签名健康检查
正在连接 443 端口、读取证书链、探测协议版本…
签名健康检查
正在连接 443 端口、读取证书链、探测协议版本…
签名健康检查
Issued 2026-07-27 with a 365-day lifetime. Publicly trusted TLS certificates issued on or after March 15, 2026 are capped at 200 days, dropping to 100 days in March 2027 and 47 days from March 15, 2029. A public CA should no longer issue such a certificate; from a private CA this is a policy note, not an error.
RSA-2048 (≈112-bit classical security) is still fine today. At the same security level, ECDSA P-256 or Ed25519 keys and signatures are several times smaller and the handshake cheaper — worth considering at the next renewal.
RSA-2048 is a sound choice today. It is, however, quantum-vulnerable: NIST IR 8547 (draft) plans to disallow classical signature algorithms — ECDSA, EdDSA and RSA — after 2035, and this key sits at the 112-bit security level that the same draft deprecates one step earlier, after 2030. No penalty and no emergency — but certificate rotation is the easy part; knowing everywhere else your systems sign is the real migration work.
Valid until 2027-07-27 — 273 days remaining.
Handshakes capped at TLS 1.1 were rejected — the deprecated protocol versions are switched off.
The handshake settled on TLS 1.3 with TLS_AES_128_GCM_SHA256 — the current protocol generation, with a cleaner handshake and only AEAD ciphers.
Every issuer → subject link matches and the chain ends at a self-signed root (chain as served).
在该域名的证书到期前 30、14、7、3 和 1 天发送免费邮件提醒。双重确认：你确认之前不会发送任何邮件，且每封邮件都附有退订链接。你的地址只为这一用途保存。
我们如何处理你的地址，请参阅《隐私政策》。
此检测由我们的服务器执行：URL 中的域名会发送到 ecdsa.com，我们会连接该域名的 443 端口。除此之外不收集任何信息。证书链完全按服务器发送的内容评估——本报告描述的是配置情况，不会针对任何浏览器信任库执行完整的路径验证。