DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt Active incidents

Certificate Information

Subject
CN=a-financial.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 25, 2026
Valid Until
August 23, 2026 63 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
BC:31:E2:62:CF:71:F9:E0:E3:B1:D8:A0:A1:34:B2:30:08:E6:B0:22:56:9F:FB:BB:DA:91:B9:71:9A:F2:AD:5B
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
nikki.group *.nikki.group

Other domains in certificate

50plus.world *.50plus.world
a-financial.com *.a-financial.com
atec-etancheite-51.com *.atec-etancheite-51.com
atvvision.com *.atvvision.com
automotivestop.com *.automotivestop.com
cornerstone.chat *.cornerstone.chat
craft.tips *.craft.tips
crea.direct *.crea.direct
creativepromo.agency *.creativepromo.agency
creditservicesofmichigan.com *.creditservicesofmichigan.com
freightlinerradiator.com *.freightlinerradiator.com
from.black *.from.black
full.delivery *.full.delivery
galehuset.com *.galehuset.com
giftlumbercompany.com *.giftlumbercompany.com
glaciercreekoutfitting.com *.glaciercreekoutfitting.com
hala.events *.hala.events
homeorhome.com *.homeorhome.com
hosinfo.com *.hosinfo.com
hostingtracking.com *.hostingtracking.com
hotelrajmahalpalace.de *.hotelrajmahalpalace.de
housesanta.com *.housesanta.com
howtechnical.com *.howtechnical.com
ibrownie.com *.ibrownie.com
id.hockey *.id.hockey
joburgstores.com *.joburgstores.com
jool.archi *.jool.archi
lojaserenamodas.site *.lojaserenamodas.site
lordseriacle.online *.lordseriacle.online
lpa.systems *.lpa.systems
mordcom.com *.mordcom.com
mymakingmoney.com *.mymakingmoney.com
nanebistro.com *.nanebistro.com
northerndrives.com *.northerndrives.com
northsidecatholic.com *.northsidecatholic.com
petit-sac-a-dos.com *.petit-sac-a-dos.com
physicalprinting.com *.physicalprinting.com
platinummovie.com *.platinummovie.com
player.finance *.player.finance
poeness.com *.poeness.com
tagfamilydaycare.com *.tagfamilydaycare.com
teletalks.online *.teletalks.online
tinytoesandtiaras.com *.tinytoesandtiaras.com
yaway.site *.yaway.site