Open
Cached
·
just now
89/100
SECURITY SCORE
Certificate Information
Subject
CN=mail.dw-its.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 08, 2026
Valid Until
April 08, 2026
66 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
DB:14:B0:CA:EA:FF:E6:A0:DA:1E:8B:31:B3:70:61:5D:9B:D8:67:81:46:14:D9:55:F5:B6:72:51:7A:25:3A:81
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=64072000; includeSubDomains; preload
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Authorized CAs
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts
- • Consider adding 'issuewild' records to control wildcard certificate issuance
Subject Alternative Names
73 domains
mail.equalngo.org
mail.1aug.team
mail.2jhtransportes.com.br
mail.adstargets.net
mail.aerostatic.co
mail.alemsys.com.co
mail.anotherdesignfirm.com
mail.anscer.com
mail.beckisbouquets.com
mail.belt-app.com
mail.bingzer.com
mail.buildwithsoul.xyz
mail.capitaleyenepal.com
mail.carringtoncourt.com
mail.catholicfund.com
email.bumisentosa.co.id
mail.citec.co.id
mail.transworld.com.ng
mail.comprehensive-computing.com
webmail.crowe.uy
mail.cyntrek.com
dmuseful.dmbestsolutions.com
mail.dw-its.com
mail.andap.edu.pe
mail.ens.com.mx
mail.estudiosmexico.com
mail.faston.com.br
mail.findnowhub.com
mail.fitimoveis.com.br
mail.freakinawesome.com
correo.gcsi.com.co
mail.gnh-usa.com
webmail.hloos.com.ar
mail.houseoftapputi.com
mail.itspot.us
mail.learntoaim.com
mail.marketeersllc.com
mail.marktwainsaloon.com
mail.medisafe-lb.com
mail.miraheights.com
mail.modernpulses.com
mail.mscreatives.net
webmail.nanoliquitec.com
webmail.nk3.com.br
mail.noblenaturalsco.com
mail.nuventis.ae
mail.offset.africa
mail.openenergias.com.br
mail.panamaconsulatevn.com
mail.peepaltreepreschools.com
webmail.proceed.com.br
mail.providencebrokers.com
webmail.ravicaribeinc.com
mail.reciplast.com
mail.rkrc.club
mail.rocksolidadvisors.com
mail.sprint19.com
mail.sveston.co
mail.swas-sa.com
mail.taaefoundation.org
mail.tccb.store
mail.tgl-sa.com
mail.thermaltechsystems.com
mail.thompsoncraft.com
webmail.transportesrastreados.com.br
mail.trickshot.media
mail.ultimateinfoservices.com
mail.unitrio.com
mail.vanderleigadotti.com.br
mail.wiexe.com
mail.wpcsolutions.com.br
mail.yottamedialabs.com
webmail.zwift.community
Other domains in certificate