DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=posts3d.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 31, 2026
Valid Until
May 01, 2026 80 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
02:24:3E:AB:34:84:41:17:FF:CB:75:F8:5C:3C:86:3C:19:CF:2C:E1:D0:8B:D0:85:17:19:0C:09:B0:0B:EE:DF
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
pinsey.com *.pinsey.com

Other domains in certificate

pgonf.cc *.pgonf.cc
philanthropicphacilitations.com *.philanthropicphacilitations.com
pizzapartythailand.com *.pizzapartythailand.com
placardpt.org *.placardpt.org
posts3d.com *.posts3d.com
pvoiwkjitogcsvexkloy.com *.pvoiwkjitogcsvexkloy.com
qaqjf.net *.qaqjf.net
reactfltz.com *.reactfltz.com
rebo4.com *.rebo4.com
rewardscard.in *.rewardscard.in
rivankurniawan-trader.vip *.rivankurniawan-trader.vip
roofing-jobs-ca1-dp.click *.roofing-jobs-ca1-dp.click
rv3cxfn.top *.rv3cxfn.top
samurai69.org *.samurai69.org
schc.hu *.schc.hu
sd06.top *.sd06.top
sharnews.com *.sharnews.com
slowbicyclemovement.org *.slowbicyclemovement.org
spo9ywe.top *.spo9ywe.top
subs.market *.subs.market
tablixx.com *.tablixx.com
testingmoney.com *.testingmoney.com
trytrigifyservice.com *.trytrigifyservice.com
umbrasunny.com *.umbrasunny.com
unifiedprofile.com *.unifiedprofile.com
unifiedprofiles.com *.unifiedprofiles.com
unilogorobotics.com *.unilogorobotics.com
upperdeckud3.com *.upperdeckud3.com
uz52.top *.uz52.top
varinscience.com *.varinscience.com
varioglass.sk *.varioglass.sk
vinegar.us *.vinegar.us
vulkan-deluxecasino.com *.vulkan-deluxecasino.com
wccvc.bid *.wccvc.bid
wt69.top *.wt69.top
www12088w.com *.www12088w.com
wwwh403.cc *.wwwh403.cc
wwwnso.com *.wwwnso.com
wwwsoccervista.com *.wwwsoccervista.com
wyzsw.net *.wyzsw.net
x4a8c1d7.info *.x4a8c1d7.info
xn----twfr4fwavdj5a2fxa4b.com *.xn----twfr4fwavdj5a2fxa4b.com
yayahappy.com *.yayahappy.com
zkqqiur6am.net *.zkqqiur6am.net