DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=dakotagaragedoor.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 01, 2026
Valid Until
July 30, 2026 71 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
CD:7B:3E:9D:1B:AB:6F:6C:13:88:98:F0:41:FA:A6:09:DA:CF:0C:FC:C2:11:0B:D0:46:A6:DA:68:25:61:3F:0B
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
nordstromack.com *.nordstromack.com *.dev.nordstromack.com *.hostmaster.nordstromack.com *.ww.nordstromack.com

Other domains in certificate

*.a.agenticduke.com agenticduke.com *.agenticduke.com *.betting.agenticduke.com *.cloud.agenticduke.com *.rds.agenticduke.com *.rdweb.agenticduke.com *.remote.agenticduke.com
asicrunner.com *.asicrunner.com *.random.asicrunner.com *.ww25.asicrunner.com
*.admin.assicurazioneautostoriche.com assicurazioneautostoriche.com *.assicurazioneautostoriche.com *.hostmaster.assicurazioneautostoriche.com *.remote.assicurazioneautostoriche.com *.staging.assicurazioneautostoriche.com
banehniiaz.com *.banehniiaz.com
berner.bio *.berner.bio
*.bonifidebooks.brandquestion.com brandquestion.com *.brandquestion.com *.stephenboni.brandquestion.com
dakotagaragedoor.com *.dakotagaragedoor.com *.emv1.dakotagaragedoor.com *.forum.dakotagaragedoor.com *.help.dakotagaragedoor.com *.store.dakotagaragedoor.com *.test.dakotagaragedoor.com *.vpn.dakotagaragedoor.com *.ww1.dakotagaragedoor.com *.ww11.dakotagaragedoor.com *.ww25.dakotagaragedoor.com
deedmaster.com *.deedmaster.com *.www.deedmaster.com
*.02903beb-b5f5-4095-8bfb-dde42bc156ba.i420tokyo.com *.a0f6e318-c5dc-40da-bc28-8bedd8c534b1.i420tokyo.com *.admin.i420tokyo.com *.api.i420tokyo.com *.app.i420tokyo.com *.blog.i420tokyo.com *.cloud.i420tokyo.com *.demo.i420tokyo.com *.dev.i420tokyo.com i420tokyo.com *.i420tokyo.com *.mail.i420tokyo.com *.rd.i420tokyo.com *.rds.i420tokyo.com *.rdweb.i420tokyo.com *.remote.i420tokyo.com *.shop.i420tokyo.com *.smksbzbsncremote.i420tokyo.com *.test.i420tokyo.com *.zbsncremote.i420tokyo.com
jbt68.click *.jbt68.click *.m.jbt68.click
ncird.com *.ncird.com
outdoorpazar.com *.outdoorpazar.com *.ww25.outdoorpazar.com
polatlargg.online *.polatlargg.online *.ww25.polatlargg.online
*.mint.rektapeton.club rektapeton.club *.rektapeton.club *.www.rektapeton.club
rephalan.com *.rephalan.com *.www.rephalan.com
*.cloud.seolize.com *.rds.seolize.com seolize.com *.seolize.com
shizenchiyu.com *.shizenchiyu.com