DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=sheimai.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 30, 2026
Valid Until
April 30, 2026 81 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
FF:0F:75:A8:14:B7:4D:C8:56:FF:5E:FA:D1:69:FA:6D:B5:54:FC:AA:0C:DB:93:32:1D:8D:7F:E5:FA:85:EC:FB
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
sheimai.com *.sheimai.com *.admin.sheimai.com *.demo.sheimai.com *.mail.sheimai.com *.webmail.sheimai.com *.whm.sheimai.com

Other domains in certificate

91miai.life *.91miai.life
ayazpazar.com *.ayazpazar.com *.tracking.ayazpazar.com *.ww38.ayazpazar.com
*.admin.cyephone.com cyephone.com *.cyephone.com *.mail.cyephone.com
*.dev.gentlemannish.com gentlemannish.com *.gentlemannish.com *.www.gentlemannish.com
jtqbpm37.top *.jtqbpm37.top
jungano.com *.jungano.com
kankone.com *.kankone.com
meineak.com *.meineak.com
meme-exchange.com *.meme-exchange.com
*.mail.moc-moc.com moc-moc.com *.moc-moc.com
*.admin.omnisolid.com *.bgptools-wildcard-confirmed.omnisolid.com *.dev.omnisolid.com omnisolid.com *.omnisolid.com
pedestrian-accident-682688608.click *.pedestrian-accident-682688608.click
*.mail.prioryze.com prioryze.com *.prioryze.com *.vpn.prioryze.com
*.bbs.quantifytraffic.com *.hostmaster.quantifytraffic.com *.m.quantifytraffic.com *.mail.quantifytraffic.com quantifytraffic.com *.quantifytraffic.com *.www.quantifytraffic.com
rahlp.net *.rahlp.net
sirrichardsdistillery.com *.sirrichardsdistillery.com
sizqm9y.top *.sizqm9y.top
sorjp88.info *.sorjp88.info
super-artificialintelligence.com *.super-artificialintelligence.com
tiktok-advertising-agency.click *.tiktok-advertising-agency.click
trustapex.cc *.trustapex.cc
*.app.twinfallscounty.com *.hostmaster.twinfallscounty.com *.mail.twinfallscounty.com twinfallscounty.com *.twinfallscounty.com
*.asia.usahaprediksi-hk.com *.cfd.usahaprediksi-hk.com *.com.usahaprediksi-hk.com *.ftp.usahaprediksi-hk.com *.mail.usahaprediksi-hk.com *.mom.usahaprediksi-hk.com *.tokyo.usahaprediksi-hk.com usahaprediksi-hk.com *.usahaprediksi-hk.com *.xyz.usahaprediksi-hk.com
zv7r2p9.top *.zv7r2p9.top
zw3e4b6.top *.zw3e4b6.top
zwrdz.locker *.zwrdz.locker
zzinoke.com *.zzinoke.com