Cached · 5h ago
76/100 SECURITY SCORE

Certificate Information

Subject
CN=jws.life
Issuer
C=US, O=Let's Encrypt, CN=YR1
Valid From
May 30, 2026
Valid Until
August 28, 2026 72 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A0:80:5A:94:31:3F:36:5D:05:3D:D3:CE:37:06:02:E3:8B:A3:42:AD:16:7F:10:10:5A:E5:E9:48:B7:EB:50:3E
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
nofx.work *.nofx.work *.team.nofx.work

Other domains in certificate

anthonywilliamscoach.com *.anthonywilliamscoach.com *.lc.anthonywilliamscoach.com
*.admin.autoglowhub.com autoglowhub.com *.autoglowhub.com
barberstore.co *.barberstore.co
bedbookers.com *.bedbookers.com *.ns2.bedbookers.com
captainska.com *.captainska.com
conferenzagratuita.it *.conferenzagratuita.it
dle.com.au *.dle.com.au
dolch.com *.dolch.com *.inside2.dolch.com *.internal.dolch.com *.pub.dolch.com *.sendgrid.dolch.com *.ww1.dolch.com *.ww16.dolch.com *.ww25.dolch.com *.ww38.dolch.com
edry.it *.edry.it
fc8.vip *.fc8.vip *.m.fc8.vip
jws.life *.jws.life *.mail.jws.life
mgree.us *.mgree.us
mypetstore.co *.mypetstore.co
nospy.co *.nospy.co *.test.nospy.co
*.mail.pieceofshitbookclub.com pieceofshitbookclub.com *.pieceofshitbookclub.com *.webmail.pieceofshitbookclub.com *.ww25.pieceofshitbookclub.com *.ww38.pieceofshitbookclub.com
radiokletka.club *.radiokletka.club
sgames.co *.sgames.co
sinopsis.co *.sinopsis.co
*.sitemap.soflorida.com soflorida.com *.soflorida.com *.webmail.soflorida.com
*.hostmaster.sonorica.it sonorica.it *.sonorica.it
*.m.spacewhale.co *.mx.spacewhale.co spacewhale.co *.spacewhale.co
*.fs1.uploadhub.co *.fs2.uploadhub.co *.fs3.uploadhub.co *.fs4.uploadhub.co *.fs6.uploadhub.co uploadhub.co *.uploadhub.co
*.krasnodar.xn--48sw8md2c7qm.com *.m.xn--48sw8md2c7qm.com xn--48sw8md2c7qm.com *.xn--48sw8md2c7qm.com
*.hostmaster.xn--m7rr03e.com *.m.xn--m7rr03e.com *.new.xn--m7rr03e.com xn--m7rr03e.com *.xn--m7rr03e.com
*.m.xn--xws.com xn--xws.com *.xn--xws.com
*.m3.ydbnnxs.com ydbnnxs.com *.ydbnnxs.com