[ { "domain": "google.com", "rank": 1, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 84, "notBefore": "2026-08-05T20:42:14.000Z", "notAfter": "2026-10-28T20:42:13.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WR2", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 83 }, { "domain": "cloudflare.com", "rank": 2, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 90, "notBefore": "2026-07-08T21:47:39.000Z", "notAfter": "2026-10-06T22:47:27.000Z", "daysRemaining": 48, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 71 }, { "domain": "gstatic.com", "rank": 3, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 84, "notBefore": "2026-08-05T20:43:45.000Z", "notAfter": "2026-10-28T20:43:44.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WR2", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 61 }, { "domain": "facebook.com", "rank": 4, "ok": true, "grade": { "letter": "D", "score": 55 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_CHACHA20_POLY1305_SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 91, "notBefore": "2026-05-29T00:00:00.000Z", "notAfter": "2026-08-27T23:59:59.000Z", "daysRemaining": 8, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "tls10-accepted", "cert-expiring-soon", "pqc-migration-ahead", "key-modern", "tls13", "chain-complete" ], "durationMs": 53 }, { "domain": "gtld-servers.net", "rank": 5, "ok": false, "error": { "code": "dns-error", "message": "gtld-servers.net does not resolve in public DNS" }, "durationMs": 6 }, { "domain": "microsoft.com", "rank": 6, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 180, "notBefore": "2026-06-23T09:04:17.000Z", "notAfter": "2026-12-20T09:04:17.000Z", "daysRemaining": 122, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha384WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Microsoft TLS G2 RSA CA OCSP 04", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 90 }, { "domain": "googleapis.com", "rank": 7, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 84, "notBefore": "2026-08-05T20:43:31.000Z", "notAfter": "2026-10-28T20:43:30.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WR2", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 67 }, { "domain": "amazonaws.com", "rank": 8, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 198, "notBefore": "2026-06-08T00:00:00.000Z", "notAfter": "2026-12-22T23:59:59.000Z", "daysRemaining": 125, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M04", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 482 }, { "domain": "youtube.com", "rank": 9, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 84, "notBefore": "2026-08-05T20:42:25.000Z", "notAfter": "2026-10-28T20:42:24.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE2", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 66 }, { "domain": "apple.com", "rank": 10, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 84, "notBefore": "2026-08-13T16:20:01.000Z", "notAfter": "2026-11-05T20:55:13.000Z", "daysRemaining": 78, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Apple Public EV Server ECC CA 1 - G1", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 48 }, { "domain": "instagram.com", "rank": 11, "ok": true, "grade": { "letter": "D", "score": 55 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_CHACHA20_POLY1305_SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 91, "notBefore": "2026-05-29T00:00:00.000Z", "notAfter": "2026-08-27T23:59:59.000Z", "daysRemaining": 8, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "tls10-accepted", "cert-expiring-soon", "pqc-migration-ahead", "key-modern", "tls13", "chain-complete" ], "durationMs": 52 }, { "domain": "mail.ru", "rank": 12, "ok": true, "grade": { "letter": "C", "score": 62 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES256-GCM-SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 90, "notBefore": "2026-07-14T14:44:33.000Z", "notAfter": "2026-10-12T14:44:32.000Z", "daysRemaining": 53, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR1", "findingIds": [ "tls10-accepted", "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "chain-complete" ], "durationMs": 274 }, { "domain": "akamai.net", "rank": 13, "ok": false, "error": { "code": "dns-error", "message": "akamai.net does not resolve in public DNS" }, "durationMs": 27 }, { "domain": "ezviz7.com", "rank": 14, "ok": false, "error": { "code": "dns-error", "message": "ezviz7.com does not resolve in public DNS" }, "durationMs": 289 }, { "domain": "fbcdn.net", "rank": 15, "ok": true, "grade": { "letter": "D", "score": 52 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_CHACHA20_POLY1305_SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 91, "notBefore": "2026-05-29T00:00:00.000Z", "notAfter": "2026-08-27T23:59:59.000Z", "daysRemaining": 8, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "tls10-accepted", "cert-expiring-soon", "key-rsa-2048", "pqc-migration-ahead", "tls13", "chain-complete" ], "durationMs": 102 }, { "domain": "twitter.com", "rank": 16, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-14T17:48:02.000Z", "notAfter": "2026-11-12T17:48:01.000Z", "daysRemaining": 84, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 88 }, { "domain": "dzen.ru", "rank": 17, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-07-23T10:13:13.000Z", "notAfter": "2027-02-07T10:13:12.000Z", "daysRemaining": 171, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "HARICA DV TLS RSA", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 110 }, { "domain": "linkedin.com", "rank": 18, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 185, "notBefore": "2026-05-20T00:00:00.000Z", "notAfter": "2026-11-20T23:59:59.000Z", "daysRemaining": 93, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 41 }, { "domain": "domaincontrol.com", "rank": 19, "ok": false, "error": { "code": "private-address", "message": "domaincontrol.com resolves to 127.0.0.1, which is in loopback (127.0.0.0/8) address space" }, "durationMs": 41 }, { "domain": "office.com", "rank": 20, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 180, "notBefore": "2026-06-02T23:25:49.000Z", "notAfter": "2026-11-29T23:25:49.000Z", "daysRemaining": 102, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha384WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Microsoft TLS G2 RSA CA OCSP 10", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 69 }, { "domain": "googlevideo.com", "rank": 21, "ok": true, "grade": { "letter": "C", "score": 62 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 84, "notBefore": "2026-08-05T20:44:34.000Z", "notAfter": "2026-10-28T20:44:33.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WR2", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 117 }, { "domain": "hicloudcam.com", "rank": 22, "ok": false, "error": { "code": "dns-error", "message": "hicloudcam.com does not resolve in public DNS" }, "durationMs": 399 }, { "domain": "googletagmanager.com", "rank": 23, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 84, "notBefore": "2026-08-05T20:42:22.000Z", "notAfter": "2026-10-28T20:42:21.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE2", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 133 }, { "domain": "live.com", "rank": 24, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 198, "notBefore": "2026-08-12T21:43:42.000Z", "notAfter": "2027-02-26T21:43:42.000Z", "daysRemaining": 191, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha384WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Microsoft TLS G2 RSA CA OCSP 10", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 114 }, { "domain": "akamaiedge.net", "rank": 25, "ok": false, "error": { "code": "dns-error", "message": "akamaiedge.net does not resolve in public DNS" }, "durationMs": 15 }, { "domain": "amazon.com", "rank": 26, "ok": true, "grade": { "letter": "C", "score": 72 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 198, "notBefore": "2026-05-05T00:00:00.000Z", "notAfter": "2026-11-18T23:59:59.000Z", "daysRemaining": 91, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GeoTrust TLS RSA CA G1", "findingIds": [ "tls10-accepted", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "tls13", "chain-complete" ], "durationMs": 1002 }, { "domain": "akadns.net", "rank": 27, "ok": false, "error": { "code": "dns-error", "message": "akadns.net does not resolve in public DNS" }, "durationMs": 52 }, { "domain": "azure.com", "rank": 28, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 100, "notBefore": "2026-08-14T04:21:17.000Z", "notAfter": "2026-11-22T03:21:17.000Z", "daysRemaining": 94, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha384WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Microsoft TLS G2 RSA CA OCSP 04", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 495 }, { "domain": "bing.com", "rank": 29, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 180, "notBefore": "2026-07-31T11:45:49.000Z", "notAfter": "2027-01-27T11:45:49.000Z", "daysRemaining": 160, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha384WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Microsoft TLS G2 RSA CA OCSP 16", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 78 }, { "domain": "github.com", "rank": 30, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-03T00:00:00.000Z", "notAfter": "2026-09-30T23:59:59.000Z", "daysRemaining": 42, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Sectigo Public Server Authentication CA DV E36", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 180 }, { "domain": "wikipedia.org", "rank": 31, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-05T19:15:41.000Z", "notAfter": "2026-11-03T19:15:40.000Z", "daysRemaining": 76, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE2", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 370 }, { "domain": "whatsapp.net", "rank": 32, "ok": true, "grade": { "letter": "D", "score": 55 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_CHACHA20_POLY1305_SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 91, "notBefore": "2026-05-29T00:00:00.000Z", "notAfter": "2026-08-27T23:59:59.000Z", "daysRemaining": 8, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "tls10-accepted", "cert-expiring-soon", "pqc-migration-ahead", "key-modern", "tls13", "chain-complete" ], "durationMs": 135 }, { "domain": "fastly.net", "rank": 33, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "refused", "lifetimeDays": 30, "notBefore": "2026-08-07T07:13:28.000Z", "notAfter": "2026-09-06T07:13:27.000Z", "daysRemaining": 17, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Certainly Intermediate R1", "findingIds": [ "no-tls13", "key-rsa-2048", "cert-renewal-window", "pqc-migration-ahead", "cert-short-lifetime", "legacy-tls-refused", "chain-complete" ], "durationMs": 83 }, { "domain": "apple-dns.net", "rank": 34, "ok": false, "error": { "code": "dns-error", "message": "apple-dns.net does not resolve in public DNS" }, "durationMs": 14 }, { "domain": "googleusercontent.com", "rank": 35, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 84, "notBefore": "2026-08-05T20:43:40.000Z", "notAfter": "2026-10-28T20:43:39.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WR2", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 60 }, { "domain": "appsflyersdk.com", "rank": 36, "ok": true, "grade": { "letter": "C", "score": 72 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 198, "notBefore": "2026-08-09T00:00:00.000Z", "notAfter": "2027-02-22T23:59:59.000Z", "daysRemaining": 187, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M01", "findingIds": [ "tls10-accepted", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "tls13", "chain-complete" ], "durationMs": 90 }, { "domain": "doubleclick.net", "rank": 37, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 84, "notBefore": "2026-08-05T20:42:17.000Z", "notAfter": "2026-10-28T20:42:16.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE2", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 111 }, { "domain": "aaplimg.com", "rank": 38, "ok": false, "error": { "code": "dns-error", "message": "aaplimg.com does not resolve in public DNS" }, "durationMs": 80 }, { "domain": "microsoftonline.com", "rank": 39, "ok": false, "error": { "code": "dns-error", "message": "microsoftonline.com does not resolve in public DNS" }, "durationMs": 79 }, { "domain": "netflix.com", "rank": 40, "ok": true, "grade": { "letter": "C", "score": 75 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 366, "notBefore": "2026-02-18T00:00:00.000Z", "notAfter": "2027-02-18T21:41:48.000Z", "daysRemaining": 183, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G3 TLS ECC SHA384 2020 CA1", "findingIds": [ "tls10-accepted", "pqc-migration-ahead", "key-modern", "cert-valid", "tls13", "chain-complete" ], "durationMs": 452 }, { "domain": "office.net", "rank": 41, "ok": false, "error": { "code": "dns-error", "message": "office.net does not resolve in public DNS" }, "durationMs": 22 }, { "domain": "trafficmanager.net", "rank": 42, "ok": false, "error": { "code": "dns-error", "message": "trafficmanager.net does not resolve in public DNS" }, "durationMs": 24 }, { "domain": "sharepoint.com", "rank": 43, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 360, "notBefore": "2025-12-09T18:57:33.000Z", "notAfter": "2026-12-04T18:57:33.000Z", "daysRemaining": 107, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha384WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Microsoft TLS G2 RSA CA OCSP 10", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 90 }, { "domain": "gandi.net", "rank": 44, "ok": true, "grade": { "letter": "A", "score": 100 }, "keyFamily": "rsa", "keyLabel": "RSA-4096", "keyCurve": null, "keyBits": 4096, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-05-20T00:00:00.000Z", "notAfter": "2026-12-04T23:59:59.000Z", "daysRemaining": 107, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GandiCert", "findingIds": [ "pqc-migration-ahead", "key-rsa-large", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 237 }, { "domain": "digicert.com", "rank": 45, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 47, "notBefore": "2026-08-10T00:00:00.000Z", "notAfter": "2026-09-25T23:59:59.000Z", "daysRemaining": 37, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert EV RSA CA G2", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 533 }, { "domain": "wordpress.org", "rank": 46, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-25T19:43:56.000Z", "notAfter": "2026-10-23T19:43:55.000Z", "daysRemaining": 65, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE1", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 554 }, { "domain": "youtu.be", "rank": 47, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 84, "notBefore": "2026-08-05T20:42:14.000Z", "notAfter": "2026-10-28T20:42:13.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WR2", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 142 }, { "domain": "skype.com", "rank": 48, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 100, "notBefore": "2026-07-27T08:08:00.000Z", "notAfter": "2026-11-04T07:08:00.000Z", "daysRemaining": 76, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha384WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Microsoft TLS G2 RSA CA OCSP 04", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 663 }, { "domain": "goo.gl", "rank": 49, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 84, "notBefore": "2026-08-05T20:42:25.000Z", "notAfter": "2026-10-28T20:42:24.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE2", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 60 }, { "domain": "cloud.microsoft", "rank": 50, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 100, "notBefore": "2026-07-27T10:08:29.000Z", "notAfter": "2026-11-04T09:08:29.000Z", "daysRemaining": 76, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha384WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Microsoft TLS G2 RSA CA OCSP 02", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 535 }, { "domain": "cloudfront.net", "rank": 51, "ok": false, "error": { "code": "dns-error", "message": "cloudfront.net does not resolve in public DNS" }, "durationMs": 36 }, { "domain": "x.com", "rank": 52, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-14T17:47:59.000Z", "notAfter": "2026-11-12T17:47:58.000Z", "daysRemaining": 84, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR2", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 106 }, { "domain": "googledomains.com", "rank": 53, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 84, "notBefore": "2026-08-05T20:43:30.000Z", "notAfter": "2026-10-28T20:43:29.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE2", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 116 }, { "domain": "tiktok.com", "rank": 54, "ok": true, "grade": { "letter": "A", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-05-19T00:00:00.000Z", "notAfter": "2026-12-03T23:59:59.000Z", "daysRemaining": 106, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "RapidSSL TLS ECC CA G1", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 92 }, { "domain": "pinterest.com", "rank": 55, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 198, "notBefore": "2026-08-13T00:00:00.000Z", "notAfter": "2027-02-26T23:59:59.000Z", "daysRemaining": 191, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 100 }, { "domain": "whatsapp.com", "rank": 56, "ok": true, "grade": { "letter": "D", "score": 55 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_CHACHA20_POLY1305_SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 91, "notBefore": "2026-05-29T00:00:00.000Z", "notAfter": "2026-08-27T23:59:59.000Z", "daysRemaining": 8, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "tls10-accepted", "cert-expiring-soon", "pqc-migration-ahead", "key-modern", "tls13", "chain-complete" ], "durationMs": 96 }, { "domain": "icloud.com", "rank": 57, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 87, "notBefore": "2026-08-17T23:50:49.000Z", "notAfter": "2026-11-12T18:22:03.000Z", "daysRemaining": 84, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Apple Public Server ECC CA 1 - G1", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 57 }, { "domain": "roblox.com", "rank": 58, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-05-11T00:00:00.000Z", "notAfter": "2026-11-25T23:59:59.000Z", "daysRemaining": 98, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Sectigo Public Server Authentication CA OV R36", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 149 }, { "domain": "yahoo.com", "rank": 59, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 86, "notBefore": "2026-07-28T00:00:00.000Z", "notAfter": "2026-10-21T23:59:59.000Z", "daysRemaining": 63, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 712 }, { "domain": "windowsupdate.com", "rank": 60, "ok": false, "error": { "code": "dns-error", "message": "windowsupdate.com does not resolve in public DNS" }, "durationMs": 27 }, { "domain": "cloudflare.net", "rank": 61, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-28T13:58:29.000Z", "notAfter": "2026-10-26T13:58:28.000Z", "daysRemaining": 67, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE1", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 78 }, { "domain": "msn.com", "rank": 62, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 180, "notBefore": "2026-08-13T12:49:00.000Z", "notAfter": "2027-02-09T12:49:00.000Z", "daysRemaining": 173, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha384WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Microsoft TLS G2 RSA CA OCSP 04", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 75 }, { "domain": "gvt1.com", "rank": 63, "ok": false, "error": { "code": "dns-error", "message": "gvt1.com does not resolve in public DNS" }, "durationMs": 46 }, { "domain": "googlesyndication.com", "rank": 64, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 84, "notBefore": "2026-08-05T20:42:13.000Z", "notAfter": "2026-10-28T20:42:12.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WR2", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 95 }, { "domain": "spotify.com", "rank": 65, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-07-09T00:00:00.000Z", "notAfter": "2027-01-23T23:59:59.000Z", "daysRemaining": 157, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 90 }, { "domain": "windows.net", "rank": 66, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 100, "notBefore": "2026-07-27T09:42:50.000Z", "notAfter": "2026-11-04T08:42:50.000Z", "daysRemaining": 76, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha384WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Microsoft TLS G2 RSA CA OCSP 04", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 1115 }, { "domain": "ntp.org", "rank": 67, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES256-GCM-SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-04T04:02:17.000Z", "notAfter": "2026-11-02T04:02:16.000Z", "daysRemaining": 74, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR1", "findingIds": [ "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "chain-complete" ], "durationMs": 1139 }, { "domain": "adobe.com", "rank": 68, "ok": true, "grade": { "letter": "A", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 365, "notBefore": "2026-01-05T00:00:00.000Z", "notAfter": "2027-01-04T23:59:59.000Z", "daysRemaining": 138, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G3 TLS ECC SHA384 2020 CA1", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 98 }, { "domain": "wa.me", "rank": 69, "ok": true, "grade": { "letter": "B", "score": 80 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_CHACHA20_POLY1305_SHA256", "legacyTls": "refused", "lifetimeDays": 91, "notBefore": "2026-05-29T00:00:00.000Z", "notAfter": "2026-08-27T23:59:59.000Z", "daysRemaining": 8, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "cert-expiring-soon", "pqc-migration-ahead", "key-modern", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 111 }, { "domain": "myfritz.net", "rank": 70, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 394, "notBefore": "2025-12-17T00:00:00.000Z", "notAfter": "2027-01-14T23:59:59.000Z", "daysRemaining": 148, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 293 }, { "domain": "cdninstagram.com", "rank": 71, "ok": false, "error": { "code": "dns-error", "message": "cdninstagram.com does not resolve in public DNS" }, "durationMs": 199 }, { "domain": "pv-cdn.net", "rank": 72, "ok": false, "error": { "code": "dns-error", "message": "pv-cdn.net does not resolve in public DNS" }, "durationMs": 211 }, { "domain": "chatgpt.com", "rank": 73, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-23T20:05:49.000Z", "notAfter": "2026-10-21T21:05:44.000Z", "daysRemaining": 63, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 20 }, { "domain": "ripn.net", "rank": 74, "ok": false, "error": { "code": "dns-error", "message": "ripn.net does not resolve in public DNS" }, "durationMs": 99 }, { "domain": "nginx.org", "rank": 75, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.2", "cipher": "ECDHE-ECDSA-AES128-GCM-SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-19T09:12:14.000Z", "notAfter": "2026-10-17T09:12:13.000Z", "daysRemaining": 58, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE2", "findingIds": [ "no-tls13", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "chain-complete" ], "durationMs": 340 }, { "domain": "akam.net", "rank": 76, "ok": false, "error": { "code": "dns-error", "message": "akam.net does not resolve in public DNS" }, "durationMs": 148 }, { "domain": "tiktokcdn.com", "rank": 77, "ok": false, "error": { "code": "dns-error", "message": "tiktokcdn.com does not resolve in public DNS" }, "durationMs": 161 }, { "domain": "gwfb.net", "rank": 78, "ok": false, "error": { "code": "dns-error", "message": "gwfb.net does not resolve in public DNS" }, "durationMs": 564 }, { "domain": "zoom.us", "rank": 79, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 366, "notBefore": "2025-12-29T00:00:00.000Z", "notAfter": "2026-12-29T23:59:59.000Z", "daysRemaining": 132, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "chain-weak-signature-hash", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 239 }, { "domain": "vimeo.com", "rank": 80, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-06T12:14:02.000Z", "notAfter": "2026-10-04T13:14:00.000Z", "daysRemaining": 45, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 246 }, { "domain": "tiktokv.com", "rank": 81, "ok": true, "grade": { "letter": "A", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-03-26T00:00:00.000Z", "notAfter": "2026-10-10T23:59:59.000Z", "daysRemaining": 52, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "RapidSSL TLS ECC CA G1", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 58 }, { "domain": "edgekey.net", "rank": 82, "ok": false, "error": { "code": "dns-error", "message": "edgekey.net does not resolve in public DNS" }, "durationMs": 17 }, { "domain": "baidu.com", "rank": 83, "ok": true, "grade": { "letter": "D", "score": 52 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 199, "notBefore": "2026-07-09T02:32:55.000Z", "notAfter": "2027-01-24T02:32:55.000Z", "daysRemaining": 157, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign RSA OV SSL CA 2018", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "chain-complete" ], "durationMs": 2147 }, { "domain": "gvt2.com", "rank": 84, "ok": false, "error": { "code": "dns-error", "message": "gvt2.com does not resolve in public DNS" }, "durationMs": 57 }, { "domain": "windows.com", "rank": 85, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 100, "notBefore": "2026-07-27T08:28:29.000Z", "notAfter": "2026-11-04T07:28:29.000Z", "daysRemaining": 76, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha384WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Microsoft TLS G2 RSA CA OCSP 02", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 676 }, { "domain": "yandex.net", "rank": 86, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 181, "notBefore": "2026-07-01T14:54:10.000Z", "notAfter": "2026-12-29T20:59:59.000Z", "daysRemaining": 132, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign ECC OV SSL CA 2018", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "tls13", "chain-complete" ], "durationMs": 475 }, { "domain": "cloudflare-dns.com", "rank": 87, "ok": true, "grade": { "letter": "A", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 355, "notBefore": "2025-12-31T19:20:01.000Z", "notAfter": "2026-12-21T19:20:01.000Z", "daysRemaining": 124, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "SSL.com SSL Intermediate CA ECC R2", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 78 }, { "domain": "root-servers.net", "rank": 88, "ok": false, "error": { "code": "dns-error", "message": "root-servers.net does not resolve in public DNS" }, "durationMs": 119 }, { "domain": "ytimg.com", "rank": 89, "ok": false, "error": { "code": "dns-error", "message": "ytimg.com does not resolve in public DNS" }, "durationMs": 40 }, { "domain": "qq.com", "rank": 90, "ok": true, "grade": { "letter": "C", "score": 62 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 199, "notBefore": "2026-05-13T00:00:00.000Z", "notAfter": "2026-11-27T23:59:59.000Z", "daysRemaining": 100, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1", "findingIds": [ "tls10-accepted", "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "chain-complete" ], "durationMs": 3279 }, { "domain": "opera.com", "rank": 91, "ok": true, "grade": { "letter": "C", "score": 75 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 396, "notBefore": "2026-01-07T00:00:00.000Z", "notAfter": "2027-02-06T23:59:59.000Z", "daysRemaining": 171, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Trust Provider B.V. TLS RSA CA G1", "findingIds": [ "tls10-accepted", "pqc-migration-ahead", "key-modern", "cert-valid", "tls13", "chain-complete" ], "durationMs": 475 }, { "domain": "mozilla.org", "rank": 92, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-23T16:01:49.000Z", "notAfter": "2026-10-21T16:55:01.000Z", "daysRemaining": 62, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WR3", "findingIds": [ "chain-weak-signature-hash", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 214 }, { "domain": "samsung.com", "rank": 93, "ok": true, "grade": { "letter": "C", "score": 62 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 199, "notBefore": "2026-04-08T00:00:00.000Z", "notAfter": "2026-10-23T23:59:59.000Z", "daysRemaining": 65, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Sectigo Public Server Authentication CA OV R36", "findingIds": [ "tls10-accepted", "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "chain-complete" ], "durationMs": 3001 }, { "domain": "workers.dev", "rank": 94, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 90, "notBefore": "2026-07-04T04:06:32.000Z", "notAfter": "2026-10-02T05:06:29.000Z", "daysRemaining": 43, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 319 }, { "domain": "openai.com", "rank": 95, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-11T03:16:10.000Z", "notAfter": "2026-11-09T03:16:09.000Z", "daysRemaining": 81, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE2", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 296 }, { "domain": "blogspot.com", "rank": 96, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 84, "notBefore": "2026-08-05T20:43:41.000Z", "notAfter": "2026-10-28T20:43:40.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE2", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 337 }, { "domain": "nic.ru", "rank": 97, "ok": true, "grade": { "letter": "B", "score": 82 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1", "lifetimeDays": 397, "notBefore": "2025-12-05T14:12:05.000Z", "notAfter": "2027-01-06T14:12:04.000Z", "daysRemaining": 139, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign GCC R3 EV TLS CA 2025", "findingIds": [ "tls11-accepted", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "tls13", "chain-complete" ], "durationMs": 1961 }, { "domain": "nginx.com", "rank": 98, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-06-30T13:27:12.000Z", "notAfter": "2026-09-28T13:27:11.000Z", "daysRemaining": 39, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE1", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 4145 }, { "domain": "wordpress.com", "rank": 99, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-06T19:45:23.000Z", "notAfter": "2026-10-04T19:45:22.000Z", "daysRemaining": 46, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE2", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 122 }, { "domain": "workbox.dk", "rank": 100, "ok": false, "error": { "code": "dns-error", "message": "workbox.dk does not resolve in public DNS" }, "durationMs": 110 }, { "domain": "edgesuite.net", "rank": 101, "ok": false, "error": { "code": "dns-error", "message": "edgesuite.net does not resolve in public DNS" }, "durationMs": 122 }, { "domain": "yandex.ru", "rank": 102, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 181, "notBefore": "2026-07-01T14:54:10.000Z", "notAfter": "2026-12-29T20:59:59.000Z", "daysRemaining": 132, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign ECC OV SSL CA 2018", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 307 }, { "domain": "outlook.com", "rank": 103, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-06-26T00:00:00.000Z", "notAfter": "2027-01-10T23:59:59.000Z", "daysRemaining": 144, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 936 }, { "domain": "capgemini.com", "rank": 104, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-18T04:18:46.000Z", "notAfter": "2026-10-16T04:18:45.000Z", "daysRemaining": 57, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE2", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 199 }, { "domain": "sentry.io", "rank": 105, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-08-06T00:00:00.000Z", "notAfter": "2027-02-20T23:59:59.000Z", "daysRemaining": 185, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 30 }, { "domain": "reddit.com", "rank": 106, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 180, "notBefore": "2026-04-08T00:00:00.000Z", "notAfter": "2026-10-04T23:59:59.000Z", "daysRemaining": 46, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 52 }, { "domain": "ui.com", "rank": 107, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 198, "notBefore": "2026-07-28T00:00:00.000Z", "notAfter": "2027-02-10T23:59:59.000Z", "daysRemaining": 175, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M01", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 33 }, { "domain": "t.me", "rank": 108, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 397, "notBefore": "2025-10-21T19:17:28.000Z", "notAfter": "2026-11-22T19:17:28.000Z", "daysRemaining": 95, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Go Daddy Secure Certificate Authority - G2", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 163 }, { "domain": "office365.com", "rank": 109, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 180, "notBefore": "2026-06-18T08:35:51.000Z", "notAfter": "2026-12-15T08:35:51.000Z", "daysRemaining": 117, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha384WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Microsoft TLS G2 RSA CA OCSP 02", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 875 }, { "domain": "a2z.com", "rank": 110, "ok": false, "error": { "code": "dns-error", "message": "a2z.com does not resolve in public DNS" }, "durationMs": 34 }, { "domain": "b-cdn.net", "rank": 111, "ok": true, "grade": { "letter": "C", "score": 72 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 371, "notBefore": "2025-11-06T00:00:00.000Z", "notAfter": "2026-11-11T23:59:59.000Z", "daysRemaining": 84, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Sectigo Public Server Authentication CA DV R36", "findingIds": [ "tls10-accepted", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "tls13", "chain-complete" ], "durationMs": 319 }, { "domain": "bit.ly", "rank": 112, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 198, "notBefore": "2026-02-24T00:00:00.000Z", "notAfter": "2026-09-09T23:59:59.000Z", "daysRemaining": 21, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M01", "findingIds": [ "key-rsa-2048", "cert-renewal-window", "pqc-migration-ahead", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 63 }, { "domain": "okcdn.ru", "rank": 113, "ok": true, "grade": { "letter": "C", "score": 72 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 365, "notBefore": "2025-10-23T10:56:54.000Z", "notAfter": "2026-10-23T10:56:54.000Z", "daysRemaining": 64, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "HARICA DV TLS RSA", "findingIds": [ "tls10-accepted", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "tls13", "chain-complete" ], "durationMs": 187 }, { "domain": "europa.eu", "rank": 114, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-08-11T08:28:10.000Z", "notAfter": "2027-02-26T08:28:09.000Z", "daysRemaining": 190, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign Atlas R46 OV TLS CA 2026 Q3", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 149 }, { "domain": "google-analytics.com", "rank": 115, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 84, "notBefore": "2026-08-05T20:42:13.000Z", "notAfter": "2026-10-28T20:42:12.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WR2", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 57 }, { "domain": "registrar-servers.com", "rank": 116, "ok": true, "grade": { "letter": "A", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-384", "keyCurve": "P-384", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 195, "notBefore": "2026-08-17T07:43:39.000Z", "notAfter": "2027-02-28T14:41:20.000Z", "daysRemaining": 192, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "SSL.com TLS Issuing ECC CA R2", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 783 }, { "domain": "vk.com", "rank": 117, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-14T06:19:25.000Z", "notAfter": "2026-10-12T06:19:24.000Z", "daysRemaining": 53, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WR1", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 65 }, { "domain": "github.io", "rank": 118, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-02T23:38:02.000Z", "notAfter": "2026-10-31T23:38:01.000Z", "daysRemaining": 73, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 104 }, { "domain": "discord.gg", "rank": 119, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-20T03:08:07.000Z", "notAfter": "2026-11-18T04:07:55.000Z", "daysRemaining": 90, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 51 }, { "domain": "criteo.com", "rank": 120, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-15T12:53:28.000Z", "notAfter": "2026-11-13T12:53:27.000Z", "daysRemaining": 85, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR2", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 116 }, { "domain": "amazonvideo.com", "rank": 121, "ok": true, "grade": { "letter": "B", "score": 82 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "accepted:TLSv1.1", "lifetimeDays": 198, "notBefore": "2026-07-29T00:00:00.000Z", "notAfter": "2027-02-11T23:59:59.000Z", "daysRemaining": 176, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M01", "findingIds": [ "tls11-accepted", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "tls13", "chain-complete" ], "durationMs": 49 }, { "domain": "vkuserphoto.ru", "rank": 122, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-07-23T10:17:57.000Z", "notAfter": "2027-02-07T10:17:56.000Z", "daysRemaining": 171, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "HARICA DV TLS RSA", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 104 }, { "domain": "snapchat.com", "rank": 123, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-04-01T00:00:00.000Z", "notAfter": "2026-10-16T23:59:59.000Z", "daysRemaining": 58, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 64 }, { "domain": "aws.dev", "rank": 124, "ok": false, "error": { "code": "dns-error", "message": "aws.dev does not resolve in public DNS" }, "durationMs": 40 }, { "domain": "apache.org", "rank": 125, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-12T21:37:33.000Z", "notAfter": "2026-11-10T21:37:32.000Z", "daysRemaining": 83, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR2", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 84 }, { "domain": "afternic.com", "rank": 126, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 397, "notBefore": "2025-11-18T00:36:31.000Z", "notAfter": "2026-12-20T00:36:31.000Z", "daysRemaining": 122, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Go Daddy Secure Certificate Authority - G2", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 834 }, { "domain": "dnsowl.com", "rank": 127, "ok": false, "error": { "code": "dns-error", "message": "dnsowl.com does not resolve in public DNS" }, "durationMs": 85 }, { "domain": "yccdn.ru", "rank": 128, "ok": false, "error": { "code": "dns-error", "message": "yccdn.ru does not resolve in public DNS" }, "durationMs": 108 }, { "domain": "app-measurement.com", "rank": 129, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 84, "notBefore": "2026-08-05T20:42:22.000Z", "notAfter": "2026-10-28T20:42:21.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE2", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 61 }, { "domain": "cdn77.org", "rank": 130, "ok": false, "error": { "code": "dns-error", "message": "cdn77.org does not resolve in public DNS" }, "durationMs": 14 }, { "domain": "app-analytics-services.com", "rank": 131, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 84, "notBefore": "2026-08-05T20:42:22.000Z", "notAfter": "2026-10-28T20:42:21.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE2", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 65 }, { "domain": "unity3d.com", "rank": 132, "ok": true, "grade": { "letter": "C", "score": 62 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES256-GCM-SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 369, "notBefore": "2025-11-28T00:00:00.000Z", "notAfter": "2026-12-01T23:59:59.000Z", "daysRemaining": 104, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "tls10-accepted", "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "chain-complete" ], "durationMs": 79 }, { "domain": "amazon-adsystem.com", "rank": 133, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 395, "notBefore": "2025-12-14T00:00:00.000Z", "notAfter": "2027-01-12T23:59:59.000Z", "daysRemaining": 146, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M01", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 513 }, { "domain": "nih.gov", "rank": 134, "ok": true, "grade": { "letter": "B", "score": 77 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "refused", "lifetimeDays": 375, "notBefore": "2026-02-05T15:04:58.000Z", "notAfter": "2027-02-15T15:47:15.000Z", "daysRemaining": 179, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Go Daddy Secure Certificate Authority - G2", "findingIds": [ "chain-weak-signature-hash", "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "chain-complete" ], "durationMs": 787 }, { "domain": "f5.com", "rank": 135, "ok": false, "error": { "code": "timeout", "message": "f5.com did not complete a TLS handshake within 8 seconds." }, "durationMs": 8215 }, { "domain": "prodregistryv2.org", "rank": 136, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-11T04:18:52.000Z", "notAfter": "2026-11-09T04:18:51.000Z", "daysRemaining": 81, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 183 }, { "domain": "amazon.dev", "rank": 137, "ok": false, "error": { "code": "dns-error", "message": "amazon.dev does not resolve in public DNS" }, "durationMs": 20 }, { "domain": "trbcdn.net", "rank": 138, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-06-19T17:26:42.000Z", "notAfter": "2026-09-17T17:26:41.000Z", "daysRemaining": 28, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR1", "findingIds": [ "key-rsa-2048", "cert-renewal-window", "pqc-migration-ahead", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 157 }, { "domain": "dns.google", "rank": 139, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 84, "notBefore": "2026-08-05T20:44:42.000Z", "notAfter": "2026-10-28T20:44:41.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE2", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 59 }, { "domain": "msftncsi.com", "rank": 140, "ok": false, "error": { "code": "dns-error", "message": "msftncsi.com does not resolve in public DNS" }, "durationMs": 50 }, { "domain": "dropbox.com", "rank": 141, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 57, "notBefore": "2026-08-19T00:00:00.000Z", "notAfter": "2026-10-14T23:59:59.000Z", "daysRemaining": 56, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G3 TLS ECC SHA384 2020 CA1", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 114 }, { "domain": "miit.gov.cn", "rank": 142, "ok": false, "error": { "code": "dns-error", "message": "miit.gov.cn does not resolve in public DNS" }, "durationMs": 1110 }, { "domain": "iiko.it", "rank": 143, "ok": false, "error": { "code": "dns-error", "message": "iiko.it does not resolve in public DNS" }, "durationMs": 254 }, { "domain": "kaspersky.com", "rank": 144, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 365, "notBefore": "2026-02-20T00:00:00.000Z", "notAfter": "2027-02-19T23:59:59.000Z", "daysRemaining": 184, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 456 }, { "domain": "forms.gle", "rank": 145, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-17T08:17:50.000Z", "notAfter": "2026-11-15T09:16:36.000Z", "daysRemaining": 87, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WR3", "findingIds": [ "chain-weak-signature-hash", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 57 }, { "domain": "reg.ru", "rank": 146, "ok": true, "grade": { "letter": "B", "score": 85 }, "keyFamily": "rsa", "keyLabel": "RSA-4096", "keyCurve": null, "keyBits": 4096, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1", "lifetimeDays": 397, "notBefore": "2025-11-07T08:59:55.000Z", "notAfter": "2026-12-09T08:59:54.000Z", "daysRemaining": 111, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign GCC R3 EV TLS CA 2025", "findingIds": [ "tls11-accepted", "pqc-migration-ahead", "key-rsa-large", "cert-valid", "tls13", "chain-complete" ], "durationMs": 907 }, { "domain": "dns-parking.com", "rank": 147, "ok": false, "error": { "code": "dns-error", "message": "dns-parking.com does not resolve in public DNS" }, "durationMs": 90 }, { "domain": "vedcdnlb.com", "rank": 148, "ok": false, "error": { "code": "dns-error", "message": "vedcdnlb.com does not resolve in public DNS" }, "durationMs": 85 }, { "domain": "netflix.net", "rank": 149, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-28T11:53:56.000Z", "notAfter": "2026-10-26T11:53:55.000Z", "daysRemaining": 67, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WR1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 286 }, { "domain": "archive.org", "rank": 150, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 397, "notBefore": "2026-01-08T22:02:42.000Z", "notAfter": "2027-02-09T22:02:42.000Z", "daysRemaining": 174, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Go Daddy Secure Certificate Authority - G2", "findingIds": [ "chain-weak-signature-hash", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 786 }, { "domain": "godaddy.com", "rank": 151, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 90, "notBefore": "2026-06-30T05:54:58.000Z", "notAfter": "2026-09-28T06:54:39.000Z", "daysRemaining": 39, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 180 }, { "domain": "intuit.com", "rank": 152, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 368, "notBefore": "2025-11-04T00:00:00.000Z", "notAfter": "2026-11-06T23:59:59.000Z", "daysRemaining": 79, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 171 }, { "domain": "xiaomi.com", "rank": 153, "ok": true, "grade": { "letter": "C", "score": 62 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "accepted:TLSv1.1", "lifetimeDays": 397, "notBefore": "2025-11-29T00:00:00.000Z", "notAfter": "2026-12-30T23:59:59.000Z", "daysRemaining": 133, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "RapidSSL TLS RSA CA G1", "findingIds": [ "chain-weak-signature-hash", "tls11-accepted", "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "chain-complete" ], "durationMs": 2244 }, { "domain": "gravatar.com", "rank": 154, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-08T19:44:01.000Z", "notAfter": "2026-11-06T19:44:00.000Z", "daysRemaining": 79, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE2", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 676 }, { "domain": "static.microsoft", "rank": 155, "ok": false, "error": { "code": "dns-error", "message": "static.microsoft does not resolve in public DNS" }, "durationMs": 18 }, { "domain": "azurefd.net", "rank": 156, "ok": false, "error": { "code": "dns-error", "message": "azurefd.net does not resolve in public DNS" }, "durationMs": 41 }, { "domain": "steamserver.net", "rank": 157, "ok": false, "error": { "code": "dns-error", "message": "steamserver.net does not resolve in public DNS" }, "durationMs": 56 }, { "domain": "nytimes.com", "rank": 158, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-02-27T00:00:00.000Z", "notAfter": "2026-09-13T23:59:59.000Z", "daysRemaining": 25, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Thawte TLS RSA CA G1", "findingIds": [ "key-rsa-2048", "cert-renewal-window", "pqc-migration-ahead", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 101 }, { "domain": "epicgames.com", "rank": 159, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 198, "notBefore": "2026-04-13T00:00:00.000Z", "notAfter": "2026-10-27T23:59:59.000Z", "daysRemaining": 69, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M04", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 543 }, { "domain": "tumblr.com", "rank": 160, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-09T19:44:19.000Z", "notAfter": "2026-10-07T19:44:18.000Z", "daysRemaining": 49, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE2", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 114 }, { "domain": "one.one", "rank": 161, "ok": true, "grade": { "letter": "A", "score": 100 }, "keyFamily": "rsa", "keyLabel": "RSA-4096", "keyCurve": null, "keyBits": 4096, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-10T03:54:20.000Z", "notAfter": "2026-11-08T03:54:19.000Z", "daysRemaining": 80, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR2", "findingIds": [ "pqc-migration-ahead", "key-rsa-large", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 104 }, { "domain": "paypal.com", "rank": 162, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-05-11T00:00:00.000Z", "notAfter": "2026-11-25T23:59:59.000Z", "daysRemaining": 98, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 87 }, { "domain": "discord.com", "rank": 163, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-06-30T20:41:23.000Z", "notAfter": "2026-09-28T21:41:17.000Z", "daysRemaining": 40, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 66 }, { "domain": "msftconnecttest.com", "rank": 164, "ok": false, "error": { "code": "dns-error", "message": "msftconnecttest.com does not resolve in public DNS" }, "durationMs": 59 }, { "domain": "applovin.com", "rank": 165, "ok": true, "grade": { "letter": "C", "score": 62 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 90, "notBefore": "2026-07-25T08:07:07.000Z", "notAfter": "2026-10-23T09:03:02.000Z", "daysRemaining": 64, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WR3", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 150 }, { "domain": "3gppnetwork.org", "rank": 166, "ok": false, "error": { "code": "dns-error", "message": "3gppnetwork.org does not resolve in public DNS" }, "durationMs": 92 }, { "domain": "aliyuncs.com", "rank": 167, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 92, "notBefore": "2026-07-03T08:12:02.000Z", "notAfter": "2026-10-03T01:06:12.000Z", "daysRemaining": 44, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign GCC R3 OV TLS CA 2024", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "tls13", "chain-complete" ], "durationMs": 2330 }, { "domain": "adtrafficquality.google", "rank": 168, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 84, "notBefore": "2026-08-05T20:45:44.000Z", "notAfter": "2026-10-28T20:45:43.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WR2", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 179 }, { "domain": "ax-msedge.net", "rank": 169, "ok": false, "error": { "code": "dns-error", "message": "ax-msedge.net does not resolve in public DNS" }, "durationMs": 10 }, { "domain": "tm-azurefd.net", "rank": 170, "ok": false, "error": { "code": "dns-error", "message": "tm-azurefd.net does not resolve in public DNS" }, "durationMs": 23 }, { "domain": "shopify.com", "rank": 171, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-10T18:38:02.000Z", "notAfter": "2026-11-08T19:37:54.000Z", "daysRemaining": 81, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 44 }, { "domain": "googleadservices.com", "rank": 172, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 84, "notBefore": "2026-08-05T20:43:28.000Z", "notAfter": "2026-10-28T20:43:27.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WR2", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 73 }, { "domain": "soundcloud.com", "rank": 173, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 395, "notBefore": "2026-02-17T00:00:00.000Z", "notAfter": "2027-03-18T23:59:59.000Z", "daysRemaining": 211, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M01", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 351 }, { "domain": "vk.ru", "rank": 174, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-06-22T11:34:09.000Z", "notAfter": "2026-09-20T11:34:08.000Z", "daysRemaining": 31, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR2", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 107 }, { "domain": "ggpht.com", "rank": 175, "ok": false, "error": { "code": "dns-error", "message": "ggpht.com does not resolve in public DNS" }, "durationMs": 92 }, { "domain": "mts.ru", "rank": 176, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-04-20T15:23:34.000Z", "notAfter": "2026-11-05T15:23:34.000Z", "daysRemaining": 77, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign GCC R3 DV TLS CA 2020", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 406 }, { "domain": "flickr.com", "rank": 177, "ok": true, "grade": { "letter": "C", "score": 72 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 394, "notBefore": "2025-12-05T00:00:00.000Z", "notAfter": "2027-01-02T23:59:59.000Z", "daysRemaining": 136, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M01", "findingIds": [ "tls10-accepted", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "tls13", "chain-complete" ], "durationMs": 56 }, { "domain": "macromedia.com", "rank": 178, "ok": false, "error": { "code": "timeout", "message": "macromedia.com did not complete a TLS handshake within 8 seconds." }, "durationMs": 8013 }, { "domain": "adobe.io", "rank": 179, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-05-14T00:00:00.000Z", "notAfter": "2026-11-28T23:59:59.000Z", "daysRemaining": 101, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 511 }, { "domain": "jomodns.com", "rank": 180, "ok": false, "error": { "code": "dns-error", "message": "jomodns.com does not resolve in public DNS" }, "durationMs": 240 }, { "domain": "nflxso.net", "rank": 181, "ok": false, "error": { "code": "dns-error", "message": "nflxso.net does not resolve in public DNS" }, "durationMs": 50 }, { "domain": "example.com", "rank": 182, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 90, "notBefore": "2026-07-29T22:10:08.000Z", "notAfter": "2026-10-27T22:17:21.000Z", "daysRemaining": 69, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Cloudflare TLS Issuing ECC CA 3", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 93 }, { "domain": "azurewebsites.net", "rank": 183, "ok": false, "error": { "code": "dns-error", "message": "azurewebsites.net does not resolve in public DNS" }, "durationMs": 85 }, { "domain": "webex.com", "rank": 184, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES256-GCM-SHA384", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-08-08T05:23:43.000Z", "notAfter": "2027-02-23T05:22:43.000Z", "daysRemaining": 187, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "HydrantID Server CA O1", "findingIds": [ "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "chain-complete" ], "durationMs": 1014 }, { "domain": "w3.org", "rank": 185, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-09T02:48:43.000Z", "notAfter": "2026-10-07T03:48:25.000Z", "daysRemaining": 48, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 45 }, { "domain": "medium.com", "rank": 186, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-08T20:30:25.000Z", "notAfter": "2026-10-06T21:30:23.000Z", "daysRemaining": 48, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 29 }, { "domain": "cdn-apple.com", "rank": 187, "ok": false, "error": { "code": "dns-error", "message": "cdn-apple.com does not resolve in public DNS" }, "durationMs": 46 }, { "domain": "playstation.net", "rank": 188, "ok": false, "error": { "code": "dns-error", "message": "playstation.net does not resolve in public DNS" }, "durationMs": 60 }, { "domain": "hichina.com", "rank": 189, "ok": false, "error": { "code": "dns-error", "message": "hichina.com does not resolve in public DNS" }, "durationMs": 336 }, { "domain": "cnn.com", "rank": 190, "ok": true, "grade": { "letter": "A", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-384", "keyCurve": "P-384", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-04-02T18:49:02.000Z", "notAfter": "2026-10-18T18:49:01.000Z", "daysRemaining": 59, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign Atlas ECCR5 OV TLS CA 2025 Q2", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 114 }, { "domain": "theguardian.com", "rank": 191, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-08-18T11:24:58.000Z", "notAfter": "2027-03-05T10:24:58.000Z", "daysRemaining": 197, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign Atlas R46 DV TLS CA 2026 Q3", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 127 }, { "domain": "rubiconproject.com", "rank": 192, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 198, "notBefore": "2026-05-20T00:00:00.000Z", "notAfter": "2026-12-03T23:59:59.000Z", "daysRemaining": 106, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M01", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 123 }, { "domain": "namebrightdns.com", "rank": 193, "ok": false, "error": { "code": "dns-error", "message": "namebrightdns.com does not resolve in public DNS" }, "durationMs": 54 }, { "domain": "vungle.com", "rank": 194, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-06-28T11:56:33.000Z", "notAfter": "2026-09-26T11:56:32.000Z", "daysRemaining": 37, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE1", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 63 }, { "domain": "bytefcdn-oversea.com", "rank": 195, "ok": false, "error": { "code": "dns-error", "message": "bytefcdn-oversea.com does not resolve in public DNS" }, "durationMs": 55 }, { "domain": "creativecommons.org", "rank": 196, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 90, "notBefore": "2026-07-03T17:35:20.000Z", "notAfter": "2026-10-01T18:35:09.000Z", "daysRemaining": 42, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 116 }, { "domain": "oracle.com", "rank": 197, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-06-04T00:00:00.000Z", "notAfter": "2026-12-19T23:59:59.000Z", "daysRemaining": 122, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "chain-complete" ], "durationMs": 1047 }, { "domain": "spo-msedge.net", "rank": 198, "ok": false, "error": { "code": "dns-error", "message": "spo-msedge.net does not resolve in public DNS" }, "durationMs": 88 }, { "domain": "sfx.ms", "rank": 199, "ok": false, "error": { "code": "dns-error", "message": "sfx.ms does not resolve in public DNS" }, "durationMs": 111 }, { "domain": "lsrelayaccess.com", "rank": 200, "ok": false, "error": { "code": "unreachable", "message": "lsrelayaccess.com dropped the connection during the TLS handshake." }, "durationMs": 942 }, { "domain": "shifen.com", "rank": 201, "ok": false, "error": { "code": "timeout", "message": "shifen.com did not complete a TLS handshake within 8 seconds." }, "durationMs": 8265 }, { "domain": "lencr.org", "rank": 202, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-06T15:24:34.000Z", "notAfter": "2026-10-04T15:24:33.000Z", "daysRemaining": 45, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE2", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 140 }, { "domain": "taboola.com", "rank": 203, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 387, "notBefore": "2025-12-15T00:00:00.000Z", "notAfter": "2027-01-05T23:59:59.000Z", "daysRemaining": 139, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 106 }, { "domain": "edgcdn.net", "rank": 204, "ok": false, "error": { "code": "dns-error", "message": "edgcdn.net does not resolve in public DNS" }, "durationMs": 73 }, { "domain": "forbes.com", "rank": 205, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "refused", "lifetimeDays": 397, "notBefore": "2025-11-10T19:01:53.000Z", "notAfter": "2026-12-12T19:01:52.000Z", "daysRemaining": 115, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign Atlas R3 DV TLS CA 2025 Q4", "findingIds": [ "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "chain-complete" ], "durationMs": 186 }, { "domain": "doi.org", "rank": 206, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-17T15:18:36.000Z", "notAfter": "2026-10-15T16:18:08.000Z", "daysRemaining": 56, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 164 }, { "domain": "bbc.com", "rank": 207, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-07-09T05:46:23.000Z", "notAfter": "2027-01-24T05:46:23.000Z", "daysRemaining": 157, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign RSA OV SSL CA 2018", "findingIds": [ "chain-weak-signature-hash", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 209 }, { "domain": "ttdns2.com", "rank": 208, "ok": false, "error": { "code": "dns-error", "message": "ttdns2.com does not resolve in public DNS" }, "durationMs": 189 }, { "domain": "pki.goog", "rank": 209, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 84, "notBefore": "2026-08-05T20:45:57.000Z", "notAfter": "2026-10-28T20:45:56.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE2", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 41 }, { "domain": "miui.com", "rank": 210, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 397, "notBefore": "2025-11-29T00:00:00.000Z", "notAfter": "2026-12-30T23:59:59.000Z", "daysRemaining": 133, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "RapidSSL TLS RSA CA G1", "findingIds": [ "chain-weak-signature-hash", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 307 }, { "domain": "ebay.com", "rank": 211, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-05-20T00:00:00.000Z", "notAfter": "2026-12-04T23:59:59.000Z", "daysRemaining": 107, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Sectigo Public Server Authentication CA OV R40", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 527 }, { "domain": "cpanel.net", "rank": 212, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 385, "notBefore": "2026-01-07T00:00:00.000Z", "notAfter": "2027-01-26T23:59:59.000Z", "daysRemaining": 160, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Sectigo Public Server Authentication CA DV R36", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 796 }, { "domain": "youtube-nocookie.com", "rank": 213, "ok": true, "grade": { "letter": "C", "score": 62 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 84, "notBefore": "2026-08-05T20:42:14.000Z", "notAfter": "2026-10-28T20:42:13.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WR2", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 198 }, { "domain": "sciencedirect.com", "rank": 214, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-06-28T12:26:57.000Z", "notAfter": "2026-09-26T13:26:47.000Z", "daysRemaining": 37, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 181 }, { "domain": "ozon.ru", "rank": 215, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 397, "notBefore": "2025-10-03T14:46:02.000Z", "notAfter": "2026-11-04T14:46:01.000Z", "daysRemaining": 76, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign RSA OV SSL CA 2018", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 262 }, { "domain": "t-online.de", "rank": 216, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-14T09:05:09.000Z", "notAfter": "2026-11-12T09:05:08.000Z", "daysRemaining": 84, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE1", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 403 }, { "domain": "researchgate.net", "rank": 217, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-16T12:54:46.000Z", "notAfter": "2026-11-14T13:54:34.000Z", "daysRemaining": 86, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 42 }, { "domain": "mit.edu", "rank": 218, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES256-GCM-SHA384", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-04-29T00:00:00.000Z", "notAfter": "2026-11-13T23:59:59.000Z", "daysRemaining": 86, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GeoTrust TLS RSA CA G1", "findingIds": [ "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "chain-complete" ], "durationMs": 65 }, { "domain": "gmail.com", "rank": 219, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 84, "notBefore": "2026-08-05T20:43:48.000Z", "notAfter": "2026-10-28T20:43:47.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE2", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 63 }, { "domain": "twitch.tv", "rank": 220, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-04-24T21:48:07.000Z", "notAfter": "2026-11-09T20:48:07.000Z", "daysRemaining": 82, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign Atlas R3 DV TLS CA 2026 Q2", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 68 }, { "domain": "comcast.net", "rank": 221, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES256-GCM-SHA384", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-06-24T00:00:00.000Z", "notAfter": "2027-01-08T23:59:59.000Z", "daysRemaining": 142, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Sectigo Public Server Authentication CA OV R36", "findingIds": [ "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "chain-complete" ], "durationMs": 861 }, { "domain": "adsafeprotected.com", "rank": 222, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 198, "notBefore": "2026-07-13T00:00:00.000Z", "notAfter": "2027-01-26T23:59:59.000Z", "daysRemaining": 160, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M01", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 214 }, { "domain": "fastly-edge.com", "rank": 223, "ok": false, "error": { "code": "dns-error", "message": "fastly-edge.com does not resolve in public DNS" }, "durationMs": 112 }, { "domain": "cdngslb.com", "rank": 224, "ok": false, "error": { "code": "timeout", "message": "cdngslb.com did not complete a TLS handshake within 8 seconds." }, "durationMs": 8341 }, { "domain": "nist.gov", "rank": 225, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-15T20:22:51.000Z", "notAfter": "2026-11-13T20:22:50.000Z", "daysRemaining": 86, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE1", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 431 }, { "domain": "bbc.co.uk", "rank": 226, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-07-09T05:46:23.000Z", "notAfter": "2027-01-24T05:46:23.000Z", "daysRemaining": 157, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign RSA OV SSL CA 2018", "findingIds": [ "chain-weak-signature-hash", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 73 }, { "domain": "t.co", "rank": 227, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-09T09:30:27.000Z", "notAfter": "2026-10-07T09:30:26.000Z", "daysRemaining": 48, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE2", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 57 }, { "domain": "ack.de", "rank": 228, "ok": false, "error": { "code": "dns-error", "message": "ack.de does not resolve in public DNS" }, "durationMs": 3725 }, { "domain": "akamaized.net", "rank": 229, "ok": false, "error": { "code": "dns-error", "message": "akamaized.net does not resolve in public DNS" }, "durationMs": 30 }, { "domain": "sourceforge.net", "rank": 230, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-12T21:17:50.000Z", "notAfter": "2026-11-10T21:17:49.000Z", "daysRemaining": 83, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE1", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 76 }, { "domain": "ubuntu.com", "rank": 231, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-02T04:13:36.000Z", "notAfter": "2026-09-30T04:13:35.000Z", "daysRemaining": 41, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 265 }, { "domain": "userapi.com", "rank": 232, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-07-23T10:17:57.000Z", "notAfter": "2027-02-07T10:17:56.000Z", "daysRemaining": 171, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "HARICA DV TLS RSA", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 154 }, { "domain": "pages.dev", "rank": 233, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-21T09:32:53.000Z", "notAfter": "2026-10-19T10:32:38.000Z", "daysRemaining": 60, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 32 }, { "domain": "azureedge.net", "rank": 234, "ok": false, "error": { "code": "dns-error", "message": "azureedge.net does not resolve in public DNS" }, "durationMs": 22 }, { "domain": "nr-data.net", "rank": 235, "ok": false, "error": { "code": "dns-error", "message": "nr-data.net does not resolve in public DNS" }, "durationMs": 127 }, { "domain": "etsy.com", "rank": 236, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "refused", "lifetimeDays": 397, "notBefore": "2025-11-03T15:09:45.000Z", "notAfter": "2026-12-05T15:09:44.000Z", "daysRemaining": 107, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign Atlas R3 DV TLS CA 2025 Q4", "findingIds": [ "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "chain-complete" ], "durationMs": 100 }, { "domain": "telecid.ru", "rank": 237, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-12T12:02:21.000Z", "notAfter": "2026-11-10T12:02:20.000Z", "daysRemaining": 82, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE2", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 181 }, { "domain": "stripe.com", "rank": 238, "ok": true, "grade": { "letter": "A", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 108, "notBefore": "2026-07-28T00:00:00.000Z", "notAfter": "2026-11-12T23:59:59.000Z", "daysRemaining": 85, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G3 TLS ECC SHA384 2020 CA1", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 289 }, { "domain": "ksyuncdn.com", "rank": 239, "ok": false, "error": { "code": "dns-error", "message": "ksyuncdn.com does not resolve in public DNS" }, "durationMs": 301 }, { "domain": "canva.com", "rank": 240, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 395, "notBefore": "2025-11-18T00:00:00.000Z", "notAfter": "2026-12-17T23:59:59.000Z", "daysRemaining": 120, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M04", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 176 }, { "domain": "android.com", "rank": 241, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 84, "notBefore": "2026-08-05T20:42:14.000Z", "notAfter": "2026-10-28T20:42:13.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WR2", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 82 }, { "domain": "pubmatic.com", "rank": 242, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 395, "notBefore": "2025-10-23T00:00:00.000Z", "notAfter": "2026-11-21T23:59:59.000Z", "daysRemaining": 94, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M04", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 204 }, { "domain": "oxylabs.io", "rank": 243, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-07T12:57:39.000Z", "notAfter": "2026-11-05T13:57:17.000Z", "daysRemaining": 77, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 74 }, { "domain": "telekom.net", "rank": 244, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-06-26T13:03:32.000Z", "notAfter": "2026-09-24T13:03:31.000Z", "daysRemaining": 35, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 255 }, { "domain": "telegram.org", "rank": 245, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 397, "notBefore": "2025-08-11T13:36:48.000Z", "notAfter": "2026-09-12T13:36:48.000Z", "daysRemaining": 23, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Go Daddy Secure Certificate Authority - G2", "findingIds": [ "key-rsa-2048", "cert-renewal-window", "pqc-migration-ahead", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 205 }, { "domain": "cisco.com", "rank": 246, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES256-GCM-SHA384", "legacyTls": "refused", "lifetimeDays": 395, "notBefore": "2025-08-22T04:22:07.000Z", "notAfter": "2026-09-21T04:21:07.000Z", "daysRemaining": 32, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "HydrantID Server CA O1", "findingIds": [ "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "chain-complete" ], "durationMs": 862 }, { "domain": "who.int", "rank": 247, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-31T15:44:36.000Z", "notAfter": "2026-10-29T16:44:34.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 146 }, { "domain": "hubspot.com", "rank": 248, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-14T22:10:06.000Z", "notAfter": "2026-10-12T23:10:04.000Z", "daysRemaining": 54, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 114 }, { "domain": "imdb.com", "rank": 249, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 198, "notBefore": "2026-08-05T00:00:00.000Z", "notAfter": "2027-02-18T23:59:59.000Z", "daysRemaining": 183, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M04", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 490 }, { "domain": "adsrvr.org", "rank": 250, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 394, "notBefore": "2026-03-04T17:40:09.000Z", "notAfter": "2027-04-02T07:59:59.000Z", "daysRemaining": 225, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign GCC R3 DV TLS CA 2020", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 60 }, { "domain": "rbxcdn.com", "rank": 251, "ok": false, "error": { "code": "dns-error", "message": "rbxcdn.com does not resolve in public DNS" }, "durationMs": 48 }, { "domain": "wsdvs.com", "rank": 252, "ok": false, "error": { "code": "dns-error", "message": "wsdvs.com does not resolve in public DNS" }, "durationMs": 75 }, { "domain": "booking.com", "rank": 253, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 317, "notBefore": "2025-12-18T00:00:00.000Z", "notAfter": "2026-10-30T23:59:59.000Z", "daysRemaining": 72, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 72 }, { "domain": "wixsite.com", "rank": 254, "ok": false, "error": { "code": "dns-error", "message": "wixsite.com does not resolve in public DNS" }, "durationMs": 97 }, { "domain": "wikimedia.org", "rank": 255, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-05T19:15:41.000Z", "notAfter": "2026-11-03T19:15:40.000Z", "daysRemaining": 76, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE2", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 354 }, { "domain": "adnxs.com", "rank": 256, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.2", "cipher": "ECDHE-ECDSA-AES128-GCM-SHA256", "legacyTls": "refused", "lifetimeDays": 397, "notBefore": "2025-09-25T00:00:00.000Z", "notAfter": "2026-10-26T23:59:59.000Z", "daysRemaining": 68, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GeoTrust TLS ECC CA G1", "findingIds": [ "no-tls13", "pqc-migration-ahead", "key-modern", "cert-valid", "legacy-tls-refused", "chain-complete" ], "durationMs": 342 }, { "domain": "linktr.ee", "rank": 257, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-06-30T02:33:16.000Z", "notAfter": "2026-09-28T02:33:15.000Z", "daysRemaining": 39, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR1", "findingIds": [ "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "chain-complete" ], "durationMs": 85 }, { "domain": "omtrdc.net", "rank": 258, "ok": false, "error": { "code": "dns-error", "message": "omtrdc.net does not resolve in public DNS" }, "durationMs": 14 }, { "domain": "scorecardresearch.com", "rank": 259, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-04-06T00:00:00.000Z", "notAfter": "2026-10-21T23:59:59.000Z", "daysRemaining": 63, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Sectigo Public Server Authentication CA DV R36", "findingIds": [ "chain-weak-signature-hash", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 505 }, { "domain": "launchpad.net", "rank": 260, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-06-20T10:13:34.000Z", "notAfter": "2026-09-18T10:13:33.000Z", "daysRemaining": 29, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR1", "findingIds": [ "key-rsa-2048", "cert-renewal-window", "pqc-migration-ahead", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 226 }, { "domain": "wac-msedge.net", "rank": 261, "ok": false, "error": { "code": "dns-error", "message": "wac-msedge.net does not resolve in public DNS" }, "durationMs": 37 }, { "domain": "meraki.com", "rank": 262, "ok": true, "grade": { "letter": "B", "score": 82 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "accepted:TLSv1.1", "lifetimeDays": 198, "notBefore": "2026-03-29T00:00:00.000Z", "notAfter": "2026-10-12T23:59:59.000Z", "daysRemaining": 54, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M04", "findingIds": [ "tls11-accepted", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "tls13", "chain-complete" ], "durationMs": 81 }, { "domain": "roku.com", "rank": 263, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-15T19:17:26.000Z", "notAfter": "2026-11-13T20:17:24.000Z", "daysRemaining": 86, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 93 }, { "domain": "name-services.com", "rank": 264, "ok": false, "error": { "code": "dns-error", "message": "name-services.com does not resolve in public DNS" }, "durationMs": 229 }, { "domain": "vecdnlb.com", "rank": 265, "ok": false, "error": { "code": "dns-error", "message": "vecdnlb.com does not resolve in public DNS" }, "durationMs": 34 }, { "domain": "ibm.com", "rank": 266, "ok": true, "grade": { "letter": "A", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 366, "notBefore": "2025-10-17T00:00:00.000Z", "notAfter": "2026-10-17T23:59:59.000Z", "daysRemaining": 59, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G3 TLS ECC SHA384 2020 CA1", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 61 }, { "domain": "hcaptcha.com", "rank": 267, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 90, "notBefore": "2026-08-13T04:53:55.000Z", "notAfter": "2026-11-11T05:53:53.000Z", "daysRemaining": 83, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 79 }, { "domain": "alibabadns.com", "rank": 268, "ok": false, "error": { "code": "dns-error", "message": "alibabadns.com does not resolve in public DNS" }, "durationMs": 76 }, { "domain": "facebook.net", "rank": 269, "ok": false, "error": { "code": "dns-error", "message": "facebook.net does not resolve in public DNS" }, "durationMs": 53 }, { "domain": "geobasket.ru", "rank": 270, "ok": false, "error": { "code": "dns-error", "message": "geobasket.ru does not resolve in public DNS" }, "durationMs": 156 }, { "domain": "wildberries.ru", "rank": 271, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-02T04:51:25.000Z", "notAfter": "2026-10-31T04:51:24.000Z", "daysRemaining": 72, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE1", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 196 }, { "domain": "springer.com", "rank": 272, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-06-25T21:06:28.000Z", "notAfter": "2026-09-23T21:06:27.000Z", "daysRemaining": 35, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 252 }, { "domain": "msedge.net", "rank": 273, "ok": false, "error": { "code": "timeout", "message": "msedge.net did not complete a TLS handshake within 8 seconds." }, "durationMs": 8009 }, { "domain": "reuters.com", "rank": 274, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-05-27T00:00:00.000Z", "notAfter": "2026-12-11T23:59:59.000Z", "daysRemaining": 114, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Sectigo Public Server Authentication CA OV R40", "findingIds": [ "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "chain-complete" ], "durationMs": 709 }, { "domain": "alidns.com", "rank": 275, "ok": true, "grade": { "letter": "D", "score": 55 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.2", "cipher": "ECDHE-ECDSA-AES128-GCM-SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 199, "notBefore": "2026-03-16T11:57:07.000Z", "notAfter": "2026-10-01T11:51:17.000Z", "daysRemaining": 42, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign GCC R3 OV TLS CA 2024", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "no-tls13", "pqc-migration-ahead", "key-modern", "cert-valid", "chain-complete" ], "durationMs": 2751 }, { "domain": "tinyurl.com", "rank": 276, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-07T16:01:48.000Z", "notAfter": "2026-10-05T16:58:22.000Z", "daysRemaining": 46, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 31 }, { "domain": "ttvnw.net", "rank": 277, "ok": false, "error": { "code": "dns-error", "message": "ttvnw.net does not resolve in public DNS" }, "durationMs": 21 }, { "domain": "duckdns.org", "rank": 278, "ok": true, "grade": { "letter": "C", "score": 62 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 198, "notBefore": "2026-06-30T00:00:00.000Z", "notAfter": "2027-01-13T23:59:59.000Z", "daysRemaining": 147, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M04", "findingIds": [ "tls10-accepted", "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "chain-complete" ], "durationMs": 1418 }, { "domain": "weather.com", "rank": 279, "ok": true, "grade": { "letter": "A", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 366, "notBefore": "2026-01-05T00:00:00.000Z", "notAfter": "2027-01-05T23:59:59.000Z", "daysRemaining": 139, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G3 TLS ECC SHA384 2020 CA1", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 220 }, { "domain": "forter.com", "rank": 280, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-13T21:34:01.000Z", "notAfter": "2026-11-11T22:33:57.000Z", "daysRemaining": 84, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 260 }, { "domain": "arubanetworks.com", "rank": 281, "ok": true, "grade": { "letter": "F", "score": 22 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 365, "notBefore": "2024-09-27T00:00:00.000Z", "notAfter": "2025-09-26T23:59:59.000Z", "daysRemaining": -327, "chainComplete": false, "chainLength": 1, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "cert-expired", "chain-incomplete", "key-rsa-2048", "pqc-migration-ahead", "legacy-tls-refused", "tls13" ], "durationMs": 504 }, { "domain": "virginm.net", "rank": 282, "ok": false, "error": { "code": "dns-error", "message": "virginm.net does not resolve in public DNS" }, "durationMs": 89 }, { "domain": "nature.com", "rank": 283, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-06-25T21:53:01.000Z", "notAfter": "2026-09-23T21:53:00.000Z", "daysRemaining": 35, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR2", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 77 }, { "domain": "mozilla.com", "rank": 284, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-26T02:10:01.000Z", "notAfter": "2026-10-24T03:04:15.000Z", "daysRemaining": 65, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WR3", "findingIds": [ "chain-weak-signature-hash", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 74 }, { "domain": "weibo.com", "rank": 285, "ok": true, "grade": { "letter": "D", "score": 55 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.2", "cipher": "ECDHE-ECDSA-AES128-GCM-SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 199, "notBefore": "2026-05-07T00:00:00.000Z", "notAfter": "2026-11-21T23:59:59.000Z", "daysRemaining": 94, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "no-tls13", "pqc-migration-ahead", "key-modern", "cert-valid", "chain-complete" ], "durationMs": 3399 }, { "domain": "hp.com", "rank": 286, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-07-16T00:00:00.000Z", "notAfter": "2027-01-30T23:59:59.000Z", "daysRemaining": 164, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 287 }, { "domain": "tiktokcdn-us.com", "rank": 287, "ok": false, "error": { "code": "dns-error", "message": "tiktokcdn-us.com does not resolve in public DNS" }, "durationMs": 144 }, { "domain": "spov-msedge.net", "rank": 288, "ok": false, "error": { "code": "dns-error", "message": "spov-msedge.net does not resolve in public DNS" }, "durationMs": 153 }, { "domain": "byteoversea.net", "rank": 289, "ok": false, "error": { "code": "dns-error", "message": "byteoversea.net does not resolve in public DNS" }, "durationMs": 16 }, { "domain": "imcmdb.net", "rank": 290, "ok": false, "error": { "code": "timeout", "message": "imcmdb.net did not complete a TLS handshake within 8 seconds." }, "durationMs": 8031 }, { "domain": "mangosip.ru", "rank": 291, "ok": false, "error": { "code": "timeout", "message": "mangosip.ru did not complete a TLS handshake within 8 seconds." }, "durationMs": 8067 }, { "domain": "www.gov.uk", "rank": 292, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 397, "notBefore": "2025-11-26T22:06:15.000Z", "notAfter": "2026-12-28T22:06:14.000Z", "daysRemaining": 131, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign RSA OV SSL CA 2018", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 207 }, { "domain": "debian.org", "rank": 293, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-20T00:21:08.000Z", "notAfter": "2026-11-18T00:21:07.000Z", "daysRemaining": 90, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 148 }, { "domain": "harvard.edu", "rank": 294, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-10T05:40:59.000Z", "notAfter": "2026-10-08T05:40:58.000Z", "daysRemaining": 49, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE1", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 163 }, { "domain": "clarity.ms", "rank": 295, "ok": true, "grade": { "letter": "C", "score": 72 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 180, "notBefore": "2026-07-06T20:17:33.000Z", "notAfter": "2027-01-02T20:17:33.000Z", "daysRemaining": 136, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha384WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Microsoft TLS G2 RSA CA OCSP 16", "findingIds": [ "tls10-accepted", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "tls13", "chain-complete" ], "durationMs": 1402 }, { "domain": "inmobi.com", "rank": 296, "ok": true, "grade": { "letter": "C", "score": 72 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 366, "notBefore": "2025-09-04T00:00:00.000Z", "notAfter": "2026-09-04T23:59:59.000Z", "daysRemaining": 16, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Sectigo Public Server Authentication CA OV R36", "findingIds": [ "tls10-accepted", "key-rsa-2048", "cert-renewal-window", "pqc-migration-ahead", "tls13", "chain-complete" ], "durationMs": 1212 }, { "domain": "avast.com", "rank": 297, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-07-20T00:00:00.000Z", "notAfter": "2027-02-03T23:59:59.000Z", "daysRemaining": 168, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Sectigo Public Server Authentication CA OV R36", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 60 }, { "domain": "steampowered.com", "rank": 298, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-14T22:11:52.000Z", "notAfter": "2026-10-12T22:11:51.000Z", "daysRemaining": 54, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 37 }, { "domain": "jsdelivr.net", "rank": 299, "ok": false, "error": { "code": "timeout", "message": "jsdelivr.net did not complete a TLS handshake within 8 seconds." }, "durationMs": 8022 }, { "domain": "alibaba.com", "rank": 300, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 199, "notBefore": "2026-03-16T11:57:07.000Z", "notAfter": "2026-10-01T11:51:17.000Z", "daysRemaining": 42, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign GCC R3 OV TLS CA 2024", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "tls13", "chain-complete" ], "durationMs": 1043 }, { "domain": "media-amazon.com", "rank": 301, "ok": false, "error": { "code": "dns-error", "message": "media-amazon.com does not resolve in public DNS" }, "durationMs": 37 }, { "domain": "autodesk.com", "rank": 302, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 198, "notBefore": "2026-05-15T00:00:00.000Z", "notAfter": "2026-11-28T23:59:59.000Z", "daysRemaining": 101, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M04", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 541 }, { "domain": "php.net", "rank": 303, "ok": true, "grade": { "letter": "C", "score": 75 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 90, "notBefore": "2026-08-20T04:07:28.000Z", "notAfter": "2026-11-18T04:07:27.000Z", "daysRemaining": 90, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE2", "findingIds": [ "tls10-accepted", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 1053 }, { "domain": "samsungcloud.com", "rank": 304, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-03-13T00:00:00.000Z", "notAfter": "2026-09-27T23:59:59.000Z", "daysRemaining": 39, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Sectigo Public Server Authentication CA OV R36", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 91 }, { "domain": "mzstatic.com", "rank": 305, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-06-21T07:51:02.000Z", "notAfter": "2026-09-19T08:01:02.000Z", "daysRemaining": 30, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Apple Public Server RSA CA 1 - G1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 504 }, { "domain": "ok.ru", "rank": 306, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 365, "notBefore": "2025-11-07T07:49:43.000Z", "notAfter": "2026-11-07T07:49:43.000Z", "daysRemaining": 79, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "HARICA DV TLS RSA", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 128 }, { "domain": "wiley.com", "rank": 307, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 379, "notBefore": "2025-11-11T00:00:00.000Z", "notAfter": "2026-11-24T23:59:59.000Z", "daysRemaining": 97, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 657 }, { "domain": "amplitude.com", "rank": 308, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "refused", "lifetimeDays": 394, "notBefore": "2025-12-02T00:00:00.000Z", "notAfter": "2026-12-30T23:59:59.000Z", "daysRemaining": 133, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M04", "findingIds": [ "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "chain-complete" ], "durationMs": 833 }, { "domain": "appsflyer.com", "rank": 309, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "refused", "lifetimeDays": 394, "notBefore": "2026-01-12T00:00:00.000Z", "notAfter": "2027-02-09T23:59:59.000Z", "daysRemaining": 174, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M04", "findingIds": [ "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "chain-complete" ], "durationMs": 639 }, { "domain": "googleblog.com", "rank": 310, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 84, "notBefore": "2026-08-05T20:43:13.000Z", "notAfter": "2026-10-28T20:43:12.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE2", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 145 }, { "domain": "shalltry.com", "rank": 311, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 198, "notBefore": "2026-04-24T00:00:00.000Z", "notAfter": "2026-11-07T23:59:59.000Z", "daysRemaining": 80, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M01", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 137 }, { "domain": "myshopify.com", "rank": 312, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-08T15:01:36.000Z", "notAfter": "2026-10-06T15:01:35.000Z", "daysRemaining": 47, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE2", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 181 }, { "domain": "mtgglobals.com", "rank": 313, "ok": false, "error": { "code": "dns-error", "message": "mtgglobals.com does not resolve in public DNS" }, "durationMs": 13 }, { "domain": "salesforce.com", "rank": 314, "ok": true, "grade": { "letter": "A", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-03-18T00:00:00.000Z", "notAfter": "2026-10-02T23:59:59.000Z", "daysRemaining": 44, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G3 TLS ECC SHA384 2020 CA1", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 577 }, { "domain": "dnsmadeeasy.com", "rank": 315, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 47, "notBefore": "2026-08-17T00:00:00.000Z", "notAfter": "2026-10-02T23:59:59.000Z", "daysRemaining": 44, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert G5 TLS RSA4096 SHA384 2021 CA1", "findingIds": [ "chain-weak-signature-hash", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 559 }, { "domain": "hostgator.com", "rank": 316, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-06-27T16:30:46.000Z", "notAfter": "2026-09-25T17:30:21.000Z", "daysRemaining": 36, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 79 }, { "domain": "heytapmobile.com", "rank": 317, "ok": false, "error": { "code": "dns-error", "message": "heytapmobile.com does not resolve in public DNS" }, "durationMs": 73 }, { "domain": "amazon.co.uk", "rank": 318, "ok": true, "grade": { "letter": "C", "score": 72 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 198, "notBefore": "2026-05-05T00:00:00.000Z", "notAfter": "2026-11-18T23:59:59.000Z", "daysRemaining": 91, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GeoTrust TLS RSA CA G1", "findingIds": [ "tls10-accepted", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "tls13", "chain-complete" ], "durationMs": 441 }, { "domain": "samsungqbe.com", "rank": 319, "ok": false, "error": { "code": "dns-error", "message": "samsungqbe.com does not resolve in public DNS" }, "durationMs": 89 }, { "domain": "aliyuncsslbintl.com", "rank": 320, "ok": false, "error": { "code": "dns-error", "message": "aliyuncsslbintl.com does not resolve in public DNS" }, "durationMs": 114 }, { "domain": "gnu.org", "rank": 321, "ok": true, "grade": { "letter": "C", "score": 72 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 90, "notBefore": "2026-07-09T10:16:20.000Z", "notAfter": "2026-10-07T10:16:19.000Z", "daysRemaining": 48, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR2", "findingIds": [ "tls10-accepted", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 1113 }, { "domain": "launchdarkly.com", "rank": 322, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-16T17:44:07.000Z", "notAfter": "2026-11-14T17:44:06.000Z", "daysRemaining": 86, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE2", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 125 }, { "domain": "datadoghq.com", "rank": 323, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-04-23T00:00:00.000Z", "notAfter": "2026-11-07T23:59:59.000Z", "daysRemaining": 80, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 64 }, { "domain": "aliyun.com", "rank": 324, "ok": true, "grade": { "letter": "D", "score": 55 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.2", "cipher": "ECDHE-ECDSA-AES128-GCM-SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 199, "notBefore": "2026-08-12T03:02:02.000Z", "notAfter": "2027-02-26T15:46:35.000Z", "daysRemaining": 190, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign GCC R46 OV TLS CA 2025", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "no-tls13", "pqc-migration-ahead", "key-modern", "cert-valid", "chain-complete" ], "durationMs": 2884 }, { "domain": "libp2p.direct", "rank": 325, "ok": false, "error": { "code": "dns-error", "message": "libp2p.direct does not resolve in public DNS" }, "durationMs": 437 }, { "domain": "douyincdn.com", "rank": 326, "ok": false, "error": { "code": "dns-error", "message": "douyincdn.com does not resolve in public DNS" }, "durationMs": 318 }, { "domain": "crpt.ru", "rank": 327, "ok": true, "grade": { "letter": "C", "score": 72 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 90, "notBefore": "2026-08-06T15:54:16.000Z", "notAfter": "2026-11-04T15:54:15.000Z", "daysRemaining": 76, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR2", "findingIds": [ "tls10-accepted", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 484 }, { "domain": "smartadserver.com", "rank": 328, "ok": true, "grade": { "letter": "C", "score": 62 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 90, "notBefore": "2026-07-21T04:57:02.000Z", "notAfter": "2026-10-19T05:50:54.000Z", "daysRemaining": 60, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WR3", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 437 }, { "domain": "un.org", "rank": 329, "ok": true, "grade": { "letter": "C", "score": 72 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "AES256-SHA", "legacyTls": "accepted:TLSv1.1", "lifetimeDays": 366, "notBefore": "2025-09-05T00:00:00.000Z", "notAfter": "2026-09-05T23:59:59.000Z", "daysRemaining": 17, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "COMODO RSA Organization Validation Secure Server CA", "findingIds": [ "tls11-accepted", "no-tls13", "key-rsa-2048", "cert-renewal-window", "pqc-migration-ahead", "chain-complete" ], "durationMs": 1015 }, { "domain": "drom.ru", "rank": 330, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "refused", "lifetimeDays": 397, "notBefore": "2026-01-06T05:35:00.000Z", "notAfter": "2027-02-07T05:34:59.000Z", "daysRemaining": 171, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign RSA OV SSL CA 2018", "findingIds": [ "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "chain-complete" ], "durationMs": 352 }, { "domain": "doubleverify.com", "rank": 331, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-06T11:11:06.000Z", "notAfter": "2026-11-04T11:11:05.000Z", "daysRemaining": 76, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE1", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 166 }, { "domain": "crashlytics.com", "rank": 332, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 84, "notBefore": "2026-08-05T20:45:58.000Z", "notAfter": "2026-10-28T20:45:57.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE2", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 227 }, { "domain": "media.net", "rank": 333, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-08-14T00:00:00.000Z", "notAfter": "2027-02-28T23:59:59.000Z", "daysRemaining": 193, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 653 }, { "domain": "ea.com", "rank": 334, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 397, "notBefore": "2025-11-24T00:00:00.000Z", "notAfter": "2026-12-25T23:59:59.000Z", "daysRemaining": 128, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 222 }, { "domain": "telegram.me", "rank": 335, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 397, "notBefore": "2025-09-19T13:09:49.000Z", "notAfter": "2026-10-21T13:09:49.000Z", "daysRemaining": 62, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Go Daddy Secure Certificate Authority - G2", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 322 }, { "domain": "bilibili.com", "rank": 336, "ok": true, "grade": { "letter": "C", "score": 62 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 397, "notBefore": "2025-11-11T08:11:28.000Z", "notAfter": "2026-12-13T08:11:27.000Z", "daysRemaining": 115, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign RSA OV SSL CA 2018", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "tls13", "chain-complete" ], "durationMs": 2528 }, { "domain": "cdc.gov", "rank": 337, "ok": true, "grade": { "letter": "A", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-04-16T00:00:00.000Z", "notAfter": "2026-10-31T23:59:59.000Z", "daysRemaining": 73, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G3 TLS ECC SHA384 2020 CA1", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 56 }, { "domain": "weebly.com", "rank": 338, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-08T20:20:54.000Z", "notAfter": "2026-11-06T20:20:53.000Z", "daysRemaining": 79, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE2", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 40 }, { "domain": "checkpoint.com", "rank": 339, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-06-17T06:44:08.000Z", "notAfter": "2027-01-02T06:44:08.000Z", "daysRemaining": 135, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign GCC R3 DV TLS CA 2020", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 72 }, { "domain": "name.com", "rank": 340, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-28T11:41:53.000Z", "notAfter": "2026-10-26T12:41:47.000Z", "daysRemaining": 67, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 70 }, { "domain": "inner-active.mobi", "rank": 341, "ok": false, "error": { "code": "timeout", "message": "inner-active.mobi did not complete a TLS handshake within 8 seconds." }, "durationMs": 8043 }, { "domain": "issuu.com", "rank": 342, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 397, "notBefore": "2025-09-03T11:26:04.000Z", "notAfter": "2026-10-05T11:26:03.000Z", "daysRemaining": 46, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign Atlas R3 DV TLS CA 2025 Q3", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 84 }, { "domain": "naver.com", "rank": 343, "ok": true, "grade": { "letter": "C", "score": 75 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 90, "notBefore": "2026-06-20T00:37:09.000Z", "notAfter": "2026-09-18T00:37:08.000Z", "daysRemaining": 29, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE1", "findingIds": [ "tls10-accepted", "cert-renewal-window", "pqc-migration-ahead", "key-modern", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 2373 }, { "domain": "mi.com", "rank": 344, "ok": true, "grade": { "letter": "D", "score": 52 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES256-GCM-SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 396, "notBefore": "2025-10-02T00:00:00.000Z", "notAfter": "2026-11-01T23:59:59.000Z", "daysRemaining": 74, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "RapidSSL TLS RSA CA G1", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "chain-complete" ], "durationMs": 451 }, { "domain": "trustpilot.com", "rank": 345, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "refused", "lifetimeDays": 394, "notBefore": "2025-11-01T00:00:00.000Z", "notAfter": "2026-11-29T23:59:59.000Z", "daysRemaining": 102, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M01", "findingIds": [ "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "chain-complete" ], "durationMs": 239 }, { "domain": "onelink.me", "rank": 346, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 198, "notBefore": "2026-07-21T00:00:00.000Z", "notAfter": "2027-02-03T23:59:59.000Z", "daysRemaining": 168, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M04", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 43 }, { "domain": "2mdn.net", "rank": 347, "ok": false, "error": { "code": "dns-error", "message": "2mdn.net does not resolve in public DNS" }, "durationMs": 68 }, { "domain": "akamaihd.net", "rank": 348, "ok": false, "error": { "code": "dns-error", "message": "akamaihd.net does not resolve in public DNS" }, "durationMs": 30 }, { "domain": "tbcache.com", "rank": 349, "ok": false, "error": { "code": "timeout", "message": "tbcache.com did not complete a TLS handshake within 8 seconds." }, "durationMs": 8283 }, { "domain": "wsj.com", "rank": 350, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 198, "notBefore": "2026-06-05T00:00:00.000Z", "notAfter": "2026-12-19T23:59:59.000Z", "daysRemaining": 122, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M04", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 118 }, { "domain": "ioref.io", "rank": 351, "ok": false, "error": { "code": "dns-error", "message": "ioref.io does not resolve in public DNS" }, "durationMs": 181 }, { "domain": "slack.com", "rank": 352, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-06T09:33:39.000Z", "notAfter": "2026-11-04T09:33:38.000Z", "daysRemaining": 76, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 302 }, { "domain": "allawnos.com", "rank": 353, "ok": false, "error": { "code": "dns-error", "message": "allawnos.com does not resolve in public DNS" }, "durationMs": 16 }, { "domain": "washingtonpost.com", "rank": 354, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 397, "notBefore": "2025-08-12T00:00:00.000Z", "notAfter": "2026-09-12T23:59:59.000Z", "daysRemaining": 24, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Entrust OV TLS Issuing RSA CA 2", "findingIds": [ "key-rsa-2048", "cert-renewal-window", "pqc-migration-ahead", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 103 }, { "domain": "opendns.com", "rank": 355, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES256-GCM-SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-05T22:55:10.000Z", "notAfter": "2026-10-03T22:55:09.000Z", "daysRemaining": 45, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "R13", "findingIds": [ "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "chain-complete" ], "durationMs": 740 }, { "domain": "dotaplabs.net", "rank": 356, "ok": false, "error": { "code": "dns-error", "message": "dotaplabs.net does not resolve in public DNS" }, "durationMs": 1105 }, { "domain": "openx.net", "rank": 357, "ok": true, "grade": { "letter": "C", "score": 72 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 199, "notBefore": "2026-07-18T00:00:00.000Z", "notAfter": "2027-02-01T23:59:59.000Z", "daysRemaining": 166, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "RapidSSL TLS RSA CA G1", "findingIds": [ "tls10-accepted", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "tls13", "chain-complete" ], "durationMs": 258 }, { "domain": "quickconnect.to", "rank": 358, "ok": true, "grade": { "letter": "D", "score": 52 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 397, "notBefore": "2026-01-09T00:00:00.000Z", "notAfter": "2027-02-09T23:59:59.000Z", "daysRemaining": 174, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Sectigo Public Server Authentication CA DV R36", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "chain-complete" ], "durationMs": 466 }, { "domain": "tld-servers.ru", "rank": 359, "ok": false, "error": { "code": "dns-error", "message": "tld-servers.ru does not resolve in public DNS" }, "durationMs": 478 }, { "domain": "bloomberg.com", "rank": 360, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 191, "notBefore": "2026-07-23T00:00:00.000Z", "notAfter": "2027-01-29T23:59:59.000Z", "daysRemaining": 163, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 1063 }, { "domain": "tradingview.com", "rank": 361, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 395, "notBefore": "2025-12-12T00:00:00.000Z", "notAfter": "2027-01-10T23:59:59.000Z", "daysRemaining": 144, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M04", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 50 }, { "domain": "worldnic.com", "rank": 362, "ok": false, "error": { "code": "timeout", "message": "worldnic.com did not complete a TLS handshake within 8 seconds." }, "durationMs": 8064 }, { "domain": "google.cn", "rank": 363, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 84, "notBefore": "2026-08-05T20:45:01.000Z", "notAfter": "2026-10-28T20:45:00.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE2", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 93 }, { "domain": "zendesk.com", "rank": 364, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-06-28T14:46:46.000Z", "notAfter": "2026-09-26T14:46:45.000Z", "daysRemaining": 37, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE1", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 83 }, { "domain": "stanford.edu", "rank": 365, "ok": true, "grade": { "letter": "B", "score": 77 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "AES128-GCM-SHA256", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-04-22T00:00:00.000Z", "notAfter": "2026-11-06T23:59:59.000Z", "daysRemaining": 79, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "InCommon RSA Server CA 2", "findingIds": [ "chain-weak-signature-hash", "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "chain-complete" ], "durationMs": 947 }, { "domain": "trueconf.net", "rank": 366, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 397, "notBefore": "2026-02-05T12:23:48.000Z", "notAfter": "2027-03-09T12:23:47.000Z", "daysRemaining": 201, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign GCC R6 AlphaSSL CA 2025", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 148 }, { "domain": "nominetdns.uk", "rank": 367, "ok": false, "error": { "code": "dns-error", "message": "nominetdns.uk does not resolve in public DNS" }, "durationMs": 168 }, { "domain": "walmart.com", "rank": 368, "ok": true, "grade": { "letter": "A", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-07-27T09:58:01.000Z", "notAfter": "2027-02-11T09:58:01.000Z", "daysRemaining": 175, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign GCC E46 OV TLS CA 2025", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 182 }, { "domain": "calendly.com", "rank": 369, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-05T17:07:34.000Z", "notAfter": "2026-11-03T18:07:21.000Z", "daysRemaining": 75, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 113 }, { "domain": "nvidia.com", "rank": 370, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "refused", "lifetimeDays": 198, "notBefore": "2026-07-17T00:00:00.000Z", "notAfter": "2027-01-30T23:59:59.000Z", "daysRemaining": 164, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M01", "findingIds": [ "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "chain-complete" ], "durationMs": 624 }, { "domain": "dropcatch.com", "rank": 371, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-19T04:31:28.000Z", "notAfter": "2026-10-17T05:31:09.000Z", "daysRemaining": 58, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 134 }, { "domain": "enacdn.net", "rank": 372, "ok": false, "error": { "code": "dns-error", "message": "enacdn.net does not resolve in public DNS" }, "durationMs": 107 }, { "domain": "samsungcloudsolution.com", "rank": 373, "ok": false, "error": { "code": "dns-error", "message": "samsungcloudsolution.com does not resolve in public DNS" }, "durationMs": 107 }, { "domain": "plesk.com", "rank": 374, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-06-24T09:18:09.000Z", "notAfter": "2026-09-22T10:17:53.000Z", "daysRemaining": 33, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 144 }, { "domain": "ip-api.com", "rank": 375, "ok": true, "grade": { "letter": "D", "score": 52 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "AES256-SHA", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 397, "notBefore": "2026-02-06T00:00:00.000Z", "notAfter": "2027-03-09T23:59:59.000Z", "daysRemaining": 202, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Sectigo Public Server Authentication CA DV R36", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "chain-complete" ], "durationMs": 1567 }, { "domain": "cookiedatabase.org", "rank": 376, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-10T07:30:44.000Z", "notAfter": "2026-11-08T07:30:43.000Z", "daysRemaining": 80, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE1", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 187 }, { "domain": "selectel.ru", "rank": 377, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES256-GCM-SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-19T21:30:25.000Z", "notAfter": "2026-10-17T21:30:24.000Z", "daysRemaining": 59, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR1", "findingIds": [ "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "chain-complete" ], "durationMs": 157 }, { "domain": "xboxlive.com", "rank": 378, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 100, "notBefore": "2026-07-27T09:42:50.000Z", "notAfter": "2026-11-04T08:42:50.000Z", "daysRemaining": 76, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha384WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Microsoft TLS G2 RSA CA OCSP 04", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 653 }, { "domain": "ezvizlife.com", "rank": 379, "ok": true, "grade": { "letter": "F", "score": 0 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 365, "notBefore": "2024-05-08T07:08:46.000Z", "notAfter": "2025-05-08T07:08:45.000Z", "daysRemaining": -469, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Entrust Certification Authority - L1K", "findingIds": [ "cert-expired", "tls10-accepted", "chain-weak-signature-hash", "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "chain-complete" ], "durationMs": 425 }, { "domain": "amazon.de", "rank": 380, "ok": true, "grade": { "letter": "C", "score": 72 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 198, "notBefore": "2026-05-05T00:00:00.000Z", "notAfter": "2026-11-18T23:59:59.000Z", "daysRemaining": 91, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GeoTrust TLS RSA CA G1", "findingIds": [ "tls10-accepted", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "tls13", "chain-complete" ], "durationMs": 392 }, { "domain": "indeed.com", "rank": 381, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-21T21:04:27.000Z", "notAfter": "2026-10-19T22:04:24.000Z", "daysRemaining": 61, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 53 }, { "domain": "cdnbuild.net", "rank": 382, "ok": false, "error": { "code": "dns-error", "message": "cdnbuild.net does not resolve in public DNS" }, "durationMs": 59 }, { "domain": "rocket-cdn.com", "rank": 383, "ok": false, "error": { "code": "dns-error", "message": "rocket-cdn.com does not resolve in public DNS" }, "durationMs": 229 }, { "domain": "amazontrust.com", "rank": 384, "ok": true, "grade": { "letter": "C", "score": 72 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 198, "notBefore": "2026-07-24T00:00:00.000Z", "notAfter": "2027-02-06T23:59:59.000Z", "daysRemaining": 171, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M04", "findingIds": [ "tls10-accepted", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "tls13", "chain-complete" ], "durationMs": 125 }, { "domain": "live-video.net", "rank": 385, "ok": false, "error": { "code": "dns-error", "message": "live-video.net does not resolve in public DNS" }, "durationMs": 16 }, { "domain": "bluehost.com", "rank": 386, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-26T03:48:12.000Z", "notAfter": "2026-10-24T04:48:09.000Z", "daysRemaining": 65, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 34 }, { "domain": "tp-link.com", "rank": 387, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 198, "notBefore": "2026-06-19T00:00:00.000Z", "notAfter": "2027-01-02T23:59:59.000Z", "daysRemaining": 136, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M01", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 54 }, { "domain": "gitlab.com", "rank": 388, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-04-26T00:00:00.000Z", "notAfter": "2026-11-10T23:59:59.000Z", "daysRemaining": 83, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Sectigo Public Server Authentication CA DV R36", "findingIds": [ "chain-weak-signature-hash", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 51 }, { "domain": "nasa.gov", "rank": 389, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-11T23:22:59.000Z", "notAfter": "2026-11-09T23:22:58.000Z", "daysRemaining": 82, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE2", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 75 }, { "domain": "kwai-pro.com", "rank": 390, "ok": false, "error": { "code": "dns-error", "message": "kwai-pro.com does not resolve in public DNS" }, "durationMs": 51 }, { "domain": "demdex.net", "rank": 391, "ok": false, "error": { "code": "dns-error", "message": "demdex.net does not resolve in public DNS" }, "durationMs": 70 }, { "domain": "bsky.app", "rank": 392, "ok": true, "grade": { "letter": "C", "score": 62 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 395, "notBefore": "2026-01-14T00:00:00.000Z", "notAfter": "2027-02-12T23:59:59.000Z", "daysRemaining": 177, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M04", "findingIds": [ "tls10-accepted", "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "chain-complete" ], "durationMs": 1162 }, { "domain": "capcutapi.com", "rank": 393, "ok": false, "error": { "code": "dns-error", "message": "capcutapi.com does not resolve in public DNS" }, "durationMs": 15 }, { "domain": "yandex.com", "rank": 394, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 181, "notBefore": "2026-07-01T14:54:10.000Z", "notAfter": "2026-12-29T20:59:59.000Z", "daysRemaining": 132, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign ECC OV SSL CA 2018", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 210 }, { "domain": "ibyteimg.com", "rank": 395, "ok": false, "error": { "code": "dns-error", "message": "ibyteimg.com does not resolve in public DNS" }, "durationMs": 18 }, { "domain": "163.com", "rank": 396, "ok": true, "grade": { "letter": "D", "score": 52 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 199, "notBefore": "2026-04-09T00:00:00.000Z", "notAfter": "2026-10-24T23:59:59.000Z", "daysRemaining": 66, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "chain-complete" ], "durationMs": 2252 }, { "domain": "tiktokv.us", "rank": 397, "ok": false, "error": { "code": "dns-error", "message": "tiktokv.us does not resolve in public DNS" }, "durationMs": 32 }, { "domain": "unsplash.com", "rank": 398, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "refused", "lifetimeDays": 397, "notBefore": "2025-12-08T18:00:14.000Z", "notAfter": "2027-01-09T18:00:13.000Z", "daysRemaining": 142, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign Atlas R3 DV TLS CA 2025 Q4", "findingIds": [ "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "chain-complete" ], "durationMs": 95 }, { "domain": "aliexpress.com", "rank": 399, "ok": true, "grade": { "letter": "B", "score": 80 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.2", "cipher": "ECDHE-ECDSA-AES128-GCM-SHA256", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-05-18T11:22:02.000Z", "notAfter": "2026-12-03T11:16:15.000Z", "daysRemaining": 105, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign GCC R3 OV TLS CA 2024", "findingIds": [ "chain-weak-signature-hash", "no-tls13", "pqc-migration-ahead", "key-modern", "cert-valid", "legacy-tls-refused", "chain-complete" ], "durationMs": 958 }, { "domain": "vivoglobal.com", "rank": 400, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.2", "cipher": "ECDHE-ECDSA-AES256-GCM-SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 396, "notBefore": "2025-10-10T00:00:00.000Z", "notAfter": "2026-11-09T23:59:59.000Z", "daysRemaining": 82, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1", "findingIds": [ "tls10-accepted", "no-tls13", "pqc-migration-ahead", "key-modern", "cert-valid", "chain-complete" ], "durationMs": 1759 }, { "domain": "volcfcdndvs.com", "rank": 401, "ok": false, "error": { "code": "dns-error", "message": "volcfcdndvs.com does not resolve in public DNS" }, "durationMs": 41 }, { "domain": "kaspersky-labs.com", "rank": 402, "ok": false, "error": { "code": "private-address", "message": "kaspersky-labs.com resolves to 127.0.0.1, which is in loopback (127.0.0.0/8) address space" }, "durationMs": 116 }, { "domain": "netangels.ru", "rank": 403, "ok": true, "grade": { "letter": "C", "score": 72 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 90, "notBefore": "2026-06-05T21:57:25.000Z", "notAfter": "2026-09-03T21:57:24.000Z", "daysRemaining": 15, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR2", "findingIds": [ "tls10-accepted", "key-rsa-2048", "cert-renewal-window", "pqc-migration-ahead", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 198 }, { "domain": "heytapdl.com", "rank": 404, "ok": false, "error": { "code": "dns-error", "message": "heytapdl.com does not resolve in public DNS" }, "durationMs": 118 }, { "domain": "awswaf.com", "rank": 405, "ok": false, "error": { "code": "dns-error", "message": "awswaf.com does not resolve in public DNS" }, "durationMs": 131 }, { "domain": "dailymotion.com", "rank": 406, "ok": true, "grade": { "letter": "C", "score": 72 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 91, "notBefore": "2026-07-27T00:00:00.000Z", "notAfter": "2026-10-25T23:59:59.000Z", "daysRemaining": 67, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "ZeroSSL RSA DV SSL CA 2", "findingIds": [ "tls10-accepted", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "tls13", "chain-complete" ], "durationMs": 538 }, { "domain": "line.me", "rank": 407, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 397, "notBefore": "2025-08-10T01:06:03.000Z", "notAfter": "2026-09-11T01:06:02.000Z", "daysRemaining": 22, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign RSA OV SSL CA 2018", "findingIds": [ "key-rsa-2048", "cert-renewal-window", "pqc-migration-ahead", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 1560 }, { "domain": "tiktokv.eu", "rank": 408, "ok": false, "error": { "code": "dns-error", "message": "tiktokv.eu does not resolve in public DNS" }, "durationMs": 176 }, { "domain": "shiabank.com", "rank": 409, "ok": false, "error": { "code": "timeout", "message": "shiabank.com did not complete a TLS handshake within 8 seconds." }, "durationMs": 9450 }, { "domain": "casalemedia.com", "rank": 410, "ok": true, "grade": { "letter": "C", "score": 75 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 90, "notBefore": "2026-07-24T16:04:22.000Z", "notAfter": "2026-10-22T16:04:21.000Z", "daysRemaining": 63, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE2", "findingIds": [ "tls10-accepted", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 53 }, { "domain": "globo.com", "rank": 411, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-03T05:10:47.000Z", "notAfter": "2026-10-01T05:10:46.000Z", "daysRemaining": 42, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR2", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 1254 }, { "domain": "temu.com", "rank": 412, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 198, "notBefore": "2026-07-15T07:22:32.000Z", "notAfter": "2027-01-29T07:22:32.000Z", "daysRemaining": 162, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GoDaddy TLS Intermediate CA DV - R1v1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 320 }, { "domain": "huawei.com", "rank": 413, "ok": true, "grade": { "letter": "C", "score": 62 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "AES256-SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 199, "notBefore": "2026-05-12T10:04:06.000Z", "notAfter": "2026-11-27T08:01:06.000Z", "daysRemaining": 99, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Actalis Organization Validated TLS Server RSA CA 2025", "findingIds": [ "tls10-accepted", "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "chain-complete" ], "durationMs": 2906 }, { "domain": "tiktokcdn-eu.com", "rank": 414, "ok": false, "error": { "code": "dns-error", "message": "tiktokcdn-eu.com does not resolve in public DNS" }, "durationMs": 548 }, { "domain": "amazonalexa.com", "rank": 415, "ok": true, "grade": { "letter": "C", "score": 62 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 198, "notBefore": "2026-08-20T00:00:00.000Z", "notAfter": "2027-03-05T23:59:59.000Z", "daysRemaining": 198, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M04", "findingIds": [ "tls10-accepted", "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "chain-complete" ], "durationMs": 1607 }, { "domain": "beian.gov.cn", "rank": 416, "ok": false, "error": { "code": "dns-error", "message": "beian.gov.cn does not resolve in public DNS" }, "durationMs": 925 }, { "domain": "dnspod.net", "rank": 417, "ok": false, "error": { "code": "timeout", "message": "dnspod.net did not complete a TLS handshake within 8 seconds." }, "durationMs": 8075 }, { "domain": "pangle.io", "rank": 418, "ok": false, "error": { "code": "dns-error", "message": "pangle.io does not resolve in public DNS" }, "durationMs": 13 }, { "domain": "brave.com", "rank": 419, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 395, "notBefore": "2025-09-20T00:00:00.000Z", "notAfter": "2026-10-19T23:59:59.000Z", "daysRemaining": 61, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M04", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 104 }, { "domain": "avcdn.net", "rank": 420, "ok": false, "error": { "code": "dns-error", "message": "avcdn.net does not resolve in public DNS" }, "durationMs": 74 }, { "domain": "taobao.com", "rank": 421, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 199, "notBefore": "2026-05-07T02:46:14.000Z", "notAfter": "2026-11-22T02:46:14.000Z", "daysRemaining": 94, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign GCC R3 OV TLS CA 2024", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "tls13", "chain-complete" ], "durationMs": 2393 }, { "domain": "steamcommunity.com", "rank": 422, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-14T22:11:52.000Z", "notAfter": "2026-10-12T22:11:51.000Z", "daysRemaining": 54, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 134 }, { "domain": "expireddomains.com", "rank": 423, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-02T08:29:59.000Z", "notAfter": "2026-09-30T09:29:48.000Z", "daysRemaining": 41, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 111 }, { "domain": "nic.direct", "rank": 424, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 374, "notBefore": "2025-10-01T00:00:00.000Z", "notAfter": "2026-10-09T23:59:59.000Z", "daysRemaining": 51, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Sectigo Public Server Authentication CA DV R36", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 1313 }, { "domain": "nflxvideo.net", "rank": 425, "ok": false, "error": { "code": "tls-error", "message": "The TLS handshake with nflxvideo.net failed: 802122FB01000000:error:0A000438:SSL routines:ssl3_read_bytes:tlsv1 alert internal error:ssl/record/rec_layer_s3.c:918:SSL alert number 80\n." }, "durationMs": 377 }, { "domain": "kwaipros.com", "rank": 426, "ok": false, "error": { "code": "dns-error", "message": "kwaipros.com does not resolve in public DNS" }, "durationMs": 51 }, { "domain": "mynetname.net", "rank": 427, "ok": false, "error": { "code": "dns-error", "message": "mynetname.net does not resolve in public DNS" }, "durationMs": 31 }, { "domain": "businessinsider.com", "rank": 428, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "refused", "lifetimeDays": 397, "notBefore": "2026-02-11T19:00:25.000Z", "notAfter": "2027-03-15T19:00:24.000Z", "daysRemaining": 208, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign Atlas R3 DV TLS CA 2026 Q1", "findingIds": [ "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "chain-complete" ], "durationMs": 95 }, { "domain": "avsxappcaptiveportal.com", "rank": 429, "ok": false, "error": { "code": "timeout", "message": "avsxappcaptiveportal.com did not complete a TLS handshake within 8 seconds." }, "durationMs": 8049 }, { "domain": "yandexcloud.net", "rank": 430, "ok": false, "error": { "code": "dns-error", "message": "yandexcloud.net does not resolve in public DNS" }, "durationMs": 99 }, { "domain": "online-metrix.net", "rank": 431, "ok": false, "error": { "code": "dns-error", "message": "online-metrix.net does not resolve in public DNS" }, "durationMs": 60 }, { "domain": "vkontakte.ru", "rank": 432, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-16T07:06:01.000Z", "notAfter": "2026-10-14T07:06:00.000Z", "daysRemaining": 55, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 132 }, { "domain": "vkuser.net", "rank": 433, "ok": false, "error": { "code": "timeout", "message": "vkuser.net did not complete a TLS handshake within 8 seconds." }, "durationMs": 8024 }, { "domain": "gandi-ns.fr", "rank": 434, "ok": false, "error": { "code": "dns-error", "message": "gandi-ns.fr does not resolve in public DNS" }, "durationMs": 81 }, { "domain": "wp.com", "rank": 435, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-01T19:44:46.000Z", "notAfter": "2026-10-30T19:44:45.000Z", "daysRemaining": 72, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE2", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 74 }, { "domain": "espn.com", "rank": 436, "ok": true, "grade": { "letter": "C", "score": 72 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 366, "notBefore": "2025-11-10T00:00:00.000Z", "notAfter": "2026-11-10T23:59:59.000Z", "daysRemaining": 83, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Sectigo Public Server Authentication CA OV R36", "findingIds": [ "tls10-accepted", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "tls13", "chain-complete" ], "durationMs": 109 }, { "domain": "sohu.com", "rank": 437, "ok": true, "grade": { "letter": "C", "score": 72 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 199, "notBefore": "2026-07-14T00:00:00.000Z", "notAfter": "2027-01-28T23:59:59.000Z", "daysRemaining": 162, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1", "findingIds": [ "tls10-accepted", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "tls13", "chain-complete" ], "durationMs": 2422 }, { "domain": "wbx2.com", "rank": 438, "ok": false, "error": { "code": "timeout", "message": "wbx2.com did not complete a TLS handshake within 8 seconds." }, "durationMs": 8092 }, { "domain": "dell.com", "rank": 439, "ok": true, "grade": { "letter": "C", "score": 62 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 199, "notBefore": "2026-08-13T00:00:00.000Z", "notAfter": "2027-02-27T23:59:59.000Z", "daysRemaining": 192, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "tls10-accepted", "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "chain-complete" ], "durationMs": 1547 }, { "domain": "claude.ai", "rank": 440, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-13T14:57:06.000Z", "notAfter": "2026-10-11T14:57:05.000Z", "daysRemaining": 52, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE1", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 134 }, { "domain": "substack.com", "rank": 441, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-22T09:54:58.000Z", "notAfter": "2026-10-20T10:54:53.000Z", "daysRemaining": 61, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 33 }, { "domain": "intel.com", "rank": 442, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 91, "notBefore": "2026-07-01T00:00:00.000Z", "notAfter": "2026-09-29T23:59:59.000Z", "daysRemaining": 41, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Sectigo Public Server Authentication CA OV R36", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 857 }, { "domain": "pixabay.com", "rank": 443, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-14T02:44:49.000Z", "notAfter": "2026-10-12T03:44:46.000Z", "daysRemaining": 53, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 38 }, { "domain": "g.page", "rank": 444, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 84, "notBefore": "2026-08-05T20:43:13.000Z", "notAfter": "2026-10-28T20:43:12.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE2", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 227 }, { "domain": "ipinfo.io", "rank": 445, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-01T14:39:08.000Z", "notAfter": "2026-10-30T14:39:07.000Z", "daysRemaining": 71, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR2", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 207 }, { "domain": "yahoo.co.jp", "rank": 446, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 198, "notBefore": "2026-08-07T06:04:45.000Z", "notAfter": "2027-02-21T14:59:00.000Z", "daysRemaining": 185, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Cybertrust Japan SureServer CA G4", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 1677 }, { "domain": "netease.com", "rank": 447, "ok": true, "grade": { "letter": "D", "score": 52 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 395, "notBefore": "2026-01-04T01:55:46.000Z", "notAfter": "2027-02-03T01:55:45.000Z", "daysRemaining": 167, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "vTrus OV SSL CA G2", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "chain-complete" ], "durationMs": 2724 }, { "domain": "ivi.ru", "rank": 448, "ok": true, "grade": { "letter": "C", "score": 72 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 397, "notBefore": "2026-02-02T11:49:27.000Z", "notAfter": "2027-03-06T11:49:26.000Z", "daysRemaining": 198, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign GCC R3 DV TLS CA 2020", "findingIds": [ "tls10-accepted", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "tls13", "chain-complete" ], "durationMs": 833 }, { "domain": "goodreads.com", "rank": 449, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 198, "notBefore": "2026-07-18T00:00:00.000Z", "notAfter": "2027-01-31T23:59:59.000Z", "daysRemaining": 165, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M04", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 482 }, { "domain": "go.com", "rank": 450, "ok": true, "grade": { "letter": "C", "score": 67 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "refused", "lifetimeDays": 366, "notBefore": "2025-08-28T00:00:00.000Z", "notAfter": "2026-08-28T23:59:59.000Z", "daysRemaining": 9, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Sectigo Public Server Authentication CA OV R36", "findingIds": [ "cert-expiring-soon", "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "legacy-tls-refused", "chain-complete" ], "durationMs": 593 }, { "domain": "sina.com.cn", "rank": 451, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 394, "notBefore": "2025-12-02T00:00:00.000Z", "notAfter": "2026-12-30T23:59:59.000Z", "daysRemaining": 133, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GeoTrust G2 TLS CN RSA4096 SHA256 2022 CA1", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "tls13", "chain-complete" ], "durationMs": 3063 }, { "domain": "speedtest.net", "rank": 452, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 397, "notBefore": "2025-10-07T15:05:02.000Z", "notAfter": "2026-11-08T15:05:01.000Z", "daysRemaining": 80, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign Atlas R3 DV TLS CA 2025 Q3", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 60 }, { "domain": "cnbc.com", "rank": 453, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 198, "notBefore": "2026-07-28T00:00:00.000Z", "notAfter": "2027-02-10T23:59:59.000Z", "daysRemaining": 175, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M01", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 506 }, { "domain": "list-manage.com", "rank": 454, "ok": false, "error": { "code": "timeout", "message": "list-manage.com did not complete a TLS handshake within 8 seconds." }, "durationMs": 8053 }, { "domain": "cloudns.net", "rank": 455, "ok": true, "grade": { "letter": "A", "score": 100 }, "keyFamily": "rsa", "keyLabel": "RSA-4096", "keyCurve": null, "keyBits": 4096, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 395, "notBefore": "2025-09-30T00:00:00.000Z", "notAfter": "2026-10-29T23:59:59.000Z", "daysRemaining": 71, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Sectigo Public Server Authentication CA DV R36", "findingIds": [ "pqc-migration-ahead", "key-rsa-large", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 340 }, { "domain": "spaceweb.pro", "rank": 456, "ok": false, "error": { "code": "timeout", "message": "spaceweb.pro did not complete a TLS handshake within 8 seconds." }, "durationMs": 8205 }, { "domain": "statista.com", "rank": 457, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 198, "notBefore": "2026-05-12T00:00:00.000Z", "notAfter": "2026-11-25T23:59:59.000Z", "daysRemaining": 98, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M04", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 77 }, { "domain": "skyhigh.cloud", "rank": 458, "ok": true, "grade": { "letter": "A", "score": 100 }, "keyFamily": "rsa", "keyLabel": "RSA-4096", "keyCurve": null, "keyBits": 4096, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 366, "notBefore": "2026-01-28T00:00:00.000Z", "notAfter": "2027-01-28T23:59:59.000Z", "daysRemaining": 162, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Sectigo Public Server Authentication CA OV R36", "findingIds": [ "pqc-migration-ahead", "key-rsa-large", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 186 }, { "domain": "mikrotik.com", "rank": 459, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 397, "notBefore": "2026-01-05T00:00:00.000Z", "notAfter": "2027-02-05T23:59:59.000Z", "daysRemaining": 170, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert EV RSA CA G2", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 124 }, { "domain": "att.com", "rank": 460, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "refused", "lifetimeDays": 397, "notBefore": "2026-02-20T00:00:00.000Z", "notAfter": "2027-03-23T23:59:59.000Z", "daysRemaining": 216, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "chain-complete" ], "durationMs": 958 }, { "domain": "dual-s-msedge.net", "rank": 461, "ok": false, "error": { "code": "dns-error", "message": "dual-s-msedge.net does not resolve in public DNS" }, "durationMs": 77 }, { "domain": "awsglobalaccelerator.com", "rank": 462, "ok": false, "error": { "code": "dns-error", "message": "awsglobalaccelerator.com does not resolve in public DNS" }, "durationMs": 94 }, { "domain": "ipify.org", "rank": 463, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-06-28T02:07:47.000Z", "notAfter": "2026-09-26T03:07:45.000Z", "daysRemaining": 37, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 112 }, { "domain": "featureassets.org", "rank": 464, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-11T04:16:34.000Z", "notAfter": "2026-11-09T04:16:33.000Z", "daysRemaining": 81, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR2", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 127 }, { "domain": "ietf.org", "rank": 465, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-15T20:17:11.000Z", "notAfter": "2026-11-13T21:17:08.000Z", "daysRemaining": 86, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 49 }, { "domain": "gamepass.com", "rank": 466, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 100, "notBefore": "2026-07-27T09:42:50.000Z", "notAfter": "2026-11-04T08:42:50.000Z", "daysRemaining": 76, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha384WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Microsoft TLS G2 RSA CA OCSP 04", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 3056 }, { "domain": "eye4.cn", "rank": 467, "ok": true, "grade": { "letter": "F", "score": 12 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1", "lifetimeDays": 393, "notBefore": "2025-01-09T00:00:00.000Z", "notAfter": "2026-02-05T23:59:59.000Z", "daysRemaining": -195, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "RapidSSL TLS RSA CA G1", "findingIds": [ "cert-expired", "chain-weak-signature-hash", "tls11-accepted", "key-rsa-2048", "pqc-migration-ahead", "tls13", "chain-complete" ], "durationMs": 1939 }, { "domain": "nflximg.com", "rank": 468, "ok": false, "error": { "code": "timeout", "message": "nflximg.com did not complete a TLS handshake within 8 seconds." }, "durationMs": 8045 }, { "domain": "squarespacedns.com", "rank": 469, "ok": false, "error": { "code": "dns-error", "message": "squarespacedns.com does not resolve in public DNS" }, "durationMs": 91 }, { "domain": "kwai.net", "rank": 470, "ok": false, "error": { "code": "timeout", "message": "kwai.net did not complete a TLS handshake within 8 seconds." }, "durationMs": 8092 }, { "domain": "firetvcaptiveportal.com", "rank": 471, "ok": false, "error": { "code": "timeout", "message": "firetvcaptiveportal.com did not complete a TLS handshake within 8 seconds." }, "durationMs": 8100 }, { "domain": "xcal.tv", "rank": 472, "ok": false, "error": { "code": "dns-error", "message": "xcal.tv does not resolve in public DNS" }, "durationMs": 227 }, { "domain": "addtoany.com", "rank": 473, "ok": true, "grade": { "letter": "A", "score": 90 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-11T00:08:05.000Z", "notAfter": "2026-11-09T01:07:47.000Z", "daysRemaining": 81, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE1", "findingIds": [ "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 73 }, { "domain": "arxiv.org", "rank": 474, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 30, "notBefore": "2026-08-06T03:36:52.000Z", "notAfter": "2026-09-05T03:36:51.000Z", "daysRemaining": 16, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Certainly Intermediate R1", "findingIds": [ "key-rsa-2048", "cert-renewal-window", "pqc-migration-ahead", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 54 }, { "domain": "edgecdn.ru", "rank": 475, "ok": false, "error": { "code": "tls-error", "message": "The TLS handshake with edgecdn.ru failed: 802122FB01000000:error:0A000438:SSL routines:ssl3_read_bytes:tlsv1 alert internal error:ssl/record/rec_layer_s3.c:918:SSL alert number 80\n." }, "durationMs": 63 }, { "domain": "paloaltonetworks.com", "rank": 476, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-05-03T00:00:00.000Z", "notAfter": "2026-11-17T23:59:59.000Z", "daysRemaining": 90, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 78 }, { "domain": "adriver.ru", "rank": 477, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-04-03T07:11:20.000Z", "notAfter": "2026-10-19T07:11:20.000Z", "daysRemaining": 60, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign GCC R3 DV TLS CA 2020", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 4078 }, { "domain": "sc-gw.com", "rank": 478, "ok": false, "error": { "code": "dns-error", "message": "sc-gw.com does not resolve in public DNS" }, "durationMs": 54 }, { "domain": "quora.com", "rank": 479, "ok": true, "grade": { "letter": "B", "score": 77 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-29T06:08:46.000Z", "notAfter": "2026-10-27T06:08:45.000Z", "daysRemaining": 68, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WR1", "findingIds": [ "chain-weak-signature-hash", "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "chain-complete" ], "durationMs": 688 }, { "domain": "adobe.net", "rank": 480, "ok": true, "grade": { "letter": "C", "score": 62 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 397, "notBefore": "2025-11-05T00:00:00.000Z", "notAfter": "2026-12-06T23:59:59.000Z", "daysRemaining": 109, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "tls10-accepted", "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "chain-complete" ], "durationMs": 505 }, { "domain": "duolingo.com", "rank": 481, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "refused", "lifetimeDays": 395, "notBefore": "2025-11-25T00:00:00.000Z", "notAfter": "2026-12-24T23:59:59.000Z", "daysRemaining": 127, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M01", "findingIds": [ "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "chain-complete" ], "durationMs": 620 }, { "domain": "npr.org", "rank": 482, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 395, "notBefore": "2026-01-31T00:00:00.000Z", "notAfter": "2027-03-01T23:59:59.000Z", "daysRemaining": 194, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M01", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 44 }, { "domain": "docker.com", "rank": 483, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-30T10:32:24.000Z", "notAfter": "2026-10-28T10:32:23.000Z", "daysRemaining": 69, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR1", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 99 }, { "domain": "timeweb.ru", "rank": 484, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-06-17T11:51:01.000Z", "notAfter": "2027-01-02T11:51:01.000Z", "daysRemaining": 135, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign GCC R3 DV TLS CA 2020", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 450 }, { "domain": "myqcloud.com", "rank": 485, "ok": false, "error": { "code": "private-address", "message": "myqcloud.com resolves to 0.0.0.1, which is in \"this network\" (0.0.0.0/8) address space" }, "durationMs": 210 }, { "domain": "nease.net", "rank": 486, "ok": false, "error": { "code": "timeout", "message": "nease.net did not complete a TLS handshake within 8 seconds." }, "durationMs": 8149 }, { "domain": "mysql.com", "rank": 487, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.2", "cipher": "ECDHE-RSA-AES128-GCM-SHA256", "legacyTls": "refused", "lifetimeDays": 199, "notBefore": "2026-06-04T00:00:00.000Z", "notAfter": "2026-12-19T23:59:59.000Z", "daysRemaining": 122, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Global G2 TLS RSA SHA256 2020 CA1", "findingIds": [ "no-tls13", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "chain-complete" ], "durationMs": 1135 }, { "domain": "ui-dns.com", "rank": 488, "ok": false, "error": { "code": "dns-error", "message": "ui-dns.com does not resolve in public DNS" }, "durationMs": 247 }, { "domain": "chinamobile.com", "rank": 489, "ok": false, "error": { "code": "timeout", "message": "chinamobile.com did not complete a TLS handshake within 8 seconds." }, "durationMs": 8287 }, { "domain": "eventbrite.com", "rank": 490, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 198, "notBefore": "2026-06-13T00:00:00.000Z", "notAfter": "2026-12-27T23:59:59.000Z", "daysRemaining": 130, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M04", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 61 }, { "domain": "stackoverflow.com", "rank": 491, "ok": true, "grade": { "letter": "A+", "score": 100 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-15T12:39:06.000Z", "notAfter": "2026-11-13T12:39:05.000Z", "daysRemaining": 85, "chainComplete": true, "chainLength": 5, "signatureAlgorithm": "ecdsa-with-SHA384", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YE1", "findingIds": [ "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 68 }, { "domain": "amazon.co.jp", "rank": 492, "ok": true, "grade": { "letter": "C", "score": 72 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 198, "notBefore": "2026-05-05T00:00:00.000Z", "notAfter": "2026-11-18T23:59:59.000Z", "daysRemaining": 91, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GeoTrust TLS RSA CA G1", "findingIds": [ "tls10-accepted", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "tls13", "chain-complete" ], "durationMs": 1538 }, { "domain": "scribd.com", "rank": 493, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-06-27T17:48:11.000Z", "notAfter": "2026-09-25T17:48:10.000Z", "daysRemaining": 36, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR2", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 116 }, { "domain": "exp-tas.com", "rank": 494, "ok": false, "error": { "code": "dns-error", "message": "exp-tas.com does not resolve in public DNS" }, "durationMs": 93 }, { "domain": "ampproject.org", "rank": 495, "ok": true, "grade": { "letter": "C", "score": 65 }, "keyFamily": "ecdsa", "keyLabel": "ECDSA P-256", "keyCurve": "P-256", "keyBits": null, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 84, "notBefore": "2026-08-05T20:43:13.000Z", "notAfter": "2026-10-28T20:43:12.000Z", "daysRemaining": 70, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "ecdsa-with-SHA256", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "WE2", "findingIds": [ "tls10-accepted", "chain-weak-signature-hash", "pqc-migration-ahead", "key-modern", "cert-valid", "cert-short-lifetime", "tls13", "chain-complete" ], "durationMs": 185 }, { "domain": "ngenix.net", "rank": 496, "ok": true, "grade": { "letter": "C", "score": 72 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "accepted:TLSv1.1,TLSv1", "lifetimeDays": 199, "notBefore": "2026-04-22T09:27:05.000Z", "notAfter": "2026-11-07T09:08:22.000Z", "daysRemaining": 79, "chainComplete": true, "chainLength": 3, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "GlobalSign GCC R3 DV TLS CA 2020", "findingIds": [ "tls10-accepted", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "tls13", "chain-complete" ], "durationMs": 385 }, { "domain": "beyondwickedmapping.org", "rank": 497, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_256_GCM_SHA384", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-08-19T08:37:33.000Z", "notAfter": "2026-11-17T08:37:32.000Z", "daysRemaining": 89, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR2", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 42 }, { "domain": "aol.com", "rank": 498, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 198, "notBefore": "2026-05-26T00:00:00.000Z", "notAfter": "2026-12-09T23:59:59.000Z", "daysRemaining": 112, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "Amazon RSA 2048 M01", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 539 }, { "domain": "behance.net", "rank": 499, "ok": true, "grade": { "letter": "A", "score": 97 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 90, "notBefore": "2026-07-07T01:08:24.000Z", "notAfter": "2026-10-05T01:08:23.000Z", "daysRemaining": 46, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "YR2", "findingIds": [ "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "cert-short-lifetime", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 68 }, { "domain": "shein.com", "rank": 500, "ok": true, "grade": { "letter": "B", "score": 87 }, "keyFamily": "rsa", "keyLabel": "RSA-2048", "keyCurve": null, "keyBits": 2048, "protocol": "TLSv1.3", "cipher": "TLS_AES_128_GCM_SHA256", "legacyTls": "refused", "lifetimeDays": 185, "notBefore": "2026-07-21T00:00:00.000Z", "notAfter": "2027-01-21T23:59:59.000Z", "daysRemaining": 155, "chainComplete": true, "chainLength": 4, "signatureAlgorithm": "sha256WithRSAEncryption", "weakSignatureHash": null, "signaturePqc": false, "issuerCommonName": "DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1", "findingIds": [ "chain-weak-signature-hash", "key-rsa-2048", "pqc-migration-ahead", "cert-valid", "legacy-tls-refused", "tls13", "chain-complete" ], "durationMs": 803 } ]