DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=fs-bachblueten.de
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 04, 2026
Valid Until
May 05, 2026 88 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
BA:E3:92:D5:FF:71:66:D7:99:E5:2F:F0:1B:99:55:45:23:5E:63:CE:D4:C3:7B:D0:FA:91:74:70:74:C6:D1:9E
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
algologo.com *.algologo.com *.mail.algologo.com *.ww1.algologo.com *.ww25.algologo.com

Other domains in certificate

717trk.com *.717trk.com *.ad-32.717trk.com *.ad-58.717trk.com *.ag-52.717trk.com *.bi-93.717trk.com *.bj-73.717trk.com *.cn-10.717trk.com *.ez-26.717trk.com *.fb-16.717trk.com *.fc-21.717trk.com *.fc-53.717trk.com *.ge-20.717trk.com *.gg-36.717trk.com *.in-10.717trk.com *.kx-62.717trk.com *.ky-21.717trk.com *.lb-22.717trk.com *.lz-96.717trk.com *.random.717trk.com *.sx-78.717trk.com *.sz-23.717trk.com *.sz-24.717trk.com *.tc-19.717trk.com *.tc-44.717trk.com *.tc-45.717trk.com *.td-50.717trk.com *.td-52.717trk.com *.td-55.717trk.com *.td-96.717trk.com *.ue-32.717trk.com *.ue-35.717trk.com *.uh-55.717trk.com *.vi-64.717trk.com *.vi-88.717trk.com *.vm-87.717trk.com *.wq-52.717trk.com *.wq-98.717trk.com *.xr-14.717trk.com *.xr-18.717trk.com *.xs-27.717trk.com *.xt-31.717trk.com *.xu-41.717trk.com *.xu-84.717trk.com *.yx-78.717trk.com *.yx-79.717trk.com *.za-81.717trk.com *.zb-16.717trk.com *.zd-12.717trk.com *.zz-74.717trk.com *.zz-76.717trk.com *.zz-92.717trk.com
bulkseller.com *.bulkseller.com *.mail.bulkseller.com
*.buisness.comccast.com *.business.comccast.com *.cable.comccast.com comccast.com *.comccast.com *.genome.comccast.com *.mercury.comccast.com *.net.comccast.com
contactcenter.email *.contactcenter.email *.live.contactcenter.email
*.demo.enache.com enache.com *.enache.com *.ww25.enache.com
facklam.com *.facklam.com *.ww25.facklam.com *.ww38.facklam.com
fs-bachblueten.de *.fs-bachblueten.de *.mail.fs-bachblueten.de
*.dev.gonflable.com gonflable.com *.gonflable.com *.test.gonflable.com
marinfitness.co *.marinfitness.co
tripuranews.in *.tripuranews.in