DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=tanaka-arch.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
December 29, 2025
Valid Until
March 29, 2026 48 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
48:E1:8F:90:05:5D:DB:16:07:F5:78:F6:22:04:12:3D:C6:9C:0F:F8:22:C3:25:5D:58:A6:E2:98:95:38:37:11
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
spacepaste.cc *.spacepaste.cc *.ww25.spacepaste.cc

Other domains in certificate

88av472.xyz *.88av472.xyz *.ww25.88av472.xyz
antecho.click *.antecho.click *.webmail.antecho.click
applianceknowledgebank.com *.applianceknowledgebank.com
ayqc.com *.ayqc.com *.dc.ayqc.com *.ww38.ayqc.com
buyeyefortin.com *.buyeyefortin.com
comfort-homes.in *.comfort-homes.in
*.audit.confirmaiton.com *.av.confirmaiton.com *.ci.confirmaiton.com confirmaiton.com *.confirmaiton.com *.mobile.confirmaiton.com *.random.confirmaiton.com *.us.confirmaiton.com *.users.confirmaiton.com
doeatmanchester.co.uk *.doeatmanchester.co.uk
*.conteudos.estudandonoexterior.com.br estudandonoexterior.com.br *.estudandonoexterior.com.br
eurorecyclingbrokers.co.uk *.eurorecyclingbrokers.co.uk
exeterentrepreneurs.co.uk *.exeterentrepreneurs.co.uk
microfilm.com.au *.microfilm.com.au
*.mail.mkmoviesmm.com mkmoviesmm.com *.mkmoviesmm.com *.video.mkmoviesmm.com *.ww25.mkmoviesmm.com
officeofjontrickett.co.uk *.officeofjontrickett.co.uk
pinsterst.com *.pinsterst.com *.random.pinsterst.com *.ww38.pinsterst.com
*.nas.pixako.tech pixako.tech *.pixako.tech
robux.ltd *.robux.ltd *.ww25.robux.ltd
shinkick.uk *.shinkick.uk
sparklingwines.com.au *.sparklingwines.com.au
tanaka-arch.com *.tanaka-arch.com *.www.tanaka-arch.com
vgmain.site *.vgmain.site *.ww25.vgmain.site
*.bfimq.vycf.com *.bfkot.vycf.com *.cfj.vycf.com *.dgjmq.vycf.com *.gjo.vycf.com *.gko.vycf.com *.hjm.vycf.com *.ilo.vycf.com *.jnr.vycf.com *.kot.vycf.com *.lotw.vycf.com *.mosv.vycf.com *.oveh.vycf.com *.quyd.vycf.com *.rvad.vycf.com *.tycgj.vycf.com *.uxbdh.vycf.com vycf.com *.vycf.com *.vyglp.vycf.com *.wadgj.vycf.com *.zcgko.vycf.com
whichhouse.com.au *.whichhouse.com.au