DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=carrenrals.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 23, 2026
Valid Until
April 23, 2026 73 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
12:49:3F:BE:A2:AF:4C:10:6D:E7:12:DB:74:DE:73:97:5C:6A:70:50:B9:DF:2E:F2:AD:D1:1D:F7:18:B7:C8:9E
Alternative Names
88 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

88 domains
smartheating.shop *.smartheating.shop

Other domains in certificate

123movierulz.xyz *.123movierulz.xyz *.blog.123movierulz.xyz *.demo.123movierulz.xyz
*.ads.anestos.com anestos.com *.anestos.com *.emv1.anestos.com *.mx1.anestos.com *.smtp.anestos.com *.smtp01.anestos.com *.ww38.anestos.com
blazebottle.com *.blazebottle.com
bonzidrink.com *.bonzidrink.com
carrenrals.com *.carrenrals.com *.forum.carrenrals.com *.games.carrenrals.com *.gw.carrenrals.com *.katalog.carrenrals.com *.mobi.carrenrals.com *.msk.carrenrals.com *.net.carrenrals.com *.pvnmjmail.carrenrals.com *.sms.carrenrals.com *.vnet.carrenrals.com
cobadrinks.com *.cobadrinks.com
comedycocktail.com *.comedycocktail.com
*.adserver.drunkteen.com *.beta.drunkteen.com drunkteen.com *.drunkteen.com *.e.drunkteen.com *.forum.drunkteen.com *.magento.drunkteen.com *.net.drunkteen.com *.static.drunkteen.com *.videos.drunkteen.com *.webmail.drunkteen.com *.ww1.drunkteen.com
*.ads.freevirusremoval.com *.blah.freevirusremoval.com *.demo.freevirusremoval.com *.dev.freevirusremoval.com *.email.freevirusremoval.com *.fashion.freevirusremoval.com *.forum.freevirusremoval.com *.foto.freevirusremoval.com *.free.freevirusremoval.com freevirusremoval.com *.freevirusremoval.com *.icm.freevirusremoval.com *.maine.freevirusremoval.com *.pool.freevirusremoval.com *.staging.freevirusremoval.com *.store.freevirusremoval.com *.users.freevirusremoval.com
*.cpcontacts.goldtransport.co.uk goldtransport.co.uk *.goldtransport.co.uk
hookbox.org *.hookbox.org
lungcancertreatment172872.icu *.lungcancertreatment172872.icu
oldnyoungtaboo.xyz *.oldnyoungtaboo.xyz
*.es.pintarsatellite.com pintarsatellite.com *.pintarsatellite.com
*.server.snapesave.io snapesave.io *.snapesave.io
topronnigeria.com *.topronnigeria.com
umzugdeutschland555117.icu *.umzugdeutschland555117.icu
vraylarforbipolar828077.icu *.vraylarforbipolar828077.icu
weddingvenue823473.icu *.weddingvenue823473.icu
xxxpokerparty.com *.xxxpokerparty.com