77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.myjoul.app
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
June 28, 2026
Valid Until
September 26, 2026 42 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
0E:07:62:3F:B5:07:3F:37:AF:D8:0F:35:36:BE:F3:EC:7B:68:A8:EA:2F:21:C9:F4:71:F7:A9:BD:46:AD:76:13
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
gooddevelopment.studio

Other domains in certificate

invoices.alentkhbat.com
aliasgame.com.ua
altrosa.app
today.apptist.app
reports.avgust.com.co
bascool.app
www.baste.me
beershira.org.il
belit.ai
www.beovoz.rs
blessingbox-ai.com
ideamaker.bokeringo.com
bookommune.com
bytesdeploy.com
cborodescu.com
cemerlangitech.com
cep.edu.co
panda.ld.comicsans.games
cophero.com
www.covidmealsforindia.com
www.crombouke.media
www.curiouspacks.com
www.cygdisenos.com
www.dgdemmer.com
register.districtconference7030.com
donsegurito.com
kupan.drilldown.online
eduzolve.com
enfermeriaonline.net
envorum.com
equipodium.com
ernestns.com
moderator.examind.io
fabricadeequilibrio.com.br
fixdentalcareug.com
flowlinks.app
founderstruck.com
g0solutions.com
galac.app
galadiaz.com
chatapp.gunvantgmc.in
www.haloplay.co
henrysjourney.app
www.huhtecoy.fi
www.indal-tec.com
dashboard.inpulse.education
isomatric.com
istokkit.app
invite.kaji.app
krownlink.app
lakitowines.com www.lakitowines.com
dashboard.legalsphere.co.uk
lifeintheuk.pro
tv.linkbong88.live
help.linkglobal.org
linqs.jp
lovetouch.pl
global.loyall.com.br
internal-docs.mcfiddles.ai
michellemade.com
moneylovefun.com
mrteerecovery.com
www.msshoecompany.fi
link.myculture.app
www.myjoul.app
myriadentertainment.co
orderhis.nakagawahss.com
www.navivoinc.com
app.obranova.cl
www.oldersister.app
new.philippealexandre.ca
www.prakhar.me
promptwizard.art
avbbattery.pukky-it.com
pymefacil.com.do
www.qrfacil.mx
volta.raptor.pizza
www.rux-gmbh.de
sagardevkota.name.np
smthy.app
documentation.stoiccapital.com.sg
www.study-hub.co.uk
suradet.site
staging.symplicity.app
aps.theairportservices.com
app.staging.thewoosah.com
vipcpa.ca
vishwak.me
wefttakt.com
www.whyloop.tech
lost-in-translation.whywontit.work
www.williswcy.com
staging.app.wisetracking.pt
chiron-gfcf.x3d-ai.jp
www.yaaro.ai
yep-dev.art
ytkapp.com
www.zerodayarcade.com