77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.packagejs.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 10, 2025
Valid Until
January 08, 2026 52 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
FE:15:20:89:D7:CE:39:A1:FB:1E:4E:C8:17:1B:B5:37:C9:92:F5:A0:3D:25:75:99:E5:97:3B:BE:7E:6D:8E:DC
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
calculator.imsonu.in

Other domains in certificate

booksapps.abegs.org
accurateall-seasonservices.com
www.acmsscbe.com
ahjim.com
dearcareplus.almediaweb.jp
sachin.ambalkar.com
animeenlasrocas.com
admin.actdemo2.anyware.software
carbonero.ascurra-soluciones.com
dropship.astrade.co.jp
teads-dior-shoes.atelar.com
www.auranlaaksontilitoimisto.fi
avenfair.com
www.babythesaurus.com
www.bad-company.jp
wholesale.barkbadge.com
soldier.bdiverse-tms.com
www.benazir.in
test-control.birramos.com.ar
bitdeliverysk.com
www.blocktech.one
bluedotecommerce.com
bluemap.ph
www.calendardarkmode.me
www.caretulip.com
cernym.cz
www.spaceline.co.in
pos.cocinaelsazon.mx
erenbahceduvari.com.tr
www.covid19-trends.de
link.ctcs.app
console.cufflink.io
dataanalytique.smart.dataauchan.fr
khyuga.datateam.one
www.donaldgloverpresents.com
matryoshka.doorjames.dev
dra.dambrete-test.draxogames.com
jeil.elxa.io obs.elxa.io ssm.elxa.io
wave2app.embrlabs.com
eregulus.com
job.api.fielder.one
filmofil.io
flutterwithdart.com
auth.frindler.com
www.gamingcurves.com
gebulab.com
www.grantspasslarp.com
www.hackerbay.io
dev.app.hakotoru.com
www.dev.haynet.co
www.homepointr.com
imagekitchen.app
www.imports.ai
deep-linking.app-dev.invase.jp
photos.jeni-et-cheric.fr
tourradar-sdk-sandbox.joinsherpa.io
klopworld.dk
knnct.app
testecontabil.lextar.app
equipos.liidutpl.ec
lthouse.com.ar
www.lutony.com
salonaz.m1studio.co
sales.maghrebsteel.net
app.marouviere.fr
moviechain.app
stage.mybrunoni.ch
senica.myphotopal.shop
analytics.myplayer.io
l.nivi.io
sms.o2o.vn
www.packagejs.com
www.paulblunt.de
pawdpetz.com
www.pipl.app
www.playmeta.global
cms.pngwasi.me
app.powerplaydigital.io
task.prestoexpress.co.uk
demo1.rakutenadvertising.io
redirect.rankingplaz.pl
www.regium.one
managers.s-booking.net
saunter.nyc
app.setu.care
cms.shoofti.com
admin.staging.smartwage.co.za
link.stockmotion.io
www.swetmore.co.uk
imagen.travipur.com
turnverein.app
best-painguide.med.umich.edu
app.valos.ai
rework.vitality.gg
wap.live
link.yololy.app
desafio-concurso-musical.yukioxd.com