DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=helthy.store
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
December 13, 2025
Valid Until
March 13, 2026 32 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B5:DE:CD:A1:87:88:3A:E2:4D:4D:E8:63:D5:9A:58:54:A1:4F:3F:E0:20:8E:01:49:94:54:A6:E2:8E:9A:7E:CE
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
sne.com.au *.sne.com.au *.hostmaster.sne.com.au

Other domains in certificate

alternative-democratique.org *.alternative-democratique.org *.ecoles.alternative-democratique.org
boatsforsalebyowner.net *.boatsforsalebyowner.net *.ww25.boatsforsalebyowner.net *.ww38.boatsforsalebyowner.net
casinoverhuur.net *.casinoverhuur.net *.hostmaster.casinoverhuur.net
*.forum.freemp3download.co freemp3download.co *.freemp3download.co
helthy.store *.helthy.store *.www.helthy.store
hireadeveloper.com.au *.hireadeveloper.com.au *.ww38.hireadeveloper.com.au
*.hostmaster.kiddoos.com kiddoos.com *.kiddoos.com *.random.kiddoos.com *.remote.kiddoos.com *.ww16.kiddoos.com *.ww25.kiddoos.com *.ww38.kiddoos.com *.www.kiddoos.com
*.ipv6.mediabikes.com.au mediabikes.com.au *.mediabikes.com.au
*.ftp.memefi.live memefi.live *.memefi.live *.www.memefi.live
*.mail02.offroads.com *.ns1.offroads.com offroads.com *.offroads.com *.pbrand.offroads.com *.smtps.offroads.com *.www.offroads.com
sapphirebeach.org *.sapphirebeach.org
startit.com *.startit.com *.x.startit.com
*.com.thenewalexandrialibrary.com thenewalexandrialibrary.com *.thenewalexandrialibrary.com
*.ns2.vegarewards.com *.track.vegarewards.com vegarewards.com *.vegarewards.com *.webmail.vegarewards.com *.www.vegarewards.com
*.6441056b613c32a9.weightlossassistant.io *.admin.weightlossassistant.io *.app.weightlossassistant.io *.charts-job.weightlossassistant.io *.controller-vis.weightlossassistant.io *.dash-dynamic.weightlossassistant.io *.decision-superset2.weightlossassistant.io *.dev-analytics.weightlossassistant.io *.dev.weightlossassistant.io *.dwh.weightlossassistant.io *.landing.weightlossassistant.io *.pixel.weightlossassistant.io *.prod.weightlossassistant.io *.production.weightlossassistant.io *.report.weightlossassistant.io *.staging-analytics.weightlossassistant.io *.staging.weightlossassistant.io *.super.weightlossassistant.io *.superset.weightlossassistant.io *.test.weightlossassistant.io *.trends.weightlossassistant.io *.uat-argo.weightlossassistant.io weightlossassistant.io *.weightlossassistant.io *.ww25.weightlossassistant.io
*.elsa.whittling.com *.ftp.whittling.com whittling.com *.whittling.com *.ww25.whittling.com