DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=neromedia.site
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
December 09, 2025
Valid Until
March 09, 2026 49 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B0:CD:B2:77:3C:70:35:EB:22:86:FF:C5:6C:B9:22:9A:F4:17:2C:A2:18:51:4E:70:26:E7:42:B6:B8:34:30:7C
Alternative Names
81 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

81 domains
mrg.de *.mrg.de *.biochem.mrg.de

Other domains in certificate

*.audio.audiovisual.media audiovisual.media *.audiovisual.media *.biography.audiovisual.media *.design.audiovisual.media *.drinks.audiovisual.media *.events.audiovisual.media *.fashion.audiovisual.media *.fauna.audiovisual.media *.flora.audiovisual.media *.food.audiovisual.media *.human.audiovisual.media *.jobs.audiovisual.media *.models.audiovisual.media *.music.audiovisual.media *.nature.audiovisual.media *.photo.audiovisual.media *.products.audiovisual.media *.sitemap.audiovisual.media *.sport.audiovisual.media *.travel.audiovisual.media *.video.audiovisual.media *.videography.audiovisual.media *.world.audiovisual.media *.xl.audiovisual.media
*.hostmaster.i3.studio i3.studio *.i3.studio *.www.i3.studio
*.blog.jhlink.site jhlink.site *.jhlink.site *.link.jhlink.site *.safe.jhlink.site *.usa.jhlink.site
*.cpcalendars.jobkeren.com jobkeren.com *.jobkeren.com
maxyt.xyz *.maxyt.xyz *.ww38.maxyt.xyz
neromedia.site *.neromedia.site *.sitemap.neromedia.site *.ww38.neromedia.site
*.oxfordeducationconsulting.oxfordeducationonline.co.uk oxfordeducationonline.co.uk *.oxfordeducationonline.co.uk *.oxfordguardians.oxfordeducationonline.co.uk
*.com.paidforarticle.com *.ourblog.paidforarticle.com paidforarticle.com *.paidforarticle.com *.tk.paidforarticle.com *.wp.paidforarticle.com
robertify.me *.robertify.me *.ws.robertify.me
*.300k.sieungon.store *.momo.sieungon.store sieungon.store *.sieungon.store
*.autoconfig.slothydra.org slothydra.org *.slothydra.org
*.cpcalendars.the8side.com *.designererrthangtooik.the8side.com *.mail.the8side.com the8side.com *.the8side.com *.webdisk.the8side.com
*.random.tt003.xyz tt003.xyz *.tt003.xyz *.ww25.tt003.xyz
vip-remont-balkon.site *.vip-remont-balkon.site *.ww25.vip-remont-balkon.site