DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=iland.life
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 17, 2026
Valid Until
April 17, 2026 81 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
3F:A4:2C:00:D5:6D:F3:CE:14:A6:31:05:E1:99:84:FF:E9:33:AD:07:1F:C0:A5:30:EE:87:67:E9:A1:DF:45:75
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
sass.no *.sass.no *.10834576-927e-4a23-a267-21d49bf86684.sass.no *.app.sass.no *.b18308ee-1fc7-40f1-9a11-12052392653d.sass.no *.backup.sass.no *.beta.sass.no *.biss.sass.no *.c.sass.no *.cloud.sass.no *.cpanel.sass.no *.crm.sass.no *.dashboard.sass.no *.dev.sass.no *.kalala.sass.no *.kc.sass.no *.lime.sass.no *.localhost.sass.no *.m.sass.no *.madon.sass.no *.mail.sass.no *.mailer.sass.no *.marketing.sass.no *.members.sass.no *.mg.sass.no *.minio.sass.no *.new.sass.no *.notexistscrm.sass.no *.notexistslime.sass.no *.qa.sass.no *.rd.sass.no *.rds.sass.no *.rdweb.sass.no *.remote.sass.no *.secure.sass.no *.sitemap.sass.no *.sitemaps.sass.no *.sslvpn.sass.no *.staging.sass.no *.stg.sass.no *.tbdjdminio.sass.no *.test.sass.no *.uat.sass.no *.vpn.sass.no *.web.sass.no *.wildcard.sass.no *.winorgws.sass.no *.www.sass.no

Other domains in certificate

52gggg80.xyz *.52gggg80.xyz *.cy.52gggg80.xyz *.ff.52gggg80.xyz *.fm.52gggg80.xyz *.fy.52gggg80.xyz *.mc.52gggg80.xyz *.mf.52gggg80.xyz *.mm.52gggg80.xyz *.pc.52gggg80.xyz *.pm.52gggg80.xyz *.pp.52gggg80.xyz *.yc.52gggg80.xyz *.ym.52gggg80.xyz
aircash.finance *.aircash.finance *.docs.aircash.finance *.legacy.aircash.finance
derbymode247.live *.derbymode247.live
iland.life *.iland.life
now-on-air.com *.now-on-air.com *.trial.now-on-air.com *.ww12.now-on-air.com *.ww25.now-on-air.com *.www.now-on-air.com
okcupids.com *.okcupids.com *.staging.okcupids.com
*.collab.themarketingdivision.us *.lucy.themarketingdivision.us *.ofmpac.themarketingdivision.us *.team.themarketingdivision.us themarketingdivision.us *.themarketingdivision.us *.traffix.themarketingdivision.us *.wlp.themarketingdivision.us *.ww25.themarketingdivision.us *.ww38.themarketingdivision.us