签名健康检查
正在连接 443 端口、读取证书链、探测协议版本…
签名健康检查
正在连接 443 端口、读取证书链、探测协议版本…
签名健康检查
RSA-2048 (≈112-bit classical security) is still fine today. At the same security level, ECDSA P-256 or Ed25519 keys and signatures are several times smaller and the handshake cheaper — worth considering at the next renewal.
RSA-2048 is a sound choice today. It is, however, quantum-vulnerable: NIST IR 8547 (draft) plans to disallow classical signature algorithms — ECDSA, EdDSA and RSA — after 2035, and this key sits at the 112-bit security level that the same draft deprecates one step earlier, after 2030. No penalty and no emergency — but certificate rotation is the easy part; knowing everywhere else your systems sign is the real migration work.
Valid until 2027-01-12 — 77 days remaining.
Handshakes capped at TLS 1.1 were rejected — the deprecated protocol versions are switched off.
The handshake settled on TLS 1.3 with TLS_AES_128_GCM_SHA256 — the current protocol generation, with a cleaner handshake and only AEAD ciphers.
Every issuer → subject link matches and the chain ends at a self-signed root (chain as served).
在该域名的证书到期前 30、14、7、3 和 1 天发送免费邮件提醒。双重确认：你确认之前不会发送任何邮件，且每封邮件都附有退订链接。你的地址只为这一用途保存。
我们如何处理你的地址，请参阅《隐私政策》。
此检测由我们的服务器执行：URL 中的域名会发送到 ecdsa.com，我们会连接该域名的 443 端口。除此之外不收集任何信息。证书链完全按服务器发送的内容评估——本报告描述的是配置情况，不会针对任何浏览器信任库执行完整的路径验证。