DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=appmac.de
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
January 31, 2026
Valid Until
May 01, 2026 78 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
EC:A1:27:76:D5:BD:9E:9F:A0:F8:B2:4E:DC:86:AE:E6:A3:05:1E:8B:12:51:F2:D4:6A:5E:34:23:41:7B:C1:2D
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
uwag.com *.uwag.com *.app.uwag.com

Other domains in certificate

antivirusfirewall.com.au *.antivirusfirewall.com.au *.backup.antivirusfirewall.com.au *.hostmaster.antivirusfirewall.com.au *.ww25.antivirusfirewall.com.au
aoundcloud.com *.aoundcloud.com *.m.aoundcloud.com *.ww1.aoundcloud.com
appmac.de *.appmac.de *.tinyrss.appmac.de
dafonts.de *.dafonts.de *.wildcard.dafonts.de
diastock.shop *.diastock.shop
downloadtome.com *.downloadtome.com *.wildcard.downloadtome.com
eesooboh.com *.eesooboh.com *.ildcard.eesooboh.com *.m.eesooboh.com *.wildcard.eesooboh.com
elaz.xyz *.elaz.xyz
erecprime24.store *.erecprime24.store
*.autodiscover.escolainternacional.com *.email.escolainternacional.com escolainternacional.com *.escolainternacional.com *.ftp.escolainternacional.com *.help.escolainternacional.com *.imap.escolainternacional.com *.info.escolainternacional.com *.informes.escolainternacional.com *.lp.escolainternacional.com *.mail.escolainternacional.com *.pop.escolainternacional.com *.portal.escolainternacional.com *.random.escolainternacional.com *.remote.escolainternacional.com *.remote2.escolainternacional.com *.sitemaps.escolainternacional.com *.ssl.escolainternacional.com *.sslvpn.escolainternacional.com *.sslvpn2.escolainternacional.com *.sslvpn3.escolainternacional.com *.vpn.escolainternacional.com *.vpn2.escolainternacional.com *.vpn3.escolainternacional.com *.webmail.escolainternacional.com *.ww16.escolainternacional.com *.ww38.escolainternacional.com
iphone12.sbs *.iphone12.sbs
keikyu-kawasaki.click *.keikyu-kawasaki.click
lanzamientosydescuentos.online *.lanzamientosydescuentos.online
lickteig.com *.lickteig.com *.ts.lickteig.com
lifeinsuranceonline.net *.lifeinsuranceonline.net *.ww1.lifeinsuranceonline.net *.ww38.lifeinsuranceonline.net
*.m.tiduxs.cc tiduxs.cc *.tiduxs.cc
*.admin.usaproject.org *.api.usaproject.org *.app.usaproject.org *.dev.usaproject.org *.edb2177d-0867-420f-b71b-137626b952f5.usaproject.org *.hostmaster.usaproject.org *.m.usaproject.org *.new.usaproject.org usaproject.org *.usaproject.org *.www.usaproject.org
*.dev.verinsflieger.de verinsflieger.de *.verinsflieger.de