manifest.lh3-df.googleusercontent.com
Overall grade based on: IPv4: 1 of 1 complete · IPv6: 0 of 1 complete, 1 pending — IPv6 results are added below when their scan finishes; they do not count until then.
IPv6 scan in progress
2a00:1450:400c:c01::84 IPv6 · Pending: IPv6 scan not started yet (it runs when the report is opened, or via POST /api/ssl-check/{domain}/ipv6).
The IPv4 report below is complete. IPv6 results will be added to this page automatically when the scan finishes.
Grade Breakdown
Protocol Support 50%
Key Exchange 90%
Cipher Strength 100%
Certificate 100%
Grade capped at B: server supports obsolete TLS 1.0/1.1.
Security Vulnerabilities Detected
- •Obsolete TLS versions (1.0/1.1) supported.
- •Weak 3DES cipher supported (Sweet32).
- •CBC cipher suites with TLS 1.0/1.1 (BEAST, Lucky13).
Site Access: HTTP and HTTPS
What a visitor typing each address gets, and where its redirects end (up to 5 are followed), as seen from our scanner.
| Host | http:// (port 80) | https:// (port 443) |
|---|---|---|
| manifest.lh3-df.googleusercontent.com | 404 Not Found (unencrypted) | 404 Not Found |
- http://manifest.lh3-df.googleusercontent.com answers without redirecting to HTTPS: visitors who type the address without https:// get an unencrypted page.
Certificate Identity
| Common Name | manifest.lh3-df.googleusercontent.com |
| Alt Names | *.googleusercontent.com commondatastorage.googleapis.com *.commondatastorage.googleapis.com storage.googleapis.com *.storage.googleapis.com storage-p2.googleapis.com *.storage-p2.googleapis.com storage.mtls.googleapis.com *.appspot.com.storage.googleapis.com *.content-storage.googleapis.com *.content-storage-p2.googleapis.com *.content-storage-upload.googleapis.com *.content-storage-download.googleapis.com *.storage-upload.googleapis.com *.storage-download.googleapis.com blogspot.com *.blogspot.com bp.blogspot.com *.bp.blogspot.com doubleclickusercontent.com *.doubleclickusercontent.com ggpht.com *.ggpht.com googledrive.com *.googledrive.com *.googlesyndication.com *.safeframe.googlesyndication.com googleusercontent.com *.byoid.googleusercontent.com usercontent.goog *.usercontent.goog *.ucp.usercontent.goog *.h5games.usercontent.goog *.playables.usercontent.goog *.allownetworkplayables.usercontent.goog *.safeframe.usercontent.goog *.sandbox.usercontent.goog *.scf.usercontent.goog *.isolated.usercontent.goog *.static.usercontent.goog *.ads-static.usercontent.goog *.executionbox.usercontent.goog *.aiplayables.usercontent.goog *.playground.usercontent.goog *.labs-studios.usercontent.goog rbm-smb-experience.business.usercontent.goog rbm-smb-experience-autopush.business.usercontent.goog manifest.c.mail.googleusercontent.com manifest.lh3-da.googleusercontent.com manifest.lh3-db.googleusercontent.com manifest.lh3-dc.googleusercontent.com manifest.lh3-dd.googleusercontent.com manifest.lh3-de.googleusercontent.com manifest.lh3-df.googleusercontent.com manifest.lh3-dg.googleusercontent.com manifest.lh3-dz.googleusercontent.com manifest.lh3.googleusercontent.com manifest.lh3.photos.google.com googleweblight.com *.googleweblight.com translate.goog *.translate.goog *.search.translate.goog *.dev.amp4mail.googleusercontent.com *.prod.amp4mail.googleusercontent.com *.playground.amp4mail.googleusercontent.com *.playground-internal.amp4mail.googleusercontent.com *.aiplatform-notebook.googleusercontent.com *.aiplatform-training.googleusercontent.com *.aiplatform-training.byoid.googleusercontent.com *.audiobook-additional-material-staging.googleusercontent.com *.audiobook-additional-material.googleusercontent.com *.apps.googleusercontent.com *.safenup.googleusercontent.com *.sandbox.googleusercontent.com *.backupdr.googleusercontent.com *.backupdr.byoid.googleusercontent.com *.backupdr-staging.googleusercontent.com *.backupdr-staging.byoid.googleusercontent.com *.backupdr-autopush.googleusercontent.com *.backupdr-autopush.byoid.googleusercontent.com *.backupdr-dev.googleusercontent.com *.backupdr-dev.byoid.googleusercontent.com *.backupdr-sandbox.googleusercontent.com *.backupdr-sandbox.byoid.googleusercontent.com *.composer.googleusercontent.com *.composer.byoid.googleusercontent.com *.composer-staging.googleusercontent.com *.composer-staging.byoid.googleusercontent.com *.composer-qa.googleusercontent.com *.composer-qa.byoid.googleusercontent.com *.composer-dev.googleusercontent.com *.composer-dev.byoid.googleusercontent.com *.dataplex.googleusercontent.com *.dataplex-staging.googleusercontent.com *.dataplex-dev.googleusercontent.com *.dataproc.googleusercontent.com *.dataproc.byoid.googleusercontent.com *.dataproc-image-staging.googleusercontent.com *.dataproc-image-staging.byoid.googleusercontent.com *.dataproc-staging.googleusercontent.com *.dataproc-staging.byoid.googleusercontent.com *.dataproc-test.googleusercontent.com *.dataproc-test.byoid.googleusercontent.com *.datafusion.googleusercontent.com *.datafusion.byoid.googleusercontent.com *.datafusion-staging.googleusercontent.com *.datafusion-staging.byoid.googleusercontent.com *.datafusion-dev.googleusercontent.com *.datafusion-dev.byoid.googleusercontent.com *.datafusion-api.googleusercontent.com *.datafusion-api.byoid.googleusercontent.com *.datafusion-api-staging.googleusercontent.com *.datafusion-api-staging.byoid.googleusercontent.com *.datafusion-api-dev.googleusercontent.com *.datafusion-api-dev.byoid.googleusercontent.com *.gsc.googleusercontent.com *.gcc.googleusercontent.com *.tuf.googleusercontent.com *.tuf-autopush.googleusercontent.com *.tuf-dev.googleusercontent.com *.tuf-staging.googleusercontent.com *.fuchsia-updates.googleusercontent.com *.fuchsia-updates-autopush.googleusercontent.com *.fuchsia-updates-autopush-qual.googleusercontent.com *.fuchsia-updates-dev.googleusercontent.com *.fuchsia-updates-staging.googleusercontent.com *.machinelearningtools.googleusercontent.com *.machinelearningtools-staging.googleusercontent.com *.machinelearningtools-autopush.googleusercontent.com *.machinelearningtools-dev.googleusercontent.com *.mos-updates.googleusercontent.com *.mos-updates-autopush.googleusercontent.com *.mos-updates-autopush-qual.googleusercontent.com *.mos-updates-dev.googleusercontent.com *.mos-updates-staging.googleusercontent.com *.notebooks.googleusercontent.com *.notebooks.byoid.googleusercontent.com *.pipelines.googleusercontent.com *.tensorboard.googleusercontent.com *.tensorboard-autopush.googleusercontent.com *.tensorboard-dev.googleusercontent.com *.tensorboard-staging.googleusercontent.com *.tensorboard-test.googleusercontent.com *.kernels.googleusercontent.com *.kernels-staging.googleusercontent.com *.kernels-test.googleusercontent.com *.cloudshell.googleusercontent.com *.cloudworkstations.googleusercontent.com *.vast.googleusercontent.com *.vast-staging.googleusercontent.com *.vast-autopush.googleusercontent.com *.vast-sandbox.googleusercontent.com |
| Issuer | CN=WE2, O=Google Trust Services, C=US |
| Validity | 2026-10-07 to 2026-12-30 (54 days remaining) |
| Key | ECDSA 256 bits (sha256ECDSA) |
| Serial Number | 010808D84F08AAD01259DE1F82E44DD6 |
| SHA256 Fingerprint | 0e352e8ff5b594d57d99c893e45ac773469ebb5d1432bcf7f1e6477c0bdfc4fb |
| Pin SHA256 | TUylu7GhbNqEbnzGxKEGHgTX2Bdhdwu8zem1M7z+sFI= |
Certificate Properties
| Type | DV |
| Cert Transparency | Yes (SCT) |
| OCSP Must Staple | No |
| Revocation | Good (not revoked) CRL: http://c.pki.goog/we2/yK5nPhtHKQs.crl No OCSP responder — revocation is published via CRL only (as CA/B Forum rules now allow). |
| DNS CAA | Yes (configured) 0 issue "pki.goog" |
| Trusted By | Yes Mozilla · Apple · Android · Java · Windows |
| Name Match | Yes |
| Validity Period | 84 days (maximum 200 days for certificates issued then) |
| Chain Issues | None |
Protocol Configuration
Supported Protocols
TLS 1.3
TLS 1.2
TLS 1.1
TLS 1.0
SSL 3
SSL 2
Negotiated Cipher
TLS_AES_256_GCM_SHA384
Protocol Details
| Connection | |
| ALPN | h2 http/1.1 |
| SNI Required | Yes |
| Supported Named Groups | X25519MLKEM768 x25519 secp256r1 (server preference order) |
| Post-Quantum Key Exchange | Yes X25519MLKEM768 |
| HTTP/3 (QUIC) | Yes (advertised) |
| Encrypted Client Hello | No |
| Security Features | |
| Forward Secrecy | Yes (ECDHE / DHE) |
| Downgrade Prevention | Yes (TLS_FALLBACK_SCSV) |
| Secure Renegotiation | Supported (RFC 5746) |
| Extended Master Secret | Yes (RFC 7627) |
| OCSP Stapling | No (certificate has no OCSP responder) |
| HSTS | No |
| HSTS Preloading | N/A (HSTS not enabled) |
| Security Checks | |
| BEAST attack | Not mitigated server-side (TLS 1.0 + CBC) |
| POODLE (SSLv3) | No (SSL 3 not supported) |
| POODLE (TLS) | Possible (CBC + legacy TLS present) |
| RC4 | No |
| SSL/TLS Compression | No (not supported by .NET TLS stack) |
| Heartbleed | Not tested |
Cipher Suite Analysis
| Cipher Suite | Hex | Key Exchange | FS | Bits | Strength |
|---|---|---|---|---|---|
| # TLS 1.3 (server-preferred order) | |||||
| TLS_AES_128_GCM_SHA256 | 0x1301 | ECDHE | FS | 128 | Secure |
| TLS_AES_256_GCM_SHA384 | 0x1302 | ECDHE | FS | 256 | Secure |
| TLS_CHACHA20_POLY1305_SHA256 | 0x1303 | ECDHE | FS | 256 | Secure |
| # TLS 1.2 (server-preferred order) | |||||
| TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 | 0xC02B | ECDHE | FS | 128 | Secure |
| TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 | 0xCCA9 | ECDHE | FS | 256 | Secure |
| TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 | 0xC02C | ECDHE | FS | 256 | Secure |
| TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA | 0xC009 | ECDHE | FS | 128 | Weak |
| TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA | 0xC00A | ECDHE | FS | 256 | Weak |
| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 | 0xC02F | ECDHE | FS | 128 | Secure |
| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 | 0xCCA8 | ECDHE | FS | 256 | Secure |
| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 | 0xC030 | ECDHE | FS | 256 | Secure |
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA | 0xC013 | ECDHE | FS | 128 | Weak |
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA | 0xC014 | ECDHE | FS | 256 | Weak |
| TLS_RSA_WITH_AES_128_GCM_SHA256 | 0x009C | RSA | No FS | 128 | Weak |
| TLS_RSA_WITH_AES_256_GCM_SHA384 | 0x009D | RSA | No FS | 256 | Weak |
| TLS_RSA_WITH_AES_128_CBC_SHA | 0x002F | RSA | No FS | 128 | Weak |
| TLS_RSA_WITH_AES_256_CBC_SHA | 0x0035 | RSA | No FS | 256 | Weak |
| TLS_RSA_WITH_3DES_EDE_CBC_SHA | 0x000A | RSA | No FS | 112 | Weak |
Handshake Simulation
| Client | Protocol | Cipher Suite | Result |
|---|---|---|---|
| Chrome 120 / Win 11 | TLS 1.3 | TLS_AES_256_GCM_SHA384 | Success |
| Chrome 80 / Win 10 | TLS 1.3 | TLS_AES_256_GCM_SHA384 | Success |
| Firefox 115 / Win 10 | TLS 1.3 | TLS_AES_256_GCM_SHA384 | Success |
| iOS 17 / Safari | TLS 1.3 | TLS_CHACHA20_POLY1305_SHA256 | Success |
| macOS 14 / Safari | TLS 1.3 | TLS_AES_256_GCM_SHA384 | Success |
| Android 14 | TLS 1.3 | TLS_AES_128_GCM_SHA256 | Success |
| Chrome 69 / Win 7 | TLS 1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 | Success |
| Chrome 49 / XP SP3 | TLS 1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 | Success |
| IE 11 / Win 10 | TLS 1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 | Success |
| IE 11 / Win 7 | TLS 1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 | Success |
| Android 9.0 | TLS 1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 | Success |
| Android 7.0 | TLS 1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 | Success |
| Android 5.0 | TLS 1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 | Success |
| Android 4.4.2 | TLS 1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 | Success |
| Java 11 | TLS 1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 | Success |
| Java 8u121 | TLS 1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 | Success |
| Android 4.0.4 | TLS 1.0 | TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA | Success |
| Android 4.1.1 | TLS 1.0 | TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA | Success |
| Baidu Jan 2015 | TLS 1.0 | TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA | Success |
| Java 6 | TLS 1.0 | TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA | Success |
* Simulated based on server's supported protocols and cipher configuration.
Trust Chain Architecture
End-Entity Certificate
CN=*.googleusercontent.com (Issuer: CN=WE2, O=Google Trust Services, C=US)
Intermediate CA
CN=WE2, O=Google Trust Services, C=US (Issuer: CN=GTS Root R4, O=Google Trust Services LLC, C=US)
Root Certificate
CN=GTS Root R4, O=Google Trust Services LLC, C=US (Issuer: CN=GTS Root R4, O=Google Trust Services LLC, C=US)
TLS History & Relations
Everything our scans have seen for manifest.lh3-df.googleusercontent.com, first seen 2026-04-13; current certificate since 2026-10-25.
Certificates served
| Certificate (SHA-256) | Issuer | Valid | Served |
|---|---|---|---|
| 0e352e8ff5b594d5… current | WE2 | 2026-10-07 → 2026-12-30 | 2026-10-25 |
Addresses
| Address | Certificate | Seen |
|---|---|---|
| 172.253.120.132 | 0e352e8ff5b594d5… | 2026-10-25 |
TLS history (a row per change; repeated checks only extend it)
| Since → last checked (UTC) | Grade | TLS | Certificates | Addresses |
|---|---|---|---|---|
| 2026-10-25 13:04 | B | TLS 1.3 | 0e352e8ff5b594d5… | 172.253.120.132 |
Other domains on the same certificate
- storage.googleapis.com 3 names *.appspot.com.storage.googleapis.com *.storage.googleapis.com
- bp.blogspot.com 2 names *.bp.blogspot.com
- commondatastorage.googleapis.com 2 names *.commondatastorage.googleapis.com
- doubleclickusercontent.com 2 names *.doubleclickusercontent.com
- ggpht.com 2 names *.ggpht.com
- googledrive.com 2 names *.googledrive.com
- googlesyndication.com 2 names *.googlesyndication.com *.safeframe.googlesyndication.com
- googleweblight.com 2 names *.googleweblight.com
- storage-p2.googleapis.com 2 names *.storage-p2.googleapis.com
- usercontent.goog 2 names *.usercontent.goog
- content-storage-download.googleapis.com 1 name *.content-storage-download.googleapis.com
- content-storage.googleapis.com 1 name *.content-storage.googleapis.com
- content-storage-p2.googleapis.com 1 name *.content-storage-p2.googleapis.com
- content-storage-upload.googleapis.com 1 name *.content-storage-upload.googleapis.com
- google.com 1 name
- mtls.googleapis.com 1 name
- rbm-smb-experience-autopush.business.usercontent.goog 1 name
- rbm-smb-experience.business.usercontent.goog 1 name
- search.translate.goog 1 name *.search.translate.goog
- storage-download.googleapis.com 1 name *.storage-download.googleapis.com
- storage-upload.googleapis.com 1 name *.storage-upload.googleapis.com
Other hosts seen on the same addresses
manifest.lh3-da.googleusercontent.com manifest.lh3-db.googleusercontent.com manifest.lh3-dc.googleusercontent.com manifest.lh3-dd.googleusercontent.com manifest.lh3-de.googleusercontent.com manifest.lh3-dg.googleusercontent.com manifest.lh3-dz.googleusercontent.com manifest.lh3.googleusercontent.com