SSL Check WHOIS
Dashboard / Security Report

fosteringsuccessmichigan.com

IPv6: no public AAAA record — the domain is reachable over IPv4 only.
All 2 endpoints share identical configuration Select an IP for owner, ASN & location
A+ 199.60.103.130 IPv4 WHOIS › A+ 199.60.103.30 IPv4 WHOIS ›
A+

Exceptional Security

Overall Rating
Assessed 2026-06-08 19:52 UTC

Grade Breakdown

Protocol Support 95%
Key Exchange 90%
Cipher Strength 100%
Certificate 100%
Certificate has expired. This domain's SSL/TLS certificate is no longer valid and browsers will show security warnings to visitors.

Protocol Configuration

Supported Protocols

TLS 1.3
TLS 1.2
TLS 1.1
TLS 1.0
SSL 3
SSL 2

Negotiated Cipher

TLS_AES_256_GCM_SHA384

Protocol Details

Connection
ALPN h2 http/1.1
SNI Required Yes
Supported Named Groups x25519 secp256r1 secp384r1 (inferred)
Post-Quantum Key Exchange Unknown
HTTP/3 (QUIC) Unknown
Encrypted Client Hello Unknown
Security Features
Forward SecrecyYes (ECDHE / DHE)
Downgrade Prevention Yes (legacy TLS disabled)
Secure Renegotiation Unknown
Extended Master Secret Unknown
OCSP Stapling Unknown (measured on TLS 1.2 only)
HSTS Yes
HSTS Preloading Not preloadedSubmit →
Security Checks
BEAST attack Mitigated
POODLE (SSLv3) No (SSL 3 not supported)
POODLE (TLS) No
RC4 No
SSL/TLS CompressionNo (not supported by .NET TLS stack)
HeartbleedNot tested

Cipher Suite Analysis

Cipher SuiteHexKey ExchangeFSBitsStrength
# TLS 1.3
TLS_AES_256_GCM_SHA3840x1302ECDHEFS256Secure
TLS_CHACHA20_POLY1305_SHA2560x1303ECDHEFS256Secure
TLS_AES_128_GCM_SHA2560x1301ECDHEFS128Secure
# TLS 1.2
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA3840xC030ECDH secp256r1 (eq. 3072 bits RSA)FS256Secure
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA2560xC02FECDH secp256r1 (eq. 3072 bits RSA)FS128Secure
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA3840xC028ECDH secp256r1 (eq. 3072 bits RSA)FS256Weak
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA0xC014ECDH secp256r1 (eq. 3072 bits RSA)FS256Weak
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA2560xC027ECDH secp256r1 (eq. 3072 bits RSA)FS128Weak
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA0xC013ECDH secp256r1 (eq. 3072 bits RSA)FS128Weak
TLS_RSA_WITH_AES_256_GCM_SHA3840x009DRSANo FS256Weak
TLS_RSA_WITH_AES_128_GCM_SHA2560x009CRSANo FS128Weak
TLS_RSA_WITH_AES_256_CBC_SHA2560x003DRSANo FS256Weak
TLS_RSA_WITH_AES_256_CBC_SHA0x0035RSANo FS256Weak
TLS_RSA_WITH_AES_128_CBC_SHA2560x003CRSANo FS128Weak
TLS_RSA_WITH_AES_128_CBC_SHA0x002FRSANo FS128Weak
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA2560xCCA8ECDH secp256r1 (eq. 3072 bits RSA)FS256Secure

Handshake Simulation

ClientProtocolCipher SuiteResult
Chrome 120 / Win 11TLS 1.3TLS_AES_256_GCM_SHA384Success
Chrome 80 / Win 10TLS 1.3TLS_AES_256_GCM_SHA384Success
Firefox 115 / Win 10TLS 1.3TLS_AES_256_GCM_SHA384Success
iOS 17 / SafariTLS 1.3TLS_CHACHA20_POLY1305_SHA256Success
macOS 14 / SafariTLS 1.3TLS_AES_256_GCM_SHA384Success
Android 14TLS 1.3TLS_AES_128_GCM_SHA256Success
Chrome 69 / Win 7TLS 1.2TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384Success
Chrome 49 / XP SP3TLS 1.2TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256Success
IE 11 / Win 10TLS 1.2TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384Success
IE 11 / Win 7TLS 1.2TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384Success
Android 9.0TLS 1.2TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384Success
Android 7.0TLS 1.2TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384Success
Android 5.0TLS 1.2TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256Success
Android 4.4.2TLS 1.2TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384Success
Java 11TLS 1.2TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384Success
Java 8u121TLS 1.2TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256Success
Android 4.0.4--No
Android 4.1.1--No
Baidu Jan 2015--No
Java 6--No

* Simulated based on server's supported protocols and cipher configuration.

Certificate Identity

Common Namefosteringsuccessmichigan.com
Alt Names 20b2ca6f.sni.cloudflaressl.com fosteringsuccessmichigan.com
IssuerCN=WE1, O=Google Trust Services, C=US
Validity 2026-04-20 to 2026-07-19 (110 days ago — expired)
KeyECDSA 256 bits (sha256ECDSA)
Serial Number009558D4CD8A13225C131FF8817A39EB15
SHA256 Fingerprint 753b5a8a144ad5db30c970a633c3453702432f8f2f61ff43204c89254c46fc4f
Pin SHA256QZdrcUW+0ueMX9oHmafpXOyiwg6lCkFKKyw2TnGHtxI=

Certificate Properties

Type DV
Cert Transparency Yes (SCT)
OCSP Must Staple No
Revocation Good (not revoked) OCSP: http://o.pki.goog/s/we1/lVg
DNS CAA No (missing)
Trusted By Yes Mozilla · Apple · Android · Java · Windows
Validity Period 90 days (maximum 200 days for certificates issued then)
Chain Issues
• Contains anchor (root CA included in chain)

Trust Chain Architecture

End-Entity Certificate
CN=20b2ca6f.sni.cloudflaressl.com (Issuer: CN=WE1, O=Google Trust Services, C=US)
Intermediate CA
CN=WE1, O=Google Trust Services, C=US (Issuer: CN=GlobalSign, O=GlobalSign, OU=GlobalSign ECC Root CA - R4)
Root Certificate
CN=GlobalSign, O=GlobalSign, OU=GlobalSign ECC Root CA - R4 (Issuer: CN=GlobalSign, O=GlobalSign, OU=GlobalSign ECC Root CA - R4)

TLS History & Relations

Everything our scans have seen for fosteringsuccessmichigan.com, first seen 2026-06-08; current certificate since 2026-06-08.

Certificates served

Certificate (SHA-256)IssuerValidServed
753b5a8a144ad5db… current WE12026-04-20 → 2026-07-192026-06-08

Addresses

AddressCertificateSeen
199.60.103.30 753b5a8a144ad5db… 2026-06-08
199.60.103.130 753b5a8a144ad5db… 2026-06-08

TLS history (a row per change; repeated checks only extend it)

Since → last checked (UTC)GradeTLSCertificatesAddresses
2026-06-08 19:52A+TLS 1.3 753b5a8a144ad5db… 199.60.103.30, 199.60.103.130

Other domains on the same certificate

Other hosts seen on the same addresses