DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=bowmanfence.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 07, 2026
Valid Until
May 08, 2026 89 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
10:11:E9:70:03:6C:35:BF:18:7A:F0:51:0B:56:78:45:C2:69:F8:67:36:75:E0:D2:8A:5C:6B:F2:81:B2:A8:04
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
tegata.com *.tegata.com *.api.tegata.com *.test.tegata.com *.ww.tegata.com *.ww01.tegata.com *.ww1.tegata.com *.ww11.tegata.com *.www.tegata.com

Other domains in certificate

bets.work *.bets.work *.cpanel.bets.work *.cpcalendars.bets.work *.cpcontacts.bets.work *.mail.bets.work *.sitemap.bets.work *.vpn.bets.work *.webdisk.bets.work *.ww1.bets.work *.ww3.bets.work
*.1d20368f-c83f-4d58-a24e-f420119f6c85.bitcoinraffle.org bitcoinraffle.org *.bitcoinraffle.org *.bot.bitcoinraffle.org *.comeging.bitcoinraffle.org *.dash.bitcoinraffle.org *.m.bitcoinraffle.org *.shop.bitcoinraffle.org *.staging.bitcoinraffle.org *.www.bitcoinraffle.org
*.7.bowmanfence.com bowmanfence.com *.bowmanfence.com *.demo.bowmanfence.com *.dev.bowmanfence.com *.forum.bowmanfence.com *.ww1.bowmanfence.com *.ww16.bowmanfence.com *.ww38.bowmanfence.com
flnaragaronioasdalrfusion.shop *.flnaragaronioasdalrfusion.shop *.ftp.flnaragaronioasdalrfusion.shop *.localhost.flnaragaronioasdalrfusion.shop *.www.flnaragaronioasdalrfusion.shop
*.app.lmorank.com *.dashboard.lmorank.com lmorank.com *.lmorank.com *.web.lmorank.com
*.admin.querubin.com *.anyconnect.querubin.com *.apps.querubin.com *.autoconfig.querubin.com *.autodiscover.querubin.com *.clientesvpn.querubin.com *.cloud2.querubin.com *.connect.querubin.com *.cpanel.querubin.com *.crm.querubin.com *.dashboard.querubin.com *.email.querubin.com *.exchange.querubin.com *.gateway.querubin.com *.leads.querubin.com *.login.querubin.com *.mail.querubin.com *.mobileconnect.querubin.com *.outlook.querubin.com *.portal.querubin.com querubin.com *.querubin.com *.rds.querubin.com *.rds1.querubin.com *.rdweb.querubin.com *.remote.querubin.com *.remote2.querubin.com *.remoto.querubin.com *.sales.querubin.com *.ssl.querubin.com *.sslvpn.querubin.com *.sslvpn2.querubin.com *.sslvpn3.querubin.com *.studentsvpn.querubin.com *.support.querubin.com *.vpn.querubin.com *.vpn2.querubin.com *.vpnssl.querubin.com *.webdisk.querubin.com *.webmail.querubin.com