DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=afrizenz.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
December 27, 2025
Valid Until
March 27, 2026 47 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
26:AE:A8:D1:B2:EF:E2:CC:78:21:FF:14:9F:45:49:ED:FC:26:50:8B:ED:AE:4D:F9:1F:FB:F0:1A:F4:FE:D9:27
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
than.life *.than.life *.batter.than.life *.best.than.life *.better.than.life *.boys.than.life *.demidoff-larger.than.life *.important.than.life *.larger.than.life *.longer.than.life *.madum.than.life *.more.than.life *.usuful.than.life

Other domains in certificate

afrizenz.com *.afrizenz.com *.visitor.afrizenz.com
*.analytic.craiglist.co craiglist.co *.craiglist.co *.data.craiglist.co *.demo.craiglist.co *.muskegon.craiglist.co *.old.craiglist.co *.portlans.craiglist.co *.preprod.craiglist.co *.slo.craiglist.co *.staging.craiglist.co *.test.craiglist.co *.vancouver.craiglist.co *.ww01.craiglist.co *.www.craiglist.co
discountbestoffersnow.fun *.discountbestoffersnow.fun *.fun.discountbestoffersnow.fun
gaigutv.vip *.gaigutv.vip *.vipwww.gaigutv.vip *.ww.gaigutv.vip *.ww12.gaigutv.vip *.ww38.gaigutv.vip *.ww7.gaigutv.vip
monkeytyep.com *.monkeytyep.com *.ww25.monkeytyep.com
*.central.nextbyte.com.au nextbyte.com.au *.nextbyte.com.au *.solutions.nextbyte.com.au
*.admin.novostertopik.com *.beta.novostertopik.com *.cloud.novostertopik.com *.customer.novostertopik.com *.dev.novostertopik.com *.download.novostertopik.com *.files.novostertopik.com *.ftp.novostertopik.com *.gw.novostertopik.com *.imap.novostertopik.com *.img.novostertopik.com *.login.novostertopik.com *.m.novostertopik.com *.mail.novostertopik.com *.mail2.novostertopik.com *.node.novostertopik.com novostertopik.com *.novostertopik.com *.pop.novostertopik.com *.pop3.novostertopik.com *.private.novostertopik.com *.rds.novostertopik.com *.rdweb.novostertopik.com *.remote.novostertopik.com *.shop.novostertopik.com *.sitemap.novostertopik.com *.sitemaps.novostertopik.com *.static.novostertopik.com *.support.novostertopik.com *.user.novostertopik.com *.vpn.novostertopik.com *.webmail.novostertopik.com
onlinemutualpurpose.com *.onlinemutualpurpose.com *.org.onlinemutualpurpose.com
tbdevhun.eu *.tbdevhun.eu
*.pic.tuli.au tuli.au *.tuli.au *.ww38.tuli.au