DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=cado.live
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 04, 2026
Valid Until
May 05, 2026 82 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E2:07:3C:0B:C4:C0:62:3C:9A:45:EF:AB:81:F5:B3:ED:E2:04:BE:DF:11:8D:13:4F:51:57:98:97:EF:83:AD:06
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
halaalturk.com *.halaalturk.com *.catalog.halaalturk.com *.discuss.halaalturk.com *.service.halaalturk.com *.voice.halaalturk.com

Other domains in certificate

a3manga.info *.a3manga.info
and.education *.and.education *.emigration.and.education *.jobs.and.education *.reseatch.and.education
bethlemitas.com *.bethlemitas.com *.cloud.bethlemitas.com *.sitemaps.bethlemitas.com *.ts.bethlemitas.com
bonkbots.io *.bonkbots.io *.ww38.bonkbots.io
btem.me *.btem.me
cado.live *.cado.live *.sorianamer.cado.live
comcept2.com *.comcept2.com *.comconconcept2.comcept2.com *.log.comcept2.com
egmotors.co.uk *.egmotors.co.uk *.ww25.egmotors.co.uk
getgaget.co *.getgaget.co
*.app.good888.bet good888.bet *.good888.bet *.mail.good888.bet *.random.good888.bet
*.hostmaster.instateacher.online instateacher.online *.instateacher.online
jiujiuship.top *.jiujiuship.top *.ms.jiujiuship.top *.w.jiujiuship.top
kejaksaan.com *.kejaksaan.com *.kejari-padang.kejaksaan.com
*.4236ee8a-7a57-469e-99f1-9b0bdaac2246.mptrqs.pro *.lyzsumio.mptrqs.pro *.mailer.mptrqs.pro *.marketing.mptrqs.pro mptrqs.pro *.mptrqs.pro *.secure.mptrqs.pro
musicvideo.com.au *.musicvideo.com.au
myths.com.au *.myths.com.au
naga2000slot.com *.naga2000slot.com *.ww25.naga2000slot.com *.ww38.naga2000slot.com
peguero.com *.peguero.com *.ww11.peguero.com *.yensi.peguero.com
priceleader.it *.priceleader.it *.staging.priceleader.it
*.demo-inpormasi.sasinfinity.com *.inpormasi-pupukindonesia.sasinfinity.com *.mail.sasinfinity.com *.pdt.sasinfinity.com *.petrosea.sasinfinity.com sasinfinity.com *.sasinfinity.com *.ww25.sasinfinity.com
turbocaddy.co.uk *.turbocaddy.co.uk
*.cloud.usnetwork.net *.connect.usnetwork.net *.oeyjxvpn1.usnetwork.net usnetwork.net *.usnetwork.net
youxiang888.icu *.youxiang888.icu