DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=dpam.online
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 26, 2026
Valid Until
April 26, 2026 72 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
CC:8E:84:D4:C0:B6:DC:17:AD:F9:3E:22:DA:38:ED:8B:72:8B:56:D2:7B:B3:CF:2B:BA:57:2B:E3:F7:E5:24:C7
Alternative Names
77 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

77 domains
picment.studio *.picment.studio *.mail.picment.studio

Other domains in certificate

*.app.coolex.xyz coolex.xyz *.coolex.xyz *.d.coolex.xyz *.sitemap.coolex.xyz *.www.coolex.xyz
corporea.com *.corporea.com *.random.corporea.com
countryhomebuilders.au *.countryhomebuilders.au
diegocamargo.co *.diegocamargo.co *.ww25.diegocamargo.co
docmorris.online *.docmorris.online *.mail.docmorris.online
dongcarinsu.com *.dongcarinsu.com
dpam.online *.dpam.online
*.demo.drivinsuredtn.com drivinsuredtn.com *.drivinsuredtn.com
estdesign.io *.estdesign.io
*.dev.foryoustorebg.com foryoustorebg.com *.foryoustorebg.com
funcam.store *.funcam.store
giris-linki.xyz *.giris-linki.xyz
gotolinkservice.xyz *.gotolinkservice.xyz
khfun88.online *.khfun88.online *.sitemap.khfun88.online *.www.khfun88.online
lendgreen.app *.lendgreen.app *.ww25.lendgreen.app
nerofabric.au *.nerofabric.au
nerofabric.com.au *.nerofabric.com.au
pixex.io *.pixex.io
summonersw.xyz *.summonersw.xyz *.ww25.summonersw.xyz
*.online.taslayerpro.com taslayerpro.com *.taslayerpro.com
*.com.thejoglogarden.com *.das-erp.thejoglogarden.com *.das-plants.thejoglogarden.com *.daspos.thejoglogarden.com *.helpdesk.thejoglogarden.com *.id.thejoglogarden.com *.pos-dashboard.thejoglogarden.com thejoglogarden.com *.thejoglogarden.com *.webmail.thejoglogarden.com
thekingchef.co.uk *.thekingchef.co.uk
winekits.ca *.winekits.ca
wwwmetabolicreset.co *.wwwmetabolicreset.co
*.api.zexo.at *.bdf324.zexo.at zexo.at *.zexo.at