DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=bravitv.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 07, 2026
Valid Until
April 07, 2026 59 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F4:5C:41:DF:6F:EA:7B:B9:45:08:11:08:48:21:96:BE:1D:EF:5F:DE:09:0C:92:EE:77:DA:B2:A7:08:5F:64:D2
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
podters.com *.podters.com *.survey.podters.com *.training.podters.com

Other domains in certificate

bravitv.com *.bravitv.com *.random.bravitv.com *.ww25.bravitv.com *.ww38.bravitv.com
*.14.celebriscoop.com celebriscoop.com *.celebriscoop.com *.controlpanel.celebriscoop.com *.forum.celebriscoop.com *.mx.celebriscoop.com *.pipeline.celebriscoop.com *.work.celebriscoop.com
cmalpidelmare.org *.cmalpidelmare.org
cost1.com *.cost1.com *.cp.cost1.com *.email.cost1.com *.my.cost1.com *.origin.cost1.com *.qa.cost1.com *.random.cost1.com *.test.cost1.com *.ww25.cost1.com *.ww38.cost1.com
cripdrop.co *.cripdrop.co *.test.cripdrop.co *.ww25.cripdrop.co
*.alpha.enegisa.com.br *.analytic.enegisa.com.br *.analytics.enegisa.com.br *.beta.enegisa.com.br *.bi.enegisa.com.br *.cicd.enegisa.com.br *.comune.enegisa.com.br *.dashboard.enegisa.com.br *.data.enegisa.com.br *.dev.enegisa.com.br *.development.enegisa.com.br enegisa.com.br *.enegisa.com.br *.gosa.enegisa.com.br *.hotfix.enegisa.com.br *.insight.enegisa.com.br *.integration.enegisa.com.br *.jenkins.enegisa.com.br *.kafka.enegisa.com.br *.poc.enegisa.com.br *.portaldepagamentos.enegisa.com.br *.portalmeurh.enegisa.com.br *.prod.enegisa.com.br *.random.enegisa.com.br *.servicos.enegisa.com.br *.superset.enegisa.com.br *.uat.enegisa.com.br *.xn--servios-yxa.enegisa.com.br
*.cert1.fanatiics.com fanatiics.com *.fanatiics.com *.yndkdww25.fanatiics.com
flemmix.site *.flemmix.site *.ww25.flemmix.site
*.admin.merricjbank.com *.btzmyz2ebd.merricjbank.com *.insight.merricjbank.com merricjbank.com *.merricjbank.com *.random.merricjbank.com *.visualize.merricjbank.com
mhmedianigeria.com *.mhmedianigeria.com
notes.au *.notes.au *.ww38.notes.au
puffybeach.com *.puffybeach.com *.ww38.puffybeach.com
roundabout.au *.roundabout.au
seir-sanduk.us *.seir-sanduk.us *.ww16.seir-sanduk.us