DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=mynygbl.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 02, 2026
Valid Until
May 03, 2026 87 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B6:E0:2E:B4:CA:3E:84:63:57:AD:5A:17:A0:D0:C5:F6:BF:04:C6:7F:C6:29:B7:24:96:1D:90:1F:C3:42:1C:96
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
amazonbook.com *.amazonbook.com *.faceww.amazonbook.com *.random.amazonbook.com *.ww16.amazonbook.com *.ww17.amazonbook.com *.ww25.amazonbook.com *.ww38.amazonbook.com

Other domains in certificate

1ensesthikaye.com *.1ensesthikaye.com *.cdn.1ensesthikaye.com *.random.1ensesthikaye.com *.vr1511.1ensesthikaye.com *.vr2302.1ensesthikaye.com *.vr3008.1ensesthikaye.com
bionicwall.top *.bionicwall.top *.g22y8.bionicwall.top
cheshme.com *.cheshme.com *.heart.cheshme.com *.testserver.cheshme.com
doctolib.site *.doctolib.site *.ebdisk.doctolib.site *.sitemap.doctolib.site *.webdisk.doctolib.site
grendahl.com *.grendahl.com *.remote.grendahl.com
*.forums.herbaldrugs.com herbaldrugs.com *.herbaldrugs.com *.report.herbaldrugs.com *.xen1.herbaldrugs.com
*.7f6b9be6-2fbe-4ea9-a182-d8ff66b6479e.mynygbl.com *.a.mynygbl.com *.abraxas.mynygbl.com *.cloud.mynygbl.com *.dcb69e89-a8d9-4e56-97ed-c7f709dde4f3.mynygbl.com *.dma.mynygbl.com *.docs.mynygbl.com *.forecast.mynygbl.com *.jwsrfww01.mynygbl.com *.members.mynygbl.com mynygbl.com *.mynygbl.com *.portal.mynygbl.com *.public.mynygbl.com *.rd.mynygbl.com *.rds.mynygbl.com *.rdweb.mynygbl.com *.remote.mynygbl.com *.ryqjuww16.mynygbl.com *.vpn1.mynygbl.com *.ww16.mynygbl.com *.ww17.mynygbl.com *.ww25.mynygbl.com *.ww38.mynygbl.com *.wwe.mynygbl.com *.www.mynygbl.com
premixedpaint.com *.premixedpaint.com *.ww25.premixedpaint.com
*.access.royalkosher.com *.gateway.royalkosher.com *.rdweb.royalkosher.com royalkosher.com *.royalkosher.com *.ww38.royalkosher.com
*.rustore.serendipi.com serendipi.com *.serendipi.com
*.gp.thesampsons.com thesampsons.com *.thesampsons.com
*.m.thunderthighs.com *.rengong.thunderthighs.com thunderthighs.com *.thunderthighs.com *.ww16.thunderthighs.com *.ww25.thunderthighs.com
*.sitemap.vanweperen.com *.sitemaps.vanweperen.com vanweperen.com *.vanweperen.com
*.hml.viktori.com *.mail.viktori.com viktori.com *.viktori.com