DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=sonograms.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 02, 2026
Valid Until
May 03, 2026 83 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B5:33:8F:BF:2E:04:7F:B9:00:D8:63:C8:91:1B:13:20:36:3D:56:83:CE:CF:A2:FE:77:33:7B:31:44:FF:D0:0A
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
rhule.com *.rhule.com *.m.rhule.com *.netscaler.rhule.com

Other domains in certificate

anmolpublications.com *.anmolpublications.com
arnetttrailers.com *.arnetttrailers.com
boisehousing.com *.boisehousing.com *.staging.boisehousing.com *.ww17.boisehousing.com *.ww38.boisehousing.com
english-corpora.com *.english-corpora.com
*.access.fachini.com *.api.fachini.com fachini.com *.fachini.com *.hostmaster.fachini.com *.webvpn.fachini.com
frenchelshades.com *.frenchelshades.com
*.api.gertie.net *.dev.gertie.net gertie.net *.gertie.net *.m.gertie.net *.ww5.gertie.net
*.aragorn.healthygumsandteeth.com *.demo.healthygumsandteeth.com healthygumsandteeth.com *.healthygumsandteeth.com
japantimes.co.uk *.japantimes.co.uk
mathsisfun.au *.mathsisfun.au
*.hostmaster.patarini.com patarini.com *.patarini.com
*.aaa.portfolio.net.au *.brazil.portfolio.net.au *.europewest.portfolio.net.au *.home.portfolio.net.au *.login.portfolio.net.au *.macq-syd-intel2-gtm4.portfolio.net.au portfolio.net.au *.portfolio.net.au *.remotewebapps.portfolio.net.au *.ww25.portfolio.net.au
providean.com *.providean.com
sabong42.bet *.sabong42.bet
sabong82.bet *.sabong82.bet
sabong84.bet *.sabong84.bet
sheetsacc.com *.sheetsacc.com
sijishe.info *.sijishe.info
skyfall.au *.skyfall.au
*.i.sonograms.com sonograms.com *.sonograms.com
*.assets.spiritualsomatictherapy.com *.secure.spiritualsomatictherapy.com spiritualsomatictherapy.com *.spiritualsomatictherapy.com *.uat.spiritualsomatictherapy.com
squasher.com *.squasher.com
tryxxxindian.pro *.tryxxxindian.pro
*.cpanel.tsghana.com tsghana.com *.tsghana.com
*.demo.veena.net *.m.veena.net veena.net *.veena.net
voyageprivee.com *.voyageprivee.com
ymoveshd.com *.ymoveshd.com
*.ww16.zlatanlegends.com zlatanlegends.com *.zlatanlegends.com