DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=thexeducation.org
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 02, 2026
Valid Until
May 03, 2026 81 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
46:B2:71:5F:51:A1:B6:BB:03:B9:49:E5:08:A0:AE:99:A1:EC:15:76:F7:E3:30:D6:74:7D:C5:C7:CF:27:6D:07
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
almala.com *.almala.com *.ww1.almala.com

Other domains in certificate

carmensparty.com *.carmensparty.com *.dev.carmensparty.com
darkshine.com *.darkshine.com *.ww25.darkshine.com
*.blog.davisdre.me *.code-server.davisdre.me *.connect.davisdre.me davisdre.me *.davisdre.me *.docks.davisdre.me *.store.davisdre.me *.weather.davisdre.me *.yacht.davisdre.me
doidos.com *.doidos.com *.web.doidos.com
*.connect.frfy.com frfy.com *.frfy.com *.staging.frfy.com
haugabook.com *.haugabook.com *.ww16.haugabook.com
mirraswit.com *.mirraswit.com
mjvuhn.pro *.mjvuhn.pro
modernapparelhub.sbs *.modernapparelhub.sbs
my3118.co *.my3118.co
nexusfinbk.com *.nexusfinbk.com
nkqad.pro *.nkqad.pro
oeuzk.shop *.oeuzk.shop
ohmkwq.shop *.ohmkwq.shop
pendal.com *.pendal.com *.portal.pendal.com *.ssl.pendal.com *.vpn.pendal.com
pkmiqkf.cyou *.pkmiqkf.cyou
qapfast.top *.qapfast.top
qpd8iphpjkf6gj2.cc *.qpd8iphpjkf6gj2.cc
*.ameriabank.quanter.fun quanter.fun *.quanter.fun
redtigerboutique.com *.redtigerboutique.com
rgt303.com *.rgt303.com
ruqmuz.tv *.ruqmuz.tv
s2goj5.top *.s2goj5.top
*.ciscovpn.stojanovic.com stojanovic.com *.stojanovic.com
surbhikapoor.com *.surbhikapoor.com
*.hostmaster.thexeducation.org thexeducation.org *.thexeducation.org *.www.thexeducation.org
tndefenselawyer.com *.tndefenselawyer.com
trumpmelaniadogeelonfartcoininuwifhat.com *.trumpmelaniadogeelonfartcoininuwifhat.com *.webdisk.trumpmelaniadogeelonfartcoininuwifhat.com
www6s66.cc *.www6s66.cc
xcmcw.pro *.xcmcw.pro
xn--48s17vcwbjx8d.com *.xn--48s17vcwbjx8d.com
*.ujzexyk.yzkr.com yzkr.com *.yzkr.com