75/100 SECURITY SCORE

Certificate Information

Subject
CN=denmark.timesinternet.in
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
March 17, 2026
Valid Until
June 15, 2026 36 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E6:43:C4:1B:83:FB:19:92:56:5A:59:3B:24:5F:97:A5:11:50:E1:23:D4:54:DE:BC:7F:07:20:9C:C0:7A:C5:EB
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

82 domains
api-ext.timesprime.com el.timesprime.com grafana1.timesprime.com gw.timesprime.com k.timesprime.com middleware.timesprime.com preprod-el.timesprime.com preprod-ext.timesprime.com preprod-gw.timesprime.com preprod-middleware.timesprime.com static.timesprime.com www.timesprime.com

Other domains in certificate

etpwaapipre.economictimes.com spmdev8243.economictimes.com
cachemaster.indiatimes.com cloudservicesstg.indiatimes.com cloudservicesstgtnn.indiatimes.com cms.auto.economictimes.indiatimes.com cmsanalytics.indiatimes.com cmsanalyticsapi.indiatimes.com cmsgraphreadw.indiatimes.com cmsondemand.indiatimes.com cmss3services.indiatimes.com commentmoderator.indiatimes.com corporate.economictimes.indiatimes.com dev.dam.indiatimes.com et86.indiatimes.com etadmin.indiatimes.com etdev8389.indiatimes.com etdev8413.indiatimes.com etdev8422.indiatimes.com etnstg.indiatimes.com hawki-api.indiatimes.com hawki.indiatimes.com ibeatserv.indiatimes.com infra-cms.economictimes.indiatimes.com jcmsapp.indiatimes.com jssopvt.indiatimes.com kryptonm-dev.indiatimes.com kryptonm-stg.indiatimes.com kryptonm.indiatimes.com langdev8002.indiatimes.com mtnndev9363.indiatimes.com mtnndev9364.indiatimes.com mytpvttnn.indiatimes.com s1nbtpwa.indiatimes.com s2nbtpwa.indiatimes.com solrsearch.indiatimes.com spmdev8389.indiatimes.com spmdev8422.indiatimes.com stg1eisamay.indiatimes.com stg1iag.indiatimes.com stg1mt.indiatimes.com stg1vk.indiatimes.com stg2eisamay.indiatimes.com stg2iag.indiatimes.com stg2mt.indiatimes.com stg2vk.indiatimes.com subscription-dashboard.indiatimes.com toidev.indiatimes.com townhall-cms.economictimes.indiatimes.com vconfex-cms.economictimes.indiatimes.com
stg1malayalam.samayam.com stg1tamil.samayam.com stg1telugu.samayam.com stg2malayalam.samayam.com stg2tamil.samayam.com stg2telugu.samayam.com
cms.slike.in cmsapi.slike.in scms.slike.in stats.slike.in
analytics.timesinternet.in cmscatalogdenmark.timesinternet.in coral.timesinternet.in denmark.timesinternet.in denmarkapis.timesinternet.in epaperbiz.timesinternet.in epaperlive.timesinternet.in jenkins-mum-az1a.timesinternet.in solrdenmark.timesinternet.in
pers-api.timesofindia.com