77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.laocjoshua.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
November 21, 2025
Valid Until
February 19, 2026 88 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
7E:22:C9:F8:5F:D2:C7:D7:F0:E2:54:85:8F:BA:B9:75:E3:56:0A:08:7E:3F:C8:14:4F:E9:59:25:70:6C:4C:BF
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
www.laocjoshua.com

Other domains in certificate

estabelecimentos.acessocriativo.com.br
dev.adelielogistics.com
www.amramadan.com
appsbay.in
areyouadipshit.com
www.atlanta40.com
oberuzwil.avdis.ch
www.axisroot-holdings.info
aydann.dev
app.banskyspis.sk
www.beatthebeans.com
bich.im
billbookpro.com
blupeyi.com
bnbflow.ai
www.brandonsinclair.ca
cards-wallet.budgific.com
www.bytehug.com
calculator-agroplast.com
suse.callmed.mx
www.cannabispassporttour.com
www.captaincolors.com
bchyundaioftupelo.carmunity.io
kieskleurig.citolab.nl
www.hub.com.my
craytos.jp
www.credope.in
www.crismonicwave.com
www.dansroofing208.com
darkturnalley.ca
www.datahive.kr
dokidoki.studio
ece11.com
enema.video
eurika.fr
felipematallanap.com
app.fictivereality.com
www.finico.tech
www.fishomatic.co.za
fliegender-engel.ch
auth.google.frasanet.com.br
freudnfriends.com
agents.gentura.ai
channel-manager.getlychee.link
edoc.moj.gov.kh
haideraltahan.com
www.hamsaem.com
portal-uat.hastingsdeering.com.au
hidden-chat.de
amelioration.hmy-group.com
www.imotive.in
ci.impreszions.biz
inbalancebody.com
insurancetestpractice.com www.insurancetestpractice.com
caps2.leximancer.com
www.lucasjswanson.com
www.madebygina.se
api.marlim.co
www.martinaduerr.ch
mentorconnected.com
mercuriumsolutions.com
vaningen.demo.movello.se
nacita.id
neekavenue.com
link-arquimedes.nibo.com.br
app.oneprojectamonth.com
opentyde.com
www.pdbolinao.com
blacktemple.piticommerce.com
promptnotes.app
app.propmint.io
pucharwisly.pl
readland.io
www.reporting-pal.com
royrishabh.com
rsms.dev
saktichourasia.dev
dev.max.members.sargon.com
secuflare.com
www.sendsculpt.com
public-hiahia.singletapps.dev
www.skm.co.za
sormincorp.com
www.svelta.com.br
syntomate.com
inst23.tallyfor.com
dev.tictacfit.fr
dev-auth.tolettacat.com
www.tomasradic.com
resume.tonytong.video
treelights.au
two-cents.app
www.wesecuredata.com
whatsinpremier.com
go.wiseree.app
auth.rsvp.withgoogle.com
zip49.kr
www.zubueducation.com