DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=hermossa.co.uk
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 17, 2026
Valid Until
May 18, 2026 89 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
99:70:52:00:A4:CA:74:23:B6:92:27:85:BF:9A:4C:05:FA:29:03:3D:F3:86:01:78:1E:24:50:BB:7C:A9:E8:C9
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
ppsnusa-link.com *.ppsnusa-link.com *.dev.ppsnusa-link.com *.mail.ppsnusa-link.com *.qa.ppsnusa-link.com *.vpn.ppsnusa-link.com

Other domains in certificate

abrlocation.com *.abrlocation.com *.access.abrlocation.com *.cisco.abrlocation.com *.gp.abrlocation.com *.istservices.abrlocation.com *.mail.abrlocation.com *.portal.abrlocation.com *.rdgw.abrlocation.com *.rds.abrlocation.com *.rdweb.abrlocation.com *.remote.abrlocation.com *.secure.abrlocation.com *.server.abrlocation.com *.service.abrlocation.com *.ssl.abrlocation.com *.terminal.abrlocation.com *.web.abrlocation.com *.webgw.abrlocation.com *.www.abrlocation.com
designasign.co.uk *.designasign.co.uk *.ebay.designasign.co.uk *.euro.designasign.co.uk *.random.designasign.co.uk *.staging.designasign.co.uk *.staging1.designasign.co.uk *.staging2.designasign.co.uk *.staging4.designasign.co.uk *.staging5.designasign.co.uk
*.cf.harrisoneyeclinic.co.uk harrisoneyeclinic.co.uk *.harrisoneyeclinic.co.uk *.staging.harrisoneyeclinic.co.uk *.staging1.harrisoneyeclinic.co.uk *.staging5.harrisoneyeclinic.co.uk
hermossa.co.uk *.hermossa.co.uk *.staging.hermossa.co.uk *.staging2.hermossa.co.uk *.staging3.hermossa.co.uk *.staging4.hermossa.co.uk *.staging6.hermossa.co.uk
*.hostmaster.mufettis.com mufettis.com *.mufettis.com *.ww38.mufettis.com
*.0afmf.netzapzz.xyz *.cnfr9.netzapzz.xyz *.iovou.netzapzz.xyz *.ks0v9.netzapzz.xyz *.lcjev.netzapzz.xyz *.n2pro.netzapzz.xyz *.nan1j.netzapzz.xyz netzapzz.xyz *.netzapzz.xyz *.o7p4x.netzapzz.xyz *.ootbp.netzapzz.xyz *.q86h5.netzapzz.xyz *.rczhl.netzapzz.xyz *.s5kjz.netzapzz.xyz *.u46cv.netzapzz.xyz *.uugt9.netzapzz.xyz *.v3ywp.netzapzz.xyz *.www.netzapzz.xyz *.xbh6h.netzapzz.xyz *.y9zz2.netzapzz.xyz
*.app.nlthub.net nlthub.net *.nlthub.net
poascotland.co.uk *.poascotland.co.uk *.poascotland.poascotland.co.uk *.staging.poascotland.co.uk *.staging1.poascotland.co.uk *.staging2.poascotland.co.uk *.staging4.poascotland.co.uk
tgtuve.com *.tgtuve.com *.ww25.tgtuve.com
*.sub.winx.bet winx.bet *.winx.bet *.www.winx.bet