77/100 SECURITY SCORE

Certificate Information

Subject
CN=joanisallushi.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 08, 2025
Valid Until
January 06, 2026 53 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
97:42:04:0C:E7:F2:F6:70:5F:97:FA:04:7B:43:17:57:B5:B0:F6:77:89:29:49:CD:D0:65:AF:D4:27:09:C7:76
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
www.wattlesec.com

Other domains in certificate

alexpjames.com
amandastravels.rentals
anv.com.mx
onetouch-link.astropay.com
associacao.befox.com.br
www.benrowland.net
components.billinger.me
scanandgo.bitkulcha.com
app.botstory.co
www.bugsio.com
bazaar-email.bukalapak.design
cheekypixel.dev
onimaps.citizenlab.org
www.coffee-time.app
compound.io
www.craig.bar
www.cryptofort.com
www.docdreamuk.com
e-vendi.com.br
www.dejatuhuella.urosario.edu.co
demo.eliar.cloud
elrincondesita.com
webdev.endrf.com
app-staging.exabel.com
f5wc.com
fixzera.com
www-test.flightsoftware.org
www.foradelogica.xyz
admin.devapp.frontrunnercasting.com
www.gamemakeritalia.it
getambo.com
glasson.io
appadmin.globalpulses.com
www.hakolkal.com
www.hcws.info
get.howwefeel.org
app.illust.space
www.inovavarais.com
admin.intuitive-sensitives.com
pairwise.isawesome.app
crypto21.itchitech.com
joanisallushi.com
joewymancode.com
provaveis.joga10news.com
www.jordy-hertogs.nl
purchase.journey.cloud
katievining.com
www.leahjia.com
www.letitechsl.com
lifeschools.ca
lifewood.net
www.mahar.digital
app.mednow.ca
minesafevr.com
toddlearn.miraeapps.com
moraldimension.com
mpo900.id
admin.myfirstquran.com
www.naturally-salt-poolaccess.at
nivelate.mx
www.noeosorio.com
www.olli.au
linguist.onesky.app
www.ous.ma
www.partyrentalssanjose.com
www.pb256.co
www.pbclabs.net
placetell.com
www.profjosecarlosalvim.com.br
dev-galp.prompt-pitang.com
rachelsapps.com
telos.reactorfusion.xyz
soas.ribbook.nl
anwaar.rnetian.in
romualdus.com
cqa.rxcx.au
www.screenreader.app
sheets-n-dices.app
auction.spectors.in
jason.stallin.gs
www.stefanveispennerup.com
stoneleft.com
streamcompanion.app
studiorami.fun
taggl.io
thearchitectlab.com
theloftvideo.com
surprise2021.thijsgeurts.nl
contahabilidad.tresastronautas.com
englishactually.turnosweb.app ragnarok.turnosweb.app
app.unilytics.ai
ctv.vietmoney.vn
suporte.vipapp.com.br
visualiser.app
www.wandergaul.de
czystawoda.waraxa.pl
www.wooohstore.com
www.xcentric-studios.com