DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=transportefalavinha.com.br
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
January 13, 2026
Valid Until
April 13, 2026 64 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
EC:C3:9E:50:40:2F:67:CB:4D:E6:58:59:6C:FA:73:BE:66:D4:44:DD:3B:8D:2E:36:DA:F9:2B:9C:4F:E1:0D:0D
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
intute.com *.intute.com *.director.intute.com *.distancecalculator.intute.com *.dl.intute.com *.glante.intute.com *.insight.intute.com *.insights.intute.com *.merchantcenter.intute.com *.qbo.intute.com *.rustore.intute.com *.ww25.intute.com

Other domains in certificate

1stopafricancaribbeanfoods.com *.1stopafricancaribbeanfoods.com
43570130.com *.43570130.com
cartreesinsu.com *.cartreesinsu.com
desiwap.info *.desiwap.info *.ns1.desiwap.info *.ns2.desiwap.info *.ns5.desiwap.info
giadung98.online *.giadung98.online *.mail.giadung98.online
hdredtube.mobi *.hdredtube.mobi *.tezarow.hdredtube.mobi
*.edm.justfashinnow.com justfashinnow.com *.justfashinnow.com *.testing.justfashinnow.com *.ww25.justfashinnow.com
*.insight.lig.us lig.us *.lig.us *.superset.lig.us *.ww.lig.us *.ww16.lig.us
ocbtpubcaowl.com *.ocbtpubcaowl.com
p3-fungeiko55.com *.p3-fungeiko55.com
*.blog.quantale.io *.cdn.quantale.io *.in.quantale.io *.public.quantale.io quantale.io *.quantale.io *.testblog.quantale.io *.us.quantale.io *.ww25.quantale.io
*.imis.realise.live realise.live *.realise.live
*.client.right.com.au *.connect.right.com.au *.random.right.com.au right.com.au *.right.com.au *.secure.right.com.au *.survey.right.com.au *.sydney.right.com.au *.ww38.right.com.au
*.fortyfive.teamspeak.cc teamspeak.cc *.teamspeak.cc *.yugostar.teamspeak.cc
tinbox.cc *.tinbox.cc *.ww25.tinbox.cc
transportefalavinha.com.br *.transportefalavinha.com.br
trolli.online *.trolli.online *.ww25.trolli.online *.ww38.trolli.online
winattennis.com *.winattennis.com
xn--oy2bo9bn1bu7e79ivrxglb.com *.xn--oy2bo9bn1bu7e79ivrxglb.com
*.mail.zlotosrebroczas.com *.targi.zlotosrebroczas.com *.targi2015.zlotosrebroczas.com *.targi2016.zlotosrebroczas.com *.www.zlotosrebroczas.com *.wystawcy.zlotosrebroczas.com zlotosrebroczas.com *.zlotosrebroczas.com