DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=luppi.net
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 06, 2026
Valid Until
May 07, 2026 88 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
94:E6:0A:69:93:E8:9C:6D:40:60:0E:94:18:39:59:D2:88:77:E0:4F:ED:94:DB:99:96:20:89:40:F6:BA:C5:69
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
sazaz.com *.sazaz.com *.cpanel.sazaz.com *.jira.sazaz.com *.mail.sazaz.com *.mx2.sazaz.com *.pop3.sazaz.com *.random.sazaz.com *.sitemap.sazaz.com *.webdisk.sazaz.com *.webmail.sazaz.com *.ww17.sazaz.com

Other domains in certificate

*.backend.carebills.com carebills.com *.carebills.com *.demo.carebills.com
fifthub.com *.fifthub.com
flixonede.com *.flixonede.com
herogayab.me *.herogayab.me *.ww.herogayab.me *.wwu.herogayab.me *.wwv.herogayab.me
*.autodiscover.luppi.net *.cloud.luppi.net *.drvpn.luppi.net *.email.luppi.net *.forticlient.luppi.net *.fortigate.luppi.net *.ftp.luppi.net *.gate.luppi.net *.imap.luppi.net luppi.net *.luppi.net *.mail.luppi.net *.portal.luppi.net *.smtp.luppi.net *.ssl.luppi.net
*.ftp.menamagazine.org menamagazine.org *.menamagazine.org *.www.menamagazine.org
*.ftp.moviecapture.com moviecapture.com *.moviecapture.com
*.api.satmas.com *.mail.satmas.com satmas.com *.satmas.com *.ww17.satmas.com *.ww25.satmas.com
*.mail.scuoladicucina.com scuoladicucina.com *.scuoladicucina.com
*.cloud.soaprano.com *.mail.soaprano.com soaprano.com *.soaprano.com
*.access.v1sion.com *.admin.v1sion.com *.anyconnect.v1sion.com *.autodiscover.v1sion.com *.cisco.v1sion.com *.ciscoasa.v1sion.com *.ciscovpn.v1sion.com *.cloud.v1sion.com *.cloudvpn.v1sion.com *.cpcalendars.v1sion.com *.email.v1sion.com *.gateway.v1sion.com *.imap.v1sion.com *.m.v1sion.com *.mail.v1sion.com *.portal.v1sion.com *.ravpn.v1sion.com *.secure.v1sion.com *.smtp.v1sion.com *.ssl.v1sion.com v1sion.com *.v1sion.com *.vpn.v1sion.com *.webdisk.v1sion.com
*.sitemap.vankoolwijk.com *.sitemaps.vankoolwijk.com vankoolwijk.com *.vankoolwijk.com *.webdisk.vankoolwijk.com *.webmail.vankoolwijk.com