DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=nrlbackedbydata.com.au
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 11, 2026
Valid Until
April 11, 2026 71 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
65:64:07:6B:9B:03:B5:AE:D4:C3:41:BD:7A:77:5C:4F:E1:89:54:84:65:C3:38:D3:21:63:E3:BA:D7:C0:02:4C
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
bsbctx.com *.bsbctx.com *.account.bsbctx.com *.autodiscover.bsbctx.com *.git.bsbctx.com *.m.bsbctx.com *.mail.bsbctx.com *.mails.bsbctx.com *.nhac.bsbctx.com *.search.bsbctx.com *.sipexternal.bsbctx.com *.support.bsbctx.com *.ww25.bsbctx.com *.ww38.bsbctx.com *.www.bsbctx.com *.xml.bsbctx.com

Other domains in certificate

4lz.info *.4lz.info *.ftp.4lz.info *.hu.4lz.info *.mx.4lz.info
a7632x6.mom *.a7632x6.mom *.ao8m84.a7632x6.mom *.eu5kzd.a7632x6.mom *.m.a7632x6.mom
*.app.bizzknow.com bizzknow.com *.bizzknow.com *.com.bizzknow.com *.mail.bizzknow.com *.webmail.bizzknow.com
*.chat.dreadlocks.life dreadlocks.life *.dreadlocks.life *.www.dreadlocks.life
nrlbackedbydata.com.au *.nrlbackedbydata.com.au
ourpreset.com *.ourpreset.com *.support.ourpreset.com *.webdisk.ourpreset.com *.www.ourpreset.com
*.3g.pcnews.online *.ex.pcnews.online *.forum.pcnews.online *.git.pcnews.online *.hostmaster.pcnews.online *.mail01.pcnews.online *.mail1.pcnews.online *.mail2.pcnews.online *.mx2.pcnews.online pcnews.online *.pcnews.online *.remote.pcnews.online *.ww25.pcnews.online
penapisairbiopure.com *.penapisairbiopure.com *.ww25.penapisairbiopure.com
*.m.regedit.click regedit.click *.regedit.click *.www.regedit.click
*.47.reggarded.club *.accommodation.reggarded.club *.ami.reggarded.club *.bmail.reggarded.club *.cancer.reggarded.club *.dns6.reggarded.club *.emkt.reggarded.club *.hannibal.reggarded.club *.magazin.reggarded.club *.pti.reggarded.club *.r25.reggarded.club reggarded.club *.reggarded.club *.sbs.reggarded.club *.shop3.reggarded.club *.snail.reggarded.club *.stroy.reggarded.club *.verdi.reggarded.club
*.owa.slaaf.com slaaf.com *.slaaf.com
villas-namaste.com *.villas-namaste.com *.www.villas-namaste.com
wire-matrical.com *.wire-matrical.com *.ww38.wire-matrical.com