TLS score
C

SSL/TLS configuration assessment

Certificates

As pem
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Issuer
countryName=US, organizationName=DigiCert Inc, organizationalUnitName=www.digicert.com, commonName=DigiCert SHA2 High Assurance Server CA
Subject
countryName=US, stateOrProvinceName=California, localityName=Menlo Park, organizationName=Facebook, Inc., commonName=*.facebook.com
Hpkp pin
v4XwqTWmacA8mSAMIbAHy9Kh+WSOvbGb/uqZBKplJ5I=
NotAfter
2020-04-15 12:00:00
NotBefore
2020-01-16 00:00:00
PublicKey
Size
256
Curve
secp256r1
Algorithm
EllipticCurve
SerialNumber
3339732178785825899227721797784969985
SignatureAlgorithm
sha256
SubjectAlternativeName
DNS
  • *.facebook.com
  • *.facebook.net
  • *.fb.com
  • *.fbcdn.net
  • *.fbsbx.com
  • *.messenger.com
  • facebook.com
  • fb.com
  • messenger.com
  • *.m.facebook.com
  • *.xx.fbcdn.net
  • *.xy.fbcdn.net
  • *.xz.fbcdn.net
As pem
-----BEGIN CERTIFICATE-----
MIIEsTCCA5mgAwIBAgIQBOHnpNxc8vNtwCtCuF0VnzANBgkqhkiG9w0BAQsFADBs
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSswKQYDVQQDEyJEaWdpQ2VydCBIaWdoIEFzc3VyYW5j
ZSBFViBSb290IENBMB4XDTEzMTAyMjEyMDAwMFoXDTI4MTAyMjEyMDAwMFowcDEL
MAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcGA1UECxMQd3d3
LmRpZ2ljZXJ0LmNvbTEvMC0GA1UEAxMmRGlnaUNlcnQgU0hBMiBIaWdoIEFzc3Vy
YW5jZSBTZXJ2ZXIgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2
4C/CJAbIbQRf1+8KZAayfSImZRauQkCbztyfn3YHPsMwVYcZuU+UDlqUH1VWtMIC
Kq/QmO4LQNfE0DtyyBSe75CxEamu0si4QzrZCwvV1ZX1QK/IHe1NnF9Xt4ZQaJn1
itrSxwUfqJfJ3KSxgoQtxq2lnMcZgqaFD15EWCo3j/018QsIJzJa9buLnqS9UdAn
4t07QjOjBSjEuyjMmqwrIw14xnvmXnG3Sj4I+4G3FhahnSMSTeXXkgisdaScus0X
sh5ENWV/UyU50RwKmmMbGZJ0aAo3wsJSSMs5WqK24V3B3aAguCGikyZvFEohQcft
bZvySC/zA/WiaJJTL17jAgMBAAGjggFJMIIBRTASBgNVHRMBAf8ECDAGAQH/AgEA
MA4GA1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
NAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2Vy
dC5jb20wSwYDVR0fBEQwQjBAoD6gPIY6aHR0cDovL2NybDQuZGlnaWNlcnQuY29t
L0RpZ2lDZXJ0SGlnaEFzc3VyYW5jZUVWUm9vdENBLmNybDA9BgNVHSAENjA0MDIG
BFUdIAAwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQ
UzAdBgNVHQ4EFgQUUWj/kK8CB3U8zNllZGKiErhZcjswHwYDVR0jBBgwFoAUsT7D
aQP4v0cB1JgmGggC72NkK8MwDQYJKoZIhvcNAQELBQADggEBABiKlYkD5m3fXPwd
aOpKj4PWUS+Na0QWnqxj9dJubISZi6qBcYRb7TROsLd5kinMLYBq8I4g4Xmk/gNH
E+r1hspZcX30BJZr01lYPf7TMSVcGDiEo+afgv2MW5gxTs14nhr9hctJqvIni5ly
/D6q1UEL2tU2ob8cbkdJf17ZSHwD2f2LSaCYJkJA69aSEaRkCldUxPUd1gJea6zu
xICaEnL6VpPX/78whQYwvwt/Tv9XBZ0k7YXDK/umdaisLRbvfXknsuvCnQsH6qqF
0wGjIChBWUMo0oHjqvbsezt3tkBigAVBRQHvFwY+3sAzm2fTYS5yh+Rp/BIAV0Ae
cPUeybQ=
-----END CERTIFICATE-----
Issuer
countryName=US, organizationName=DigiCert Inc, organizationalUnitName=www.digicert.com, commonName=DigiCert High Assurance EV Root CA
Subject
countryName=US, organizationName=DigiCert Inc, organizationalUnitName=www.digicert.com, commonName=DigiCert SHA2 High Assurance Server CA
Hpkp pin
k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws=
NotAfter
2028-10-22 12:00:00
NotBefore
2013-10-22 12:00:00
PublicKey
Size
2048
Exponent
65537
Algorithm
RSA
SerialNumber
6489877074546166222510380951761917343
SignatureAlgorithm
sha256

Ciphersuites

Key size
128
Ssl version
TLSV1
Is anonymous
False
Openssl name
RC4-SHA
Post handshake response
-
Key size
256
Ssl version
TLSV1
Is anonymous
False
Openssl name
AES256-SHA
Post handshake response
-
Key size
128
Ssl version
TLSV1
Is anonymous
False
Openssl name
AES128-SHA
Post handshake response
-
Key size
112
Ssl version
TLSV1
Is anonymous
False
Openssl name
DES-CBC3-SHA
Post handshake response
-
Key size
128
Ssl version
TLSV1
Is anonymous
False
Openssl name
ECDHE-RSA-RC4-SHA
Post handshake response
-
Key size
256
Ssl version
TLSV1
Is anonymous
False
Openssl name
ECDHE-RSA-AES256-SHA
Post handshake response
-
Key size
128
Ssl version
TLSV1
Is anonymous
False
Openssl name
ECDHE-RSA-AES128-SHA
Post handshake response
-
Key size
112
Ssl version
TLSV1
Is anonymous
False
Openssl name
ECDHE-RSA-DES-CBC3-SHA
Post handshake response
-
Key size
128
Ssl version
TLSV1
Is anonymous
False
Openssl name
ECDHE-ECDSA-RC4-SHA
Post handshake response
-
Key size
256
Ssl version
TLSV1
Is anonymous
False
Openssl name
ECDHE-ECDSA-AES256-SHA
Post handshake response
-
Key size
128
Ssl version
TLSV1
Is anonymous
False
Openssl name
ECDHE-ECDSA-AES128-SHA
Post handshake response
-
Key size
112
Ssl version
TLSV1
Is anonymous
False
Openssl name
ECDHE-ECDSA-DES-CBC3-SHA
Post handshake response
-
Key size
128
Ssl version
TLSV1_1
Is anonymous
False
Openssl name
RC4-SHA
Post handshake response
-
Key size
256
Ssl version
TLSV1_1
Is anonymous
False
Openssl name
AES256-SHA
Post handshake response
-
Key size
128
Ssl version
TLSV1_1
Is anonymous
False
Openssl name
AES128-SHA
Post handshake response
-
Key size
112
Ssl version
TLSV1_1
Is anonymous
False
Openssl name
DES-CBC3-SHA
Post handshake response
-
Key size
128
Ssl version
TLSV1_1
Is anonymous
False
Openssl name
ECDHE-RSA-RC4-SHA
Post handshake response
-
Key size
256
Ssl version
TLSV1_1
Is anonymous
False
Openssl name
ECDHE-RSA-AES256-SHA
Post handshake response
-
Key size
128
Ssl version
TLSV1_1
Is anonymous
False
Openssl name
ECDHE-RSA-AES128-SHA
Post handshake response
-
Key size
112
Ssl version
TLSV1_1
Is anonymous
False
Openssl name
ECDHE-RSA-DES-CBC3-SHA
Post handshake response
-
Key size
128
Ssl version
TLSV1_1
Is anonymous
False
Openssl name
ECDHE-ECDSA-RC4-SHA
Post handshake response
-
Key size
256
Ssl version
TLSV1_1
Is anonymous
False
Openssl name
ECDHE-ECDSA-AES256-SHA
Post handshake response
-
Key size
128
Ssl version
TLSV1_1
Is anonymous
False
Openssl name
ECDHE-ECDSA-AES128-SHA
Post handshake response
-
Key size
112
Ssl version
TLSV1_1
Is anonymous
False
Openssl name
ECDHE-ECDSA-DES-CBC3-SHA
Post handshake response
-
Key size
128
Ssl version
TLSV1_2
Is anonymous
False
Openssl name
RC4-SHA
Post handshake response
-
Key size
256
Ssl version
TLSV1_2
Is anonymous
False
Openssl name
AES256-GCM-SHA384
Post handshake response
-
Key size
256
Ssl version
TLSV1_2
Is anonymous
False
Openssl name
AES256-SHA
Post handshake response
-
Key size
128
Ssl version
TLSV1_2
Is anonymous
False
Openssl name
AES128-GCM-SHA256
Post handshake response
-
Key size
128
Ssl version
TLSV1_2
Is anonymous
False
Openssl name
AES128-SHA
Post handshake response
-
Key size
112
Ssl version
TLSV1_2
Is anonymous
False
Openssl name
DES-CBC3-SHA
Post handshake response
-
Key size
128
Ssl version
TLSV1_2
Is anonymous
False
Openssl name
ECDHE-RSA-RC4-SHA
Post handshake response
-
Key size
256
Ssl version
TLSV1_2
Is anonymous
False
Openssl name
ECDHE-RSA-CHACHA20-POLY1305
Post handshake response
-
Key size
256
Ssl version
TLSV1_2
Is anonymous
False
Openssl name
ECDHE-RSA-AES256-GCM-SHA384
Post handshake response
-
Key size
256
Ssl version
TLSV1_2
Is anonymous
False
Openssl name
ECDHE-RSA-AES256-SHA
Post handshake response
-
Key size
128
Ssl version
TLSV1_2
Is anonymous
False
Openssl name
ECDHE-RSA-AES128-GCM-SHA256
Post handshake response
-
Key size
128
Ssl version
TLSV1_2
Is anonymous
False
Openssl name
ECDHE-RSA-AES128-SHA
Post handshake response
-
Key size
112
Ssl version
TLSV1_2
Is anonymous
False
Openssl name
ECDHE-RSA-DES-CBC3-SHA
Post handshake response
-
Key size
128
Ssl version
TLSV1_2
Is anonymous
False
Openssl name
ECDHE-ECDSA-RC4-SHA
Post handshake response
-
Key size
256
Ssl version
TLSV1_2
Is anonymous
False
Openssl name
ECDHE-ECDSA-CHACHA20-POLY1305
Post handshake response
-
Key size
256
Ssl version
TLSV1_2
Is anonymous
False
Openssl name
ECDHE-ECDSA-AES256-GCM-SHA384
Post handshake response
-
Key size
256
Ssl version
TLSV1_2
Is anonymous
False
Openssl name
ECDHE-ECDSA-AES256-SHA
Post handshake response
-
Key size
128
Ssl version
TLSV1_2
Is anonymous
False
Openssl name
ECDHE-ECDSA-AES128-GCM-SHA256
Post handshake response
-
Key size
128
Ssl version
TLSV1_2
Is anonymous
False
Openssl name
ECDHE-ECDSA-AES128-SHA
Post handshake response
-
Key size
112
Ssl version
TLSV1_2
Is anonymous
False
Openssl name
ECDHE-ECDSA-DES-CBC3-SHA
Post handshake response
-
Key size
256
Ssl version
TLSV1_3
Is anonymous
False
Openssl name
TLS_CHACHA20_POLY1305_SHA256
Post handshake response
-
Key size
256
Ssl version
TLSV1_3
Is anonymous
False
Openssl name
TLS_AES_256_GCM_SHA384
Post handshake response
-
Key size
128
Ssl version
TLSV1_3
Is anonymous
False
Openssl name
TLS_AES_128_GCM_SHA256
Post handshake response
-
We use and contribute to the great sslyze open source project!
Fully automated RESTful API is now available. Subscribe for your free trial today!