DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=beergfreunde.de
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 01, 2026
Valid Until
May 02, 2026 84 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D4:C6:BE:AE:AE:F3:F8:3B:9A:58:F3:2D:D6:F0:0D:0D:53:CC:36:F5:E4:5D:4A:C6:38:32:2D:F5:28:AB:1C:13
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
hessegalleries.com *.hessegalleries.com *.asp.hessegalleries.com *.cd.hessegalleries.com *.cdn.hessegalleries.com *.deepsecurity.hessegalleries.com *.dev.hessegalleries.com *.diamond.hessegalleries.com *.dlab.hessegalleries.com *.events.hessegalleries.com *.ezproxy.hessegalleries.com *.gslb.hessegalleries.com *.hereweb.hessegalleries.com *.industrial.hessegalleries.com *.mha.hessegalleries.com *.mio.hessegalleries.com *.mobile.hessegalleries.com *.ofertas-trabajo.hessegalleries.com *.onlinebusiness.hessegalleries.com *.pdgn2.hessegalleries.com *.plsbeta.hessegalleries.com *.plsstg.hessegalleries.com *.prd-web.hessegalleries.com *.psb.hessegalleries.com *.publish.hessegalleries.com *.ryugaku.hessegalleries.com *.secure.hessegalleries.com *.server.hessegalleries.com *.staging.hessegalleries.com *.trabajo.hessegalleries.com *.web.hessegalleries.com

Other domains in certificate

aurat.com *.aurat.com *.ww11.aurat.com
ayrault.com *.ayrault.com *.ryltqalizee.ayrault.com
beergfreunde.de *.beergfreunde.de
*.aop.caluniv.in *.appliedphysics.caluniv.in *.biochem.caluniv.in *.botany.caluniv.in caluniv.in *.caluniv.in *.ciec16.caluniv.in *.cudodl.caluniv.in *.news.caluniv.in *.stat.caluniv.in
enchant.studio *.enchant.studio *.random.enchant.studio *.sichtbar-api.enchant.studio *.zetra.enchant.studio
*.erp.paranountplus.com paranountplus.com *.paranountplus.com
*.autodiscover.raisedimage.com *.clientesvpn.raisedimage.com *.cloudapp.raisedimage.com *.cpcontacts.raisedimage.com *.desktopstudent.raisedimage.com *.firewall.raisedimage.com *.gate.raisedimage.com *.gateway.raisedimage.com *.gp.raisedimage.com *.imap.raisedimage.com *.labvirtual.raisedimage.com *.m.raisedimage.com *.mail.raisedimage.com *.office.raisedimage.com *.office2.raisedimage.com *.officevpn.raisedimage.com *.owa.raisedimage.com raisedimage.com *.raisedimage.com *.ssl.raisedimage.com *.virtualapps.raisedimage.com *.virtualstudent.raisedimage.com *.vpn2.raisedimage.com *.webdisk.raisedimage.com
*.bapetco.simis.net simis.net *.simis.net *.smalibam.simis.net *.ww16.simis.net
*.alizados.yanay.com *.hostmaster.yanay.com yanay.com *.yanay.com