.annapolis.live *.magento.annapolis.live *.mail.annapolis.live *.old.annapolis.live *.sitemap.annapolis.live *.sitemaps.annapolis.live *.staging.annapolis.live *.stg.annapolis.live *.store.annapolis.live *.vpn.annapolis.live *.webmail.annapolis.live *.wildcard.annapolis.live *.www.annapolis.live *.xbfykoctiytyajjjgnno.annapolis.live
campersat.com.au *.campersat.com.au
championshoes.com *.championshoes.com *.random.championshoes.com *.ww38.championshoes.com
fastgeekpress.com *.fastgeekpress.com
fcusasoccermd.com *.fcusasoccermd.com
fluormemorymem.com *.fluormemorymem.com
fumigacionesespdeoccidente.com *.fumigacionesespdeoccidente.com *.net.fumigacionesespdeoccidente.com
lipitor.au *.lipitor.au *.ww38.lipitor.au
lombredelarue.com *.lombredelarue.com *.mail.lombredelarue.com
lumierebeautyug.com *.lumierebeautyug.com
niaharris.co *.niaharris.co
*.bot.novidadedahora.site novidadedahora.site *.novidadedahora.site
*.dns.paymentsabm.com *.hostmaster.paymentsabm.com *.mx7.paymentsabm.com paymentsabm.com *.paymentsabm.com
rethinkyourmarketing.com.au *.rethinkyourmarketing.com.au *.ww25.rethinkyourmarketing.com.au
solidperks.com *.solidperks.com *.ww38.solidperks.com
*.autodiscover.swingersclubcosmo.com *.hostmaster.swingersclubcosmo.com *.mail.swingersclubcosmo.com *.newsite.swingersclubcosmo.com swingersclubcosmo.com *.swingersclubcosmo.com *.webdisk.swingersclubcosmo.com *.www.swingersclubcosmo.com
whmcs.store *.whmcs.store
xoung.com *.xoung.com
*.fuk.xvedio.co *.india.xvedio.co *.wee.xvedio.co xvedio.co *.xvedio.co *.zunz.xvedio.co