DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=traveltodayhq.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
January 31, 2026
Valid Until
May 01, 2026 82 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
5E:0E:8D:E8:0D:45:55:9A:4D:35:81:9C:F6:C9:B6:87:4B:7E:9E:2D:76:8C:16:E8:CC:20:56:41:34:A3:DB:E0
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
zefiy.com *.zefiy.com *.2013wudutianlongbabusifu.zefiy.com *.2013xinbanshentuqingbiansifu.zefiy.com *.2013zuixinhuobaoausifu.zefiy.com *.qiugehaowandetianlongsifu.zefiy.com

Other domains in certificate

anewvision.com *.anewvision.com *.fortiproxy.anewvision.com
armario.com *.armario.com *.m.armario.com
brooklynpharmacy.com *.brooklynpharmacy.com *.events.brooklynpharmacy.com
bxuh.com *.bxuh.com *.ts.bxuh.com
*.access.civilsocietyhelps.org *.apps.civilsocietyhelps.org *.back.civilsocietyhelps.org civilsocietyhelps.org *.civilsocietyhelps.org *.cloud.civilsocietyhelps.org *.collaborate.civilsocietyhelps.org *.crm.civilsocietyhelps.org *.gateway.civilsocietyhelps.org *.hkegydemo.civilsocietyhelps.org *.lime.civilsocietyhelps.org *.mailhost.civilsocietyhelps.org *.rds.civilsocietyhelps.org *.server.civilsocietyhelps.org *.ts.civilsocietyhelps.org
dentalclinicinturkey329963.icu *.dentalclinicinturkey329963.icu
*.6441056b613c32a9.fantasypainting.com *.bb.fantasypainting.com *.comwww.fantasypainting.com *.control.fantasypainting.com *.email.fantasypainting.com *.facebook.fantasypainting.com fantasypainting.com *.fantasypainting.com *.forum.fantasypainting.com *.mobile.fantasypainting.com *.mx2.fantasypainting.com *.my.fantasypainting.com *.random.fantasypainting.com *.soporte.fantasypainting.com *.t.fantasypainting.com *.users.fantasypainting.com *.v2.fantasypainting.com *.wildcard.fantasypainting.com *.ww25.fantasypainting.com
*.api.h2ox.org h2ox.org *.h2ox.org
isleofwightcomputershop.co.uk *.isleofwightcomputershop.co.uk *.wildcard.isleofwightcomputershop.co.uk *.ww25.isleofwightcomputershop.co.uk
*.aaa.jwellers.com *.ckc.jwellers.com *.comune.jwellers.com *.egal.jwellers.com *.helpdesk.jwellers.com jwellers.com *.jwellers.com *.kay.jwellers.com *.mail.jwellers.com *.osr.jwellers.com *.png.jwellers.com *.random.jwellers.com *.tns.jwellers.com *.ww25.jwellers.com *.ww38.jwellers.com
phillysonthehill.net *.phillysonthehill.net *.wildcard.phillysonthehill.net
*.88.phimvietnam.com phimvietnam.com *.phimvietnam.com *.w.phimvietnam.com *.webmail.phimvietnam.com *.wildcard.phimvietnam.com
*.api.traveltodayhq.com *.backend.traveltodayhq.com *.staging.traveltodayhq.com traveltodayhq.com *.traveltodayhq.com