DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=waygroud.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 04, 2026
Valid Until
May 05, 2026 85 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
5B:4D:25:FC:33:FD:E7:D8:F7:CD:68:1D:00:46:36:92:EE:08:76:71:9F:83:84:79:50:1B:73:B7:B7:16:34:B0
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
arcadelot.com *.arcadelot.com *.m.arcadelot.com

Other domains in certificate

air-rakutensreview.com *.air-rakutensreview.com *.ww25.air-rakutensreview.com *.ww38.air-rakutensreview.com
benchspace.com *.benchspace.com
cacahoatan.com *.cacahoatan.com *.store.cacahoatan.com
careerbrightfuture.xyz *.careerbrightfuture.xyz *.he00g.careerbrightfuture.xyz
deca5hlon.de *.deca5hlon.de
desarrollo.world *.desarrollo.world
farmoderm.com *.farmoderm.com *.mailin.farmoderm.com *.mailrelay.farmoderm.com *.smtp1.farmoderm.com
*.comune.gjs3v.vip gjs3v.vip *.gjs3v.vip *.random.gjs3v.vip *.us005.gjs3v.vip
*.careers.glycanbiosciences.com *.employeeform.glycanbiosciences.com glycanbiosciences.com *.glycanbiosciences.com
horiwari.net *.horiwari.net
*.comww25.hot-ladies-here.com hot-ladies-here.com *.hot-ladies-here.com
icc2010.info *.icc2010.info *.iyaatadvertising.icc2010.info
infolintaspendidikan.com *.infolintaspendidikan.com
joystickthai.com *.joystickthai.com
klrtt.de *.klrtt.de *.testen-und-foerdern.klrtt.de
*.abc.ljxlwyq.xyz ljxlwyq.xyz *.ljxlwyq.xyz *.oauth.ljxlwyq.xyz *.random.ljxlwyq.xyz *.ww25.ljxlwyq.xyz *.ww38.ljxlwyq.xyz *.zyz.ljxlwyq.xyz
magendarmpraxis-bielefeld.de *.magendarmpraxis-bielefeld.de
maikele.xyz *.maikele.xyz *.ww25.maikele.xyz *.ww38.maikele.xyz
maisontom.de *.maisontom.de
mdermafacial.de *.mdermafacial.de
*.api.monstra.io *.app.monstra.io *.demo.monstra.io *.dev.monstra.io monstra.io *.monstra.io *.www.monstra.io
moo.cash *.moo.cash
rajaneko.cc *.rajaneko.cc *.ww38.rajaneko.cc
*.docs.rhoneluxe.com rhoneluxe.com *.rhoneluxe.com
*.measurements.suitsuply.com suitsuply.com *.suitsuply.com
*.random.vemcomigo.com vemcomigo.com *.vemcomigo.com
waygroud.com *.waygroud.com