TLS score
A

SSL/TLS configuration assessment

Certificates

As pem
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Issuer
countryName=US, organizationName=DigiCert Inc, organizationalUnitName=www.digicert.com, commonName=RapidSSL TLS RSA CA G1
Subject
commonName=www.aachener-bausparkasse.de
Hpkp pin
U64txYVjVzP0wzKIsaa/DAFe+L4o4omf8YB4RkEikcc=
NotAfter
2020-04-07 12:00:00
NotBefore
2018-03-09 00:00:00
PublicKey
Size
4096
Exponent
65537
Algorithm
RSA
SerialNumber
8936671211258659461657815519675510998
SignatureAlgorithm
sha256
SubjectAlternativeName
DNS
  • www.aachener-bausparkasse.de
  • aachener-bausparkasse.de
As pem
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Issuer
countryName=US, organizationName=DigiCert Inc, organizationalUnitName=www.digicert.com, commonName=DigiCert Global Root G2
Subject
countryName=US, organizationName=DigiCert Inc, organizationalUnitName=www.digicert.com, commonName=RapidSSL TLS RSA CA G1
Hpkp pin
E3tYcwo9CiqATmKtpMLW5V+pzIq+ZoDmpXSiJlXGmTo=
NotAfter
2027-11-02 12:24:33
NotBefore
2017-11-02 12:24:33
PublicKey
Size
2048
Exponent
65537
Algorithm
RSA
SerialNumber
14816627491795588044059060260691382010
SignatureAlgorithm
sha256

Ciphersuites

Key size
256
Ssl version
TLSV1_2
Is anonymous
False
Openssl name
ECDHE-RSA-AES256-GCM-SHA384
Post handshake response
-
Key size
128
Ssl version
TLSV1_2
Is anonymous
False
Openssl name
ECDHE-RSA-AES128-GCM-SHA256
Post handshake response
-
Key size
256
Ssl version
TLSV1_2
Is anonymous
False
Openssl name
DHE-RSA-AES256-GCM-SHA384
Post handshake response
-
Key size
128
Ssl version
TLSV1_2
Is anonymous
False
Openssl name
DHE-RSA-AES128-GCM-SHA256
Post handshake response
-
Key size
256
Ssl version
TLSV1_3
Is anonymous
False
Openssl name
TLS_CHACHA20_POLY1305_SHA256
Post handshake response
-
Key size
256
Ssl version
TLSV1_3
Is anonymous
False
Openssl name
TLS_AES_256_GCM_SHA384
Post handshake response
-
Key size
128
Ssl version
TLSV1_3
Is anonymous
False
Openssl name
TLS_AES_128_GCM_SHA256
Post handshake response
-
We use and contribute to the great sslyze open source project!
Fully automated RESTful API is now available. Subscribe for your free trial today!