alumni.umbc.edu
Overall grade based on: IPv4: 1 of 1 complete · IPv6: 0 of 2 complete, 2 pending — IPv6 results are added below when their scan finishes; they do not count until then.
IPv6 scan in progress
2620:12a:8000::2 IPv6 · Pending: IPv6 scan not started yet (it runs when the report is opened, or via POST /api/ssl-check/{domain}/ipv6).
2620:12a:8001::2 IPv6 · Pending: IPv6 scan not started yet (it runs when the report is opened, or via POST /api/ssl-check/{domain}/ipv6).
The IPv4 report below is complete. IPv6 results will be added to this page automatically when the scan finishes.
Grade Breakdown
Protocol Support 95%
Key Exchange 90%
Cipher Strength 100%
Certificate 100%
Site Access: HTTP and HTTPS
What a visitor typing each address gets, and where its redirects end (up to 5 are followed), as seen from our scanner.
| Host | http:// (port 80) | https:// (port 443) |
|---|---|---|
| alumni.umbc.edu | 301 → https://alumni.umbc.edu/ → … → https://umbc.edu/alumni/ → 200 OK | 301 → https://umbc.edu/alumni/ → 200 OK |
- http://alumni.umbc.edu redirects to HTTPS.
- https://alumni.umbc.edu forwards visitors to umbc.edu, a different site. View its report ›
DNS Records
As a public resolver answered for alumni.umbc.edu and its domain umbc.edu. Looked up 2026-11-08 12:24 UTC · 3 days ago
| Type | Records |
|---|---|
| alumni.umbc.edu | |
| A | |
| AAAA | |
| MX | None |
| SPF | None |
| umbc.edu | |
| A | |
| AAAA | |
| NS | dnsexternal.umbc.edu dnsexternal1.umbc.edu dnsexternal2.umbc.edu dnsexternal3.umbc.edu dnsexternal4.umbc.edu |
| MX | 10 mxin.umbc.edu |
| SPF | v=spf1 ip4:176.31.145.254 ip4:130.85.0.0/16 ip4:34.194.230.233 ip4:34.230.107.215 include:_spf.google.com include:mh.blackboard.com include:spf.protection.outlook.com include:_spf.academicworks.com ?all |
Certificate Identity
| Common Name | alumni.umbc.edu |
| Alt Names | about.umbc.edu alumni.umbc.edu artsandculture.umbc.edu giving.umbc.edu globalstudent.umbc.edu jobs.umbc.edu magazine.umbc.edu news.umbc.edu planning.umbc.edu president.umbc.edu umbc.edu undergraduate.umbc.edu www.alumni.umbc.edu www.umbc.edu |
| Issuer | CN=YR1, O=Let's Encrypt, C=US |
| Validity | 2026-10-23 to 2027-01-21 (71 days remaining) |
| Key | RSA 2048 bits (sha256RSA) |
| Serial Number | 0683AF0335001623FAFD0D43A3FD6DE84611 |
| SHA256 Fingerprint | 3967fcb5f4a26382e916c50cee559b8e5481c9e263547d74c2e955f23e1cf906 |
| Pin SHA256 | xJeS/6NFl7GBLoWTFMpC3grDLAA3ec7xFZZ9xsTa2Zc= |
Certificate Properties
| Type | DV |
| Cert Transparency | Yes (SCT) |
| OCSP Must Staple | No |
| Revocation | Good (not revoked) CRL: http://yr1.c.lencr.org/18.crl No OCSP responder — revocation is published via CRL only (as CA/B Forum rules now allow). |
| DNS CAA | No (missing) |
| Trusted By | Yes Mozilla · Apple · Android · Java · Windows |
| Name Match | Yes |
| Validity Period | 90 days (maximum 200 days for certificates issued then) |
| Chain Issues | None |
Protocol Configuration
Supported Protocols
TLS 1.3
TLS 1.2
TLS 1.1
TLS 1.0
SSL 3
SSL 2
Negotiated Cipher
TLS_AES_128_GCM_SHA256
Protocol Details
| Connection | |
| ALPN | h2 http/1.1 |
| SNI Required | Yes |
| Supported Named Groups | X25519MLKEM768 x25519 secp256r1 secp384r1 (server preference order) |
| Post-Quantum Key Exchange | Yes X25519MLKEM768 |
| HTTP/3 (QUIC) | No |
| Encrypted Client Hello | No |
| Security Features | |
| Forward Secrecy | Yes (ECDHE / DHE) |
| Downgrade Prevention | Yes (legacy TLS disabled) |
| Secure Renegotiation | Supported (RFC 5746) |
| Extended Master Secret | Yes (RFC 7627) |
| OCSP Stapling | No (certificate has no OCSP responder) |
| HSTS | Yes 366 days |
| HSTS Preloading | Not preloadedSubmit → |
| Security Checks | |
| BEAST attack | Mitigated |
| POODLE (SSLv3) | No (SSL 3 not supported) |
| POODLE (TLS) | No |
| RC4 | No |
| SSL/TLS Compression | No (not supported by .NET TLS stack) |
| Heartbleed | Not tested |
Cipher Suite Analysis
| Cipher Suite | Hex | Key Exchange | FS | Bits | Strength |
|---|---|---|---|---|---|
| # TLS 1.3 (server-preferred order) | |||||
| TLS_AES_128_GCM_SHA256 | 0x1301 | ECDHE | FS | 128 | Secure |
| TLS_AES_256_GCM_SHA384 | 0x1302 | ECDHE | FS | 256 | Secure |
| TLS_CHACHA20_POLY1305_SHA256 | 0x1303 | ECDHE | FS | 256 | Secure |
| # TLS 1.2 (server-preferred order) | |||||
| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 | 0xCCA8 | ECDHE | FS | 256 | Secure |
| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 | 0xC02F | ECDHE | FS | 128 | Secure |
| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | 0xC030 | ECDHE | FS | 256 | Secure |
Handshake Simulation
| Client | Protocol | Cipher Suite | Result |
|---|---|---|---|
| Chrome 120 / Win 11 | TLS 1.3 | TLS_AES_256_GCM_SHA384 | Success |
| Chrome 80 / Win 10 | TLS 1.3 | TLS_AES_256_GCM_SHA384 | Success |
| Firefox 115 / Win 10 | TLS 1.3 | TLS_AES_256_GCM_SHA384 | Success |
| iOS 17 / Safari | TLS 1.3 | TLS_CHACHA20_POLY1305_SHA256 | Success |
| macOS 14 / Safari | TLS 1.3 | TLS_AES_256_GCM_SHA384 | Success |
| Android 14 | TLS 1.3 | TLS_AES_128_GCM_SHA256 | Success |
| Chrome 69 / Win 7 | TLS 1.2 | TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 | Success |
| Chrome 49 / XP SP3 | TLS 1.2 | TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 | Success |
| IE 11 / Win 10 | TLS 1.2 | TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 | Success |
| IE 11 / Win 7 | TLS 1.2 | TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 | Success |
| Android 9.0 | TLS 1.2 | TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 | Success |
| Android 7.0 | TLS 1.2 | TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 | Success |
| Android 5.0 | TLS 1.2 | TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 | Success |
| Android 4.4.2 | TLS 1.2 | TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 | Success |
| Java 11 | TLS 1.2 | TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 | Success |
| Java 8u121 | TLS 1.2 | TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 | Success |
| Android 4.0.4 | - | - | No |
| Android 4.1.1 | - | - | No |
| Baidu Jan 2015 | - | - | No |
| Java 6 | - | - | No |
* Simulated based on server's supported protocols and cipher configuration.
Trust Chain Architecture
End-Entity Certificate
CN=about.umbc.edu (Issuer: CN=YR1, O=Let's Encrypt, C=US)
Intermediate CA
CN=YR1, O=Let's Encrypt, C=US (Issuer: CN=Root YR, O=ISRG, C=US)
Intermediate CA
CN=Root YR, O=ISRG, C=US (Issuer: CN=ISRG Root X1, O=Internet Security Research Group, C=US)
Root Certificate
CN=ISRG Root X1, O=Internet Security Research Group, C=US (Issuer: CN=ISRG Root X1, O=Internet Security Research Group, C=US)
TLS History & Relations
Everything our scans have seen for alumni.umbc.edu, first seen 2026-11-07; current certificate since 2026-11-08.
Certificates served
| Certificate (SHA-256) | Issuer | Valid | Served |
|---|---|---|---|
| 3967fcb5f4a26382… current | YR1 | 2026-10-23 → 2027-01-21 | 2026-11-08 |
Addresses
| Address | Certificate | Seen |
|---|---|---|
| 23.185.0.2 | 3967fcb5f4a26382… | 2026-11-08 |
TLS history (a row per change; repeated checks only extend it)
| Since → last checked (UTC) | Grade | TLS | Certificates | Addresses |
|---|---|---|---|---|
| 2026-11-08 12:24 | A+ | TLS 1.3 | 3967fcb5f4a26382… | 23.185.0.2 |
Other hosts seen on the same addresses
2026.indivisible.org 247.ai 3dsystems.com about.umbc.edu acc.com acg.org aclu-il.org aclu-nj.org acluva.org actorsfund.org acu.edu advancingjustice-aajc.org aecom.com afpnet.org aft.org aims.edu airlines.org albertainnovates.ca alexandriava.gov algorithmia.com al-monitor.com alphaluxe.com americanornithology.org anxietyclinic.rutgers.edu appcelerator.com apptio.com arena-international.com artsandculture.umbc.edu aspca.org atlantahistorycenter.com