DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=tembekasua.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 01, 2026
Valid Until
May 02, 2026 82 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A5:50:A4:44:F2:46:86:32:2C:4D:B7:02:4A:E7:58:1F:2F:7B:A8:6F:1F:11:E1:E1:F8:88:74:AA:7D:B0:57:B3
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
premierehosting.com *.premierehosting.com

Other domains in certificate

*.6s98n.akbqnkfaizsizkredym.xyz akbqnkfaizsizkredym.xyz *.akbqnkfaizsizkredym.xyz *.rnyzj.akbqnkfaizsizkredym.xyz
casalasagna.com *.casalasagna.com *.ww38.casalasagna.com
*.access.faggio.com faggio.com *.faggio.com
frontier-es.org *.frontier-es.org *.pl.frontier-es.org
ke64.top *.ke64.top
kqmqy.pro *.kqmqy.pro
kutryie1440.vip *.kutryie1440.vip
laliebre.com *.laliebre.com *.secureaccess.laliebre.com
mapsnft.com *.mapsnft.com
mdfxnja198.vip *.mdfxnja198.vip
*.backup.monotune.com monotune.com *.monotune.com
mortgageprograms978811.icu *.mortgageprograms978811.icu
mtk5oj2f.top *.mtk5oj2f.top
mx95.cc *.mx95.cc
oigame.love *.oigame.love
pbahaup.com *.pbahaup.com
pf768.top *.pf768.top
pgdaa.one *.pgdaa.one
q4cpnpb.top *.q4cpnpb.top
quadholdings.com *.quadholdings.com
rajawin63.net *.rajawin63.net
sc9qiqx.net *.sc9qiqx.net
sdtalikasihmandiri.org *.sdtalikasihmandiri.org
slyayr.pro *.slyayr.pro
spiritsofthenight.com *.spiritsofthenight.com
techtreesolutions.com *.techtreesolutions.com
*.nsd.tembekasua.com tembekasua.com *.tembekasua.com
tfpzkc.pro *.tfpzkc.pro
ttabet.pro *.ttabet.pro
tyfyfod9.top *.tyfyfod9.top
uuu5358.top *.uuu5358.top
vax80.top *.vax80.top
vmtbp.net *.vmtbp.net
vns318.cc *.vns318.cc
wdref.pro *.wdref.pro
wkr777.live *.wkr777.live
wkr777.pro *.wkr777.pro
workgrowthhub.site *.workgrowthhub.site
xephangnhacai.win *.xephangnhacai.win
zk1nl9o51i7ku9u.com *.zk1nl9o51i7ku9u.com