DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=cliphot69.me
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 04, 2026
Valid Until
May 05, 2026 84 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
4F:25:E6:EE:7B:13:22:06:DA:22:47:D0:C9:5B:62:82:50:91:F8:D3:F4:9C:28:5B:64:2D:07:9F:75:C4:73:4E
Alternative Names
88 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

88 domains
richardbaker.com *.richardbaker.com *.sitemaps.richardbaker.com

Other domains in certificate

byhmzxm.com *.byhmzxm.com *.m15.byhmzxm.com *.m18.byhmzxm.com *.m19.byhmzxm.com *.m20.byhmzxm.com *.m23.byhmzxm.com *.m29.byhmzxm.com *.m31.byhmzxm.com *.m35.byhmzxm.com *.m4.byhmzxm.com
*.40157201-5f75-46c0-a6b9-165823aa0d6f.cliphot69.me *.a318ae8b-787d-42a4-b58d-532cf833e268.cliphot69.me *.ai.cliphot69.me *.app.cliphot69.me *.auth.cliphot69.me cliphot69.me *.cliphot69.me *.emv1.cliphot69.me *.mail.cliphot69.me *.owa.cliphot69.me *.public.cliphot69.me *.secure.cliphot69.me *.web.cliphot69.me *.webmail.cliphot69.me *.wildcard.cliphot69.me *.www.cliphot69.me
*.d.flood-it.xyz flood-it.xyz *.flood-it.xyz
*.admin.hwansang.net hwansang.net *.hwansang.net *.ww1.hwansang.net
*.dx.kenwen.com kenwen.com *.kenwen.com *.m.kenwen.com *.txt.kenwen.com *.ww25.kenwen.com
*.agent.mangasusu.site *.alpha.mangasusu.site *.board.mangasusu.site *.dc-0c2403b309fb.mangasusu.site *.dc-dfa6b0f4480f.mangasusu.site *.flow.mangasusu.site *.insights.mangasusu.site mangasusu.site *.mangasusu.site *.ns2.mangasusu.site *.qa.mangasusu.site *.superset-ci.mangasusu.site *.superset.mangasusu.site *.uat.mangasusu.site *.wildcard.mangasusu.site *.ww25.mangasusu.site
munazarahitabet.org *.munazarahitabet.org *.ww1.munazarahitabet.org
*.api.neonagency.org *.cpanel.neonagency.org *.mx2.neonagency.org neonagency.org *.neonagency.org *.wildcard.neonagency.org
newbankowned.com *.newbankowned.com *.wildcard.newbankowned.com
love86.org.cn *.love86.org.cn *.news.love86.org.cn
*.sitemaps.vstore.life vstore.life *.vstore.life
*.acronis.zango.net zango.net *.zango.net
*.la.zhaoav8.vip *.mt.zhaoav8.vip *.v.zhaoav8.vip *.wh.zhaoav8.vip *.wildcard.zhaoav8.vip *.ww38.zhaoav8.vip zhaoav8.vip *.zhaoav8.vip