DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=sarastro-nanotec.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 04, 2026
Valid Until
May 05, 2026 86 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
CE:29:B2:10:53:EF:8F:A5:DA:6B:3A:E4:74:4E:4C:25:74:E1:36:3E:0E:8F:7E:98:E6:E4:FC:50:43:3D:C7:8A
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
silenceisbroken.com *.silenceisbroken.com

Other domains in certificate

saudi.co.in *.saudi.co.in
sarastro-nanotec.com *.sarastro-nanotec.com
sauerland.it *.sauerland.it
sb888.live *.sb888.live
schaufenster.it *.schaufenster.it
schoolstoer.net *.schoolstoer.net
scorehub426.info *.scorehub426.info
seahawkyouthrugby.com *.seahawkyouthrugby.com
sectionalsofa.net *.sectionalsofa.net
secureinveststrategy.cyou *.secureinveststrategy.cyou
secures.it *.secures.it
securitd.net *.securitd.net
selector2025.xyz *.selector2025.xyz
seltronmkt.sbs *.seltronmkt.sbs
sereneweddingevents.beauty *.sereneweddingevents.beauty
service-geeni-uk.org *.service-geeni-uk.org
setups.it *.setups.it
seximovies.com *.seximovies.com
shadowchampion93.shop *.shadowchampion93.shop
shadyacrerabbitry.com *.shadyacrerabbitry.com
sheowolf.com *.sheowolf.com
sherky.com *.sherky.com
shezebridal.com *.shezebridal.com
shieldsatria.cyou *.shieldsatria.cyou
shortgen.vip *.shortgen.vip
showmehowto.net *.showmehowto.net
siapputar.xyz *.siapputar.xyz
sichrisbestherabbott.com *.sichrisbestherabbott.com
signature.cafe *.signature.cafe
signhub.co *.signhub.co
sihatehome.com *.sihatehome.com
sihuyingyuan.sbs *.sihuyingyuan.sbs
simply0.com *.simply0.com
sjkltvm.net *.sjkltvm.net
slh5.online *.slh5.online
slotangkasa338.quest *.slotangkasa338.quest
slovensko.it *.slovensko.it
smartdevice.it *.smartdevice.it
smartgrowthtools.com *.smartgrowthtools.com
smartskill.co *.smartskill.co
smwinwood.cyou *.smwinwood.cyou
snakeshoes.it *.snakeshoes.it
snapdeak.com *.snapdeak.com
socfinz.xyz *.socfinz.xyz