DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=sundararajan.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 03, 2026
Valid Until
May 04, 2026 88 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
10:B3:E8:41:F4:37:47:73:56:88:40:32:66:CE:2C:99:60:39:86:A8:3F:D1:10:B7:11:D7:FC:F4:9C:1F:72:A4
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
tuspuertas.com *.tuspuertas.com

Other domains in certificate

aloro.com *.aloro.com *.ww16.aloro.com *.ww38.aloro.com
annabelleshakesheave.net *.annabelleshakesheave.net
brauchler.com *.brauchler.com *.ww38.brauchler.com
casagirasol.com *.casagirasol.com *.m.casagirasol.com
unionsheng.com.sg *.unionsheng.com.sg
dizustu.com *.dizustu.com *.ww16.dizustu.com *.ww17.dizustu.com *.ww25.dizustu.com
gadi.net *.gadi.net *.random.gadi.net
iglesiaapostolica.com *.iglesiaapostolica.com *.ww16.iglesiaapostolica.com
*.amigostascacantinainc.mealpointca.com *.barykinbistro.mealpointca.com *.bostonpizzainterchangeway.mealpointca.com *.casassteakseafood.mealpointca.com *.crystalpalacerestaurant.mealpointca.com *.dominospizzawinnipegportageave.mealpointca.com *.energycafe.mealpointca.com *.firegrill.mealpointca.com *.haywoodsgrill.mealpointca.com *.jdonjapanesedonburicafe.mealpointca.com *.kimexpressvietnamesecuisine.mealpointca.com mealpointca.com *.mealpointca.com *.pioneerrestaurant.mealpointca.com *.redrockbargrill.mealpointca.com *.restaurantlesousbois.mealpointca.com *.retrosdriveinn.mealpointca.com *.sabipanasianrestaurant.mealpointca.com *.thecottagerestaurant.mealpointca.com *.thecrimsonhoteljasper.mealpointca.com *.thehotspotdiner.mealpointca.com *.timhortonslabaie.mealpointca.com *.tjrestaurantsteakhouse.mealpointca.com *.whistlerwoodfiredpizzacompany.mealpointca.com
passiondiyprojectshub.live *.passiondiyprojectshub.live
rowlandboys.com *.rowlandboys.com
rpyuo.gdn *.rpyuo.gdn
sdkmysqldx.xyz *.sdkmysqldx.xyz
slagerijen.com *.slagerijen.com
sonseca.com *.sonseca.com
sundararajan.com *.sundararajan.com
superkingbed.com *.superkingbed.com
thekai.com *.thekai.com
thesifter.com *.thesifter.com
toypta.com *.toypta.com
trippiehippie.com *.trippiehippie.com
vidaylibertad.com *.vidaylibertad.com
waisi.com *.waisi.com
weddingsdreamlandvows.beauty *.weddingsdreamlandvows.beauty
weddingslovecelebration.beauty *.weddingslovecelebration.beauty
windell.com *.windell.com *.ww17.windell.com
xn--sonfrsatlarayetienalronlinefrsatlar-ghfqi49o.shop *.xn--sonfrsatlarayetienalronlinefrsatlar-ghfqi49o.shop
zierbrunnen.com *.zierbrunnen.com