client.pdinc.us
IPv6: no public AAAA record — the domain is reachable over IPv4 only.
Grade Breakdown
Protocol Support 30%
Key Exchange 100%
Cipher Strength 100%
Certificate 100%
Grade capped at C: server supports SSL 3 (POODLE).
Security Vulnerabilities Detected
- •SSL 3 supported (POODLE).
- •Obsolete TLS versions (1.0/1.1) supported.
- •Insecure RC4 cipher supported.
- •Weak 3DES cipher supported (Sweet32).
- •CBC cipher suites with TLS 1.0/1.1 (BEAST, Lucky13).
Site Access: HTTP and HTTPS
What a visitor typing each address gets, and where its redirects end (up to 5 are followed), as seen from our scanner.
| Host | http:// (port 80) | https:// (port 443) |
|---|---|---|
| client.pdinc.us | 200 OK (unencrypted) | 200 OK |
- http://client.pdinc.us answers without redirecting to HTTPS: visitors who type the address without https:// get an unencrypted page.
DNS Records
As a public resolver answered for client.pdinc.us and its domain pdinc.us. Looked up 2026-11-06 22:41 UTC · 3 days ago
| Type | Records |
|---|---|
| client.pdinc.us | |
| A | |
| AAAA | None |
| MX | None |
| SPF | None |
| pdinc.us | |
| A | |
| AAAA | None |
| NS | ns1.pdinc.us ns2.pdinc.us ns3.pdinc.us |
| MX | 100 mail1.pdinc.us 200 mail2.pdinc.us 1100 mail1.pdinc.us 1200 mail2.pdinc.us 9000 mail.pdinc.us |
| SPF | v=spf1 redirect=_spf.pdinc.us |
Certificate Identity
| Common Name | client.pdinc.us |
| Alt Names | ca.pdinc.us client.pdinc.us crl.pdinc.us pdinc.us public.pdinc.us www.pdinc.us www.public.pdinc.us |
| Issuer | CN=YR1, O=Let's Encrypt, C=US |
| Validity | 2026-11-04 to 2027-02-02 (83 days remaining) |
| Key | RSA 4096 bits (sha256RSA) |
| Serial Number | 068682DC9222C64D16C47B52E8916682FDDF |
| SHA256 Fingerprint | 4aa6e0b3b64585efa85dbea424c898f14d00e53ecb35cdf2f1150febf9ad813d |
| Pin SHA256 | r55cNT3uzUi9OSXOD3eDu/hC6wCSoSTZS/cJJ5UXCEk= |
Certificate Properties
| Type | DV |
| Cert Transparency | Yes (SCT) |
| OCSP Must Staple | No |
| Revocation | Good (not revoked) CRL: http://yr1.c.lencr.org/96.crl No OCSP responder — revocation is published via CRL only (as CA/B Forum rules now allow). |
| DNS CAA | No (missing) |
| Trusted By | Yes Mozilla · Apple · Android · Java · Windows |
| Name Match | Yes |
| Validity Period | 90 days (maximum 200 days for certificates issued then) |
| Chain Issues | • Incomplete chain: the server does not send all intermediate certificates |
Protocol Configuration
Supported Protocols
TLS 1.3
TLS 1.2
TLS 1.1
TLS 1.0
SSL 3
SSL 2
Negotiated Cipher
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
Protocol Details
| Connection | |
| ALPN | No |
| SNI Required | No |
| Supported Named Groups | secp256r1 (inferred) |
| Post-Quantum Key Exchange | No (no hybrid ML-KEM group such as X25519MLKEM768) |
| HTTP/3 (QUIC) | No |
| Encrypted Client Hello | No |
| Security Features | |
| Forward Secrecy | Yes (ECDHE / DHE) |
| Downgrade Prevention | Yes (TLS_FALLBACK_SCSV) |
| Secure Renegotiation | Supported (RFC 5746) |
| Extended Master Secret | No |
| OCSP Stapling | No (certificate has no OCSP responder) |
| HSTS | No |
| HSTS Preloading | N/A (HSTS not enabled) |
| Security Checks | |
| BEAST attack | Not mitigated server-side (TLS 1.0 + CBC) |
| POODLE (SSLv3) | Vulnerable (SSL 3 enabled) |
| POODLE (TLS) | Possible (CBC + legacy TLS present) |
| RC4 | Yes (RC4 cipher enabled) |
| SSL/TLS Compression | No (not supported by .NET TLS stack) |
| Heartbleed | Not tested |
Cipher Suite Analysis
| Cipher Suite | Hex | Key Exchange | FS | Bits | Strength |
|---|---|---|---|---|---|
| # TLS 1.2 (server-preferred order) | |||||
| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | 0xC030 | ECDHE | FS | 256 | Secure |
| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 | 0xC02F | ECDHE | FS | 128 | Secure |
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 | 0xC028 | ECDHE | FS | 256 | Weak |
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 | 0xC027 | ECDHE | FS | 128 | Weak |
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA | 0xC014 | ECDHE | FS | 256 | Weak |
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA | 0xC013 | ECDHE | FS | 128 | Weak |
| TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA | 0xC012 | ECDHE | FS | 112 | Weak |
| TLS_ECDHE_RSA_WITH_RC4_128_SHA | 0xC011 | ECDHE | FS | 128 | Insecure |
| TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 | 0x009F | DHE | FS | 256 | Secure |
| TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 | 0x009E | DHE | FS | 128 | Secure |
| TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 | 0x006B | DHE | FS | 256 | Weak |
| TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 | 0x0067 | DHE | FS | 128 | Weak |
| TLS_DHE_RSA_WITH_AES_256_CBC_SHA | 0x0039 | DHE | FS | 256 | Weak |
| TLS_DHE_RSA_WITH_AES_128_CBC_SHA | 0x0033 | DHE | FS | 128 | Weak |
| TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA | 0x0016 | DHE | FS | 112 | Weak |
| TLS_RSA_WITH_AES_256_GCM_SHA384 | 0x009D | RSA | No FS | 256 | Weak |
| TLS_RSA_WITH_AES_128_GCM_SHA256 | 0x009C | RSA | No FS | 128 | Weak |
| TLS_RSA_WITH_AES_256_CBC_SHA256 | 0x003D | RSA | No FS | 256 | Weak |
| TLS_RSA_WITH_AES_128_CBC_SHA256 | 0x003C | RSA | No FS | 128 | Weak |
| TLS_RSA_WITH_AES_256_CBC_SHA | 0x0035 | RSA | No FS | 256 | Weak |
| TLS_RSA_WITH_AES_128_CBC_SHA | 0x002F | RSA | No FS | 128 | Weak |
| TLS_RSA_WITH_3DES_EDE_CBC_SHA | 0x000A | RSA | No FS | 112 | Weak |
| TLS_RSA_WITH_RC4_128_SHA | 0x0005 | RSA | No FS | 128 | Insecure |
| TLS_RSA_WITH_RC4_128_MD5 | 0x0004 | RSA | No FS | 128 | Insecure |
Handshake Simulation
| Client | Protocol | Cipher Suite | Result |
|---|---|---|---|
| Chrome 120 / Win 11 | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | Success |
| Chrome 80 / Win 10 | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | Success |
| Firefox 115 / Win 10 | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | Success |
| iOS 17 / Safari | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | Success |
| macOS 14 / Safari | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | Success |
| Android 14 | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | Success |
| Chrome 69 / Win 7 | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | Success |
| Chrome 49 / XP SP3 | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | Success |
| IE 11 / Win 10 | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | Success |
| IE 11 / Win 7 | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | Success |
| Android 9.0 | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | Success |
| Android 7.0 | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | Success |
| Android 5.0 | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | Success |
| Android 4.4.2 | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | Success |
| Java 11 | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | Success |
| Java 8u121 | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | Success |
| Android 4.0.4 | TLS 1.0 | TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA | Success |
| Android 4.1.1 | TLS 1.0 | TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA | Success |
| Baidu Jan 2015 | TLS 1.0 | TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA | Success |
| Java 6 | TLS 1.0 | TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA | Success |
* Simulated based on server's supported protocols and cipher configuration.
Trust Chain Architecture
End-Entity Certificate
CN=pdinc.us (Issuer: CN=YR1, O=Let's Encrypt, C=US)
Intermediate CA
CN=YR1, O=Let's Encrypt, C=US (Issuer: CN=Root YR, O=ISRG, C=US)
Intermediate CA
CN=Root YR, O=ISRG, C=US (Issuer: CN=ISRG Root X1, O=Internet Security Research Group, C=US)
Root Certificate
CN=ISRG Root X1, O=Internet Security Research Group, C=US (Issuer: CN=ISRG Root X1, O=Internet Security Research Group, C=US)
TLS History & Relations
Everything our scans have seen for client.pdinc.us, first seen 2026-11-04; current certificate since 2026-11-06.
Certificates served
| Certificate (SHA-256) | Issuer | Valid | Served |
|---|---|---|---|
| 4aa6e0b3b64585ef… current | YR1 | 2026-11-04 → 2027-02-02 | 2026-11-06 |
Addresses
| Address | Certificate | Seen |
|---|---|---|
| 67.90.184.49 | 4aa6e0b3b64585ef… | 2026-11-06 |
TLS history (a row per change; repeated checks only extend it)
| Since → last checked (UTC) | Grade | TLS | Certificates | Addresses |
|---|---|---|---|---|
| 2026-11-06 22:41 | C | TLS 1.2 | 4aa6e0b3b64585ef… | 67.90.184.49 |