Dashboard / Security Report

benihana.com

Overall grade based on: IPv4: 2 of 2 complete · IPv6: 0 of 2 complete, 2 pending — IPv6 results are added below when their scan finishes; they do not count until then.

IPv6 scan in progress

2606:4700:3031::6815:1f7b IPv6 · Pending: IPv6 scan not started yet (it runs when the report is opened, or via POST /api/ssl-check/{domain}/ipv6).

2606:4700:3032::ac43:b082 IPv6 · Pending: IPv6 scan not started yet (it runs when the report is opened, or via POST /api/ssl-check/{domain}/ipv6).

The IPv4 report below is complete. IPv6 results will be added to this page automatically when the scan finishes.

All 2 endpoints share identical configuration Select an IP for owner, ASN & location

A+ 188.114.96.1 IPv4 WHOIS › A+ 188.114.97.1 IPv4 WHOIS ›

A+

Exceptional Security

Overall Rating

188.114.96.1 WHOIS › 188.114.97.1 WHOIS ›

Assessed 2026-10-10 10:34 UTC

Grade Breakdown

Protocol Support 95%

Key Exchange 90%

Cipher Strength 100%

Certificate 100%

Protocol Configuration

Supported Protocols

TLS 1.3

TLS 1.2

TLS 1.1

TLS 1.0

SSL 3

SSL 2

Negotiated Cipher

TLS_AES_256_GCM_SHA384

Protocol Details

Connection
ALPN	h2 http/1.1
SNI Required	Yes
Supported Named Groups	X25519MLKEM768 X25519Kyber768Draft00 x25519 secp256r1 secp384r1 secp521r1 (server preference order)
Post-Quantum Key Exchange	Yes X25519MLKEM768, X25519Kyber768Draft00
HTTP/3 (QUIC)	Yes (advertised)
Encrypted Client Hello	Yes(ECH config in HTTPS DNS record)
Security Features
Forward Secrecy	Yes (ECDHE / DHE)
Downgrade Prevention	Yes (legacy TLS disabled)
Secure Renegotiation	Supported (RFC 5746)
Extended Master Secret	Yes (RFC 7627)
OCSP Stapling	No (certificate has no OCSP responder)
HSTS	Yes 180 days
HSTS Preloading	Not preloadedSubmit →
Security Checks
BEAST attack	Mitigated
POODLE (SSLv3)	No (SSL 3 not supported)
POODLE (TLS)	No
RC4	No
SSL/TLS Compression	No (not supported by .NET TLS stack)
Heartbleed	Not tested

Cipher Suite Analysis

Cipher Suite	Hex	Key Exchange	FS	Bits	Strength
# TLS 1.3
TLS_AES_128_GCM_SHA256	0x1301	ECDHE	FS	128	Secure
TLS_AES_256_GCM_SHA384	0x1302	ECDHE	FS	256	Secure
TLS_CHACHA20_POLY1305_SHA256	0x1303	ECDHE	FS	256	Secure
# TLS 1.2
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256	0xC02B	ECDHE	FS	128	Secure
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256	0xCCA9	ECDHE	FS	256	Secure
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA	0xC009	ECDHE	FS	128	Weak
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384	0xC02C	ECDHE	FS	256	Secure
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA	0xC00A	ECDHE	FS	256	Weak
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256	0xC023	ECDHE	FS	128	Weak
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384	0xC024	ECDHE	FS	256	Weak

Handshake Simulation

Client	Protocol	Cipher Suite	Result
Chrome 120 / Win 11	TLS 1.3	TLS_AES_256_GCM_SHA384	Success
Chrome 80 / Win 10	TLS 1.3	TLS_AES_256_GCM_SHA384	Success
Firefox 115 / Win 10	TLS 1.3	TLS_AES_256_GCM_SHA384	Success
iOS 17 / Safari	TLS 1.3	TLS_CHACHA20_POLY1305_SHA256	Success
macOS 14 / Safari	TLS 1.3	TLS_AES_256_GCM_SHA384	Success
Android 14	TLS 1.3	TLS_AES_128_GCM_SHA256	Success
Chrome 69 / Win 7	TLS 1.2	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256	Success
Chrome 49 / XP SP3	TLS 1.2	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256	Success
IE 11 / Win 10	TLS 1.2	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256	Success
IE 11 / Win 7	TLS 1.2	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256	Success
Android 9.0	TLS 1.2	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256	Success
Android 7.0	TLS 1.2	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256	Success
Android 5.0	TLS 1.2	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256	Success
Android 4.4.2	TLS 1.2	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256	Success
Java 11	TLS 1.2	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256	Success
Java 8u121	TLS 1.2	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256	Success
Android 4.0.4	-	-	No
Android 4.1.1	-	-	No
Baidu Jan 2015	-	-	No
Java 6	-	-	No

* Simulated based on server's supported protocols and cipher configuration.

Certificate Identity

Common Name	benihana.com
Alt Names	benihana.com *.benihana.com
Issuer	CN=WE1, O=Google Trust Services, C=US
Validity	2026-09-20 to 2026-12-19 (38 days remaining)
Key	ECDSA 256 bits (sha256ECDSA)
Serial Number	300B86F51A59FAB30E08DB491098B8EC
SHA256 Fingerprint	aaf36663d8c94875c7c6497fbf7991f3cf829bf99b657835f89d879c4e447338
Pin SHA256	v/whZ3DT+3+13DrjHOBiDocOEjAfhAlhrcCaYxRdcnY=

Certificate Properties

Type	DV
Cert Transparency	Yes (SCT)
OCSP Must Staple	No
Revocation	Good (not revoked) CRL: http://c.pki.goog/we1/eQfZ01ox2Wk.crl No OCSP responder — revocation is published via CRL only (as CA/B Forum rules now allow).
DNS CAA	No (missing)
Trusted By	Yes Mozilla · Apple · Android · Java · Windows
Name Match	Yes
Validity Period	90 days (maximum 200 days for certificates issued then)
Chain Issues	None

Trust Chain Architecture

End-Entity Certificate

CN=benihana.com (Issuer: CN=WE1, O=Google Trust Services, C=US)

Intermediate CA

CN=WE1, O=Google Trust Services, C=US (Issuer: CN=GTS Root R4, O=Google Trust Services LLC, C=US)

Root Certificate

CN=GTS Root R4, O=Google Trust Services LLC, C=US (Issuer: CN=GTS Root R4, O=Google Trust Services LLC, C=US)

TLS History & Relations

Everything our scans have seen for benihana.com, first seen 2026-10-10; current certificate since 2026-10-10.

Certificates served

Certificate (SHA-256)	Issuer	Valid	Served
aaf36663d8c94875… current	WE1	2026-09-20 → 2026-12-19	2026-10-10

Addresses

Address	Certificate	Seen
188.114.96.1	aaf36663d8c94875…	2026-10-10
188.114.97.1	aaf36663d8c94875…	2026-10-10

TLS history (a row per change; repeated checks only extend it)

Since → last checked (UTC)	Grade	TLS	Certificates	Addresses
2026-10-10 10:34	A+	TLS 1.3	aaf36663d8c94875…	188.114.96.1, 188.114.97.1