Dashboard / Security Report

andrewskurka.com

Overall grade based on: IPv4: 2 of 2 complete · IPv6: 2 of 2 complete

All 4 endpoints share identical configuration Select an IP for owner, ASN & location

A+ 188.114.96.2 IPv4 WHOIS › A+ 188.114.97.2 IPv4 WHOIS › A+ 2a06:98c1:3120::2 IPv6 WHOIS › A+ 2a06:98c1:3121::2 IPv6 WHOIS ›

A+

Exceptional Security

Overall Rating

188.114.96.2 WHOIS › 188.114.97.2 WHOIS › 2a06:98c1:3120::2 WHOIS › 2a06:98c1:3121::2 WHOIS ›

Assessed 2026-10-29 01:01 UTC

Grade Breakdown

Protocol Support 100%

Key Exchange 90%

Cipher Strength 100%

Certificate 100%

Protocol Configuration

Supported Protocols

TLS 1.3

TLS 1.2

TLS 1.1

TLS 1.0

SSL 3

SSL 2

Negotiated Cipher

TLS_AES_256_GCM_SHA384

Protocol Details

Connection
ALPN	h2 http/1.1
SNI Required	Yes
Supported Named Groups	X25519MLKEM768 X25519Kyber768Draft00 x25519 secp256r1 secp384r1 secp521r1 (server preference order)
Post-Quantum Key Exchange	Yes X25519MLKEM768, X25519Kyber768Draft00
HTTP/3 (QUIC)	Yes (advertised)
Encrypted Client Hello	Yes(ECH config in HTTPS DNS record)
Security Features
Forward Secrecy	Yes (ECDHE / DHE)
Downgrade Prevention	Yes (legacy TLS disabled)
Secure Renegotiation	N/A (TLS 1.3 only — no renegotiation)
Extended Master Secret	N/A (built into TLS 1.3)
OCSP Stapling	Unknown (measured on TLS 1.2 only)
HSTS	No
HSTS Preloading	N/A (HSTS not enabled)
Security Checks
BEAST attack	Mitigated
POODLE (SSLv3)	No (SSL 3 not supported)
POODLE (TLS)	No
RC4	No
SSL/TLS Compression	No (not supported by .NET TLS stack)
Heartbleed	Not tested

Cipher Suite Analysis

Cipher Suite	Hex	Key Exchange	FS	Bits	Strength
# TLS 1.3
TLS_AES_128_GCM_SHA256	0x1301	ECDHE	FS	128	Secure
TLS_AES_256_GCM_SHA384	0x1302	ECDHE	FS	256	Secure
TLS_CHACHA20_POLY1305_SHA256	0x1303	ECDHE	FS	256	Secure

Handshake Simulation

Client	Protocol	Cipher Suite	Result
Chrome 120 / Win 11	TLS 1.3	TLS_AES_256_GCM_SHA384	Success
Chrome 80 / Win 10	TLS 1.3	TLS_AES_256_GCM_SHA384	Success
Firefox 115 / Win 10	TLS 1.3	TLS_AES_256_GCM_SHA384	Success
iOS 17 / Safari	TLS 1.3	TLS_CHACHA20_POLY1305_SHA256	Success
macOS 14 / Safari	TLS 1.3	TLS_AES_256_GCM_SHA384	Success
Android 14	TLS 1.3	TLS_AES_128_GCM_SHA256	Success
Chrome 69 / Win 7	-	-	No
Chrome 49 / XP SP3	-	-	No
IE 11 / Win 10	-	-	No
IE 11 / Win 7	-	-	No
Android 9.0	-	-	No
Android 7.0	-	-	No
Android 5.0	-	-	No
Android 4.4.2	-	-	No
Java 11	-	-	No
Java 8u121	-	-	No
Android 4.0.4	-	-	No
Android 4.1.1	-	-	No
Baidu Jan 2015	-	-	No
Java 6	-	-	No

* Simulated based on server's supported protocols and cipher configuration.

Site Access: HTTP and HTTPS

What a visitor typing each address gets, and where its redirects end (up to 5 are followed), as seen from our scanner.

Host	http:// (port 80)	https:// (port 443)
andrewskurka.com	301 → https://andrewskurka.com/ → 403 Forbidden	403 Forbidden
www.andrewskurka.com	301 → https://www.andrewskurka.com/ → 403 Forbidden	403 Forbidden

http://andrewskurka.com redirects to HTTPS.

Certificate Identity

Common Name	andrewskurka.com
Alt Names	*.andrewskurka.com andrewskurka.com
Issuer	CN=YE2, O=Let's Encrypt, C=US
Validity	2026-10-21 to 2027-01-19 (69 days remaining)
Key	ECDSA 256 bits (sha384ECDSA)
Serial Number	06E1EEB8DBC3693B159AD76780F9E1CDDFDB
SHA256 Fingerprint	0d5ff377b38ad7c1a821a54467bf15932f054b6ece9fcab4b4e45c777f150de9
Pin SHA256	A62LZ3FvUXFd4DawDqz7scqyovd8BafJ/fNOZILPTvw=

Certificate Properties

Type	DV
Cert Transparency	Yes (SCT)
OCSP Must Staple	No
Revocation	Good (not revoked) CRL: http://ye2.c.lencr.org/92.crl No OCSP responder — revocation is published via CRL only (as CA/B Forum rules now allow).
DNS CAA	No (missing)
Trusted By	Yes Mozilla · Apple · Android · Java · Windows
Name Match	Yes
Validity Period	90 days (maximum 200 days for certificates issued then)
Chain Issues	None

Trust Chain Architecture

End-Entity Certificate

CN=andrewskurka.com (Issuer: CN=YE2, O=Let's Encrypt, C=US)

Intermediate CA

CN=YE2, O=Let's Encrypt, C=US (Issuer: CN=Root YE, O=ISRG, C=US)

Intermediate CA

CN=Root YE, O=ISRG, C=US (Issuer: CN=ISRG Root X2, O=Internet Security Research Group, C=US)

Root Certificate

CN=ISRG Root X2, O=Internet Security Research Group, C=US (Issuer: CN=ISRG Root X2, O=Internet Security Research Group, C=US)

TLS History & Relations

Everything our scans have seen for andrewskurka.com, first seen 2026-10-29; current certificate since 2026-10-29.

Certificates served

Certificate (SHA-256)	Issuer	Valid	Served
0d5ff377b38ad7c1… current	YE2	2026-10-21 → 2027-01-19	2026-10-29

Addresses

Address	Certificate	Seen
188.114.96.2	0d5ff377b38ad7c1…	2026-10-29
188.114.97.2	0d5ff377b38ad7c1…	2026-10-29
2a06:98c1:3120::2	0d5ff377b38ad7c1…	2026-10-29
2a06:98c1:3121::2	0d5ff377b38ad7c1…	2026-10-29

TLS history (a row per change; repeated checks only extend it)

Since → last checked (UTC)	Grade	TLS	Certificates	Addresses
2026-10-29 01:01	A+	TLS 1.3	0d5ff377b38ad7c1…	188.114.96.2, 188.114.97.2