签名健康检查
正在连接 443 端口、读取证书链、探测协议版本…
签名健康检查
正在连接 443 端口、读取证书链、探测协议版本…
签名健康检查
ECDSA P-256 is a sound choice today. It is, however, quantum-vulnerable: NIST IR 8547 (draft) plans to disallow classical signature algorithms — ECDSA, EdDSA and RSA — after 2035; at this key size there is no earlier 2030 milestone — that step covers only 112-bit parameter sets such as RSA-2048. No penalty and no emergency — but certificate rotation is the easy part; knowing everywhere else your systems sign is the real migration work.
ECDSA P-256 gives compact keys and signatures at full strength — the current best practice for TLS server certificates.
Valid until 2027-02-11 — 107 days remaining.
Handshakes capped at TLS 1.1 were rejected — the deprecated protocol versions are switched off.
The handshake settled on TLS 1.3 with TLS_AES_256_GCM_SHA384 — the current protocol generation, with a cleaner handshake and only AEAD ciphers.
Every issuer → subject link matches and the chain ends at a self-signed root (chain as served).
在该域名的证书到期前 30、14、7、3 和 1 天发送免费邮件提醒。双重确认：你确认之前不会发送任何邮件，且每封邮件都附有退订链接。你的地址只为这一用途保存。
我们如何处理你的地址，请参阅《隐私政策》。
此检测由我们的服务器执行：URL 中的域名会发送到 ecdsa.com，我们会连接该域名的 443 端口。除此之外不收集任何信息。证书链完全按服务器发送的内容评估——本报告描述的是配置情况，不会针对任何浏览器信任库执行完整的路径验证。