Dashboard / Security Report

agotzaina.com

IPv6: no public AAAA record — the domain is reachable over IPv4 only.

A+

Exceptional Security

Overall Rating

185.230.63.107 · WHOIS ›

Assessed 2026-10-24 00:38 UTC

Grade Breakdown

Protocol Support 95%

Key Exchange 90%

Cipher Strength 100%

Certificate 100%

Site Access: HTTP and HTTPS

What a visitor typing each address gets, and where its redirects end (up to 5 are followed), as seen from our scanner.

Host	http:// (port 80)	https:// (port 443)
agotzaina.com	301 → https://agotzaina.com/ → … → https://www.agotzaina.com/ → 200 OK	301 → https://www.agotzaina.com/ → 200 OK
www.agotzaina.com	301 → https://www.agotzaina.com/ → 200 OK	200 OK

http://agotzaina.com redirects to HTTPS.

Certificate Identity

Common Name	agotzaina.com
Alt Names	agotzaina.com www.agotzaina.com
Issuer	CN=YR1, O=Let's Encrypt, C=US
Validity	2026-10-22 to 2027-01-20 (69 days remaining)
Key	RSA 2048 bits (sha256RSA)
Serial Number	069564E2C0D341F233EECF1C7E2A35972171
SHA256 Fingerprint	0456b9dc33b6e43cec83556f0d291ace2811a68250c301564e016e0f5a7f810f
Pin SHA256	cy/Xtb7kHqgMqnyylWxqtxzBNYeL2xckzAy26PW63J8=

Certificate Properties

Type	DV
Cert Transparency	Yes (SCT)
OCSP Must Staple	No
Revocation	Good (not revoked) CRL: http://yr1.c.lencr.org/114.crl No OCSP responder — revocation is published via CRL only (as CA/B Forum rules now allow).
DNS CAA	No (missing)
Trusted By	Yes Mozilla · Apple · Android · Java · Windows
Name Match	Yes
Validity Period	90 days (maximum 200 days for certificates issued then)
Chain Issues	None

Protocol Configuration

Supported Protocols

TLS 1.3

TLS 1.2

TLS 1.1

TLS 1.0

SSL 3

SSL 2

Negotiated Cipher

 TLS_AES_128_GCM_SHA256 

Protocol Details

Connection
ALPN	h2 http/1.1
SNI Required	Yes
Supported Named Groups	X25519MLKEM768 x25519 secp256r1 secp384r1 secp521r1 (server preference order)
Post-Quantum Key Exchange	Yes X25519MLKEM768
HTTP/3 (QUIC)	No
Encrypted Client Hello	No
Security Features
Forward Secrecy	Yes (ECDHE / DHE)
Downgrade Prevention	Yes (legacy TLS disabled)
Secure Renegotiation	Supported (RFC 5746)
Extended Master Secret	Yes (RFC 7627)
OCSP Stapling	No (certificate has no OCSP responder)
HSTS	No
HSTS Preloading	N/A (HSTS not enabled)
Security Checks
BEAST attack	Mitigated
POODLE (SSLv3)	No (SSL 3 not supported)
POODLE (TLS)	No
RC4	No
SSL/TLS Compression	No (not supported by .NET TLS stack)
Heartbleed	Not tested

Cipher Suite Analysis

Cipher Suite	Hex	Key Exchange	FS	Bits	Strength
# TLS 1.3 (server-preferred order)
TLS_AES_128_GCM_SHA256	0x1301	ECDHE	FS	128	Secure
TLS_AES_256_GCM_SHA384	0x1302	ECDHE	FS	256	Secure
TLS_CHACHA20_POLY1305_SHA256	0x1303	ECDHE	FS	256	Secure
# TLS 1.2 (server-preferred order)
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256	0xC02F	ECDHE	FS	128	Secure
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384	0xC030	ECDHE	FS	256	Secure
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256	0xCCA8	ECDHE	FS	256	Secure
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA	0xC013	ECDHE	FS	128	Weak
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA	0xC014	ECDHE	FS	256	Weak

Handshake Simulation

Client	Protocol	Cipher Suite	Result
Chrome 120 / Win 11	TLS 1.3	TLS_AES_256_GCM_SHA384	Success
Chrome 80 / Win 10	TLS 1.3	TLS_AES_256_GCM_SHA384	Success
Firefox 115 / Win 10	TLS 1.3	TLS_AES_256_GCM_SHA384	Success
iOS 17 / Safari	TLS 1.3	TLS_CHACHA20_POLY1305_SHA256	Success
macOS 14 / Safari	TLS 1.3	TLS_AES_256_GCM_SHA384	Success
Android 14	TLS 1.3	TLS_AES_128_GCM_SHA256	Success
Chrome 69 / Win 7	TLS 1.2	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256	Success
Chrome 49 / XP SP3	TLS 1.2	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256	Success
IE 11 / Win 10	TLS 1.2	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256	Success
IE 11 / Win 7	TLS 1.2	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256	Success
Android 9.0	TLS 1.2	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256	Success
Android 7.0	TLS 1.2	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256	Success
Android 5.0	TLS 1.2	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256	Success
Android 4.4.2	TLS 1.2	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256	Success
Java 11	TLS 1.2	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256	Success
Java 8u121	TLS 1.2	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256	Success
Android 4.0.4	-	-	No
Android 4.1.1	-	-	No
Baidu Jan 2015	-	-	No
Java 6	-	-	No

* Simulated based on server's supported protocols and cipher configuration.

Trust Chain Architecture

End-Entity Certificate

CN=agotzaina.com (Issuer: CN=YR1, O=Let's Encrypt, C=US)

Intermediate CA

CN=YR1, O=Let's Encrypt, C=US (Issuer: CN=Root YR, O=ISRG, C=US)

Intermediate CA

CN=Root YR, O=ISRG, C=US (Issuer: CN=ISRG Root X1, O=Internet Security Research Group, C=US)

Root Certificate

CN=ISRG Root X1, O=Internet Security Research Group, C=US (Issuer: CN=ISRG Root X1, O=Internet Security Research Group, C=US)

TLS History & Relations

Everything our scans have seen for agotzaina.com, first seen 2026-10-24; current certificate since 2026-10-24.

Certificates served

Certificate (SHA-256)	Issuer	Valid	Served
0456b9dc33b6e43c… current	YR1	2026-10-22 → 2027-01-20	2026-10-24

Addresses

Address	Certificate	Seen
185.230.63.107	0456b9dc33b6e43c…	2026-10-24

TLS history (a row per change; repeated checks only extend it)

Since → last checked (UTC)	Grade	TLS	Certificates	Addresses
2026-10-24 00:38	A+	TLS 1.3	0456b9dc33b6e43c…	185.230.63.107