DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=habari.store
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
January 09, 2026
Valid Until
April 09, 2026 64 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D7:67:E9:7A:2B:4D:60:40:6F:AF:E5:65:C2:61:7E:A1:D5:38:02:3C:E8:5E:84:3C:97:35:EF:DF:2C:78:F8:28
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
vonvon.net *.vonvon.net *.br.vonvon.net *.cn.vonvon.net *.gcs.vonvon.net *.img.vonvon.net *.next.vonvon.net *.result-img.vonvon.net *.stage.vonvon.net *.ww25.vonvon.net

Other domains in certificate

anay.live *.anay.live
aromagraphy.com *.aromagraphy.com
artdealersteam.com *.artdealersteam.com
btiosxrukb.com *.btiosxrukb.com
*.cdn.credirscore.com credirscore.com *.credirscore.com *.english.credirscore.com *.hosting.credirscore.com *.office2.credirscore.com *.soft.credirscore.com *.tr.credirscore.com *.ufa.credirscore.com *.v28.credirscore.com
familylaw596534.icu *.familylaw596534.icu *.ww25.familylaw596534.icu
*.green.habari.store habari.store *.habari.store
howtorepaircreditfast039662.icu *.howtorepaircreditfast039662.icu
ianis.live *.ianis.live
*.admin.majorchords.com *.go.majorchords.com *.hosting.majorchords.com *.images.majorchords.com *.img.majorchords.com majorchords.com *.majorchords.com *.music.majorchords.com *.pe.majorchords.com *.social.majorchords.com *.soporte.majorchords.com *.status.majorchords.com *.video.majorchords.com *.videos.majorchords.com
metalcreation.co *.metalcreation.co
*.gemini.oole.co *.hostmaster.oole.co oole.co *.oole.co *.research.oole.co *.wildcard.oole.co *.ww25.oole.co *.www.oole.co
organizadoresdebodasenestadosunidos994365.icu *.organizadoresdebodasenestadosunidos994365.icu
outofme.com *.outofme.com
*.net.podters.com podters.com *.podters.com *.shopping.podters.com *.survey.podters.com *.training.podters.com *.ww38.podters.com
scentreview.com *.scentreview.com
*.test.thinkexam.co thinkexam.co *.thinkexam.co
*.random.timesharecancellations.co timesharecancellations.co *.timesharecancellations.co
totaltilecleaningmelbourne.com.au *.totaltilecleaningmelbourne.com.au
*.iana.webdevc.eu webdevc.eu *.webdevc.eu
*.gov.wisr.life wisr.life *.wisr.life