DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=dovmorris.de
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
November 30, 2025
Valid Until
February 28, 2026 35 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D2:96:F1:0D:80:D7:33:1B:49:AB:95:6A:93:9D:19:B4:4B:0E:18:96:1A:0F:80:8C:ED:70:4D:C4:D8:23:D7:3F
Alternative Names
77 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

77 domains
oceanpark3.com *.oceanpark3.com

Other domains in certificate

bikesandsports.co.uk *.bikesandsports.co.uk *.www.bikesandsports.co.uk
canberraescorts.com.au *.canberraescorts.com.au
doodlewoodlehub.com *.doodlewoodlehub.com *.ww25.doodlewoodlehub.com
dovmorris.de *.dovmorris.de
dubheceramic.com *.dubheceramic.com
*.ant.envelo.xyz *.at.envelo.xyz envelo.xyz *.envelo.xyz *.mail.envelo.xyz *.ww25.envelo.xyz
*.1.getst4r.us *.alpha.getst4r.us *.analytic.getst4r.us *.analytics.getst4r.us *.dash.getst4r.us *.event.getst4r.us getst4r.us *.getst4r.us *.nlioxsitemap.getst4r.us *.prod.getst4r.us *.sitemap.getst4r.us *.sitemaps.getst4r.us *.superset.getst4r.us
giftscardsnow.com *.giftscardsnow.com
growe.com.au *.growe.com.au
hlss69.com *.hlss69.com
hostelmigo.com *.hostelmigo.com
idc10data.com *.idc10data.com *.ww25.idc10data.com
izmirmotorkiralama.com *.izmirmotorkiralama.com
*.folzrremote.khot.xyz *.gov.khot.xyz khot.xyz *.khot.xyz *.random.khot.xyz *.ww25.khot.xyz
kraftroyal.eu *.kraftroyal.eu
manikandanagencies.com *.manikandanagencies.com
mediacomkaraoke.com *.mediacomkaraoke.com
nftappgamehub.com *.nftappgamehub.com
*.bd.optumfinincial.com *.mobile.optumfinincial.com optumfinincial.com *.optumfinincial.com *.random.optumfinincial.com *.secur.optumfinincial.com *.secure.optumfinincial.com *.store.optumfinincial.com
petizoos.net *.petizoos.net
sahserlivaotel.com *.sahserlivaotel.com
susu4dwow.com *.susu4dwow.com
vancouvercab.us *.vancouvercab.us *.www.vancouvercab.us