IP Lookup ASN Lookup Learning Hub
SSL Check WHOIS
Dashboard / Security Report

imperva.com

IPv6: no public AAAA record — the domain is reachable over IPv4 only.
All 2 endpoints share identical configuration Select an IP for owner, ASN & location
A+ 45.60.0.60 IPv4 WHOIS › A+ 45.60.6.60 IPv4 WHOIS ›
A+

Exceptional Security

Overall Rating
Assessed 2026-06-07 13:49 UTC

Grade Breakdown

Protocol Support 95%
Key Exchange 90%
Cipher Strength 100%
Certificate 100%
Certificate has expired. This domain's SSL/TLS certificate is no longer valid and browsers will show security warnings to visitors.

Protocol Configuration

Supported Protocols

TLS 1.3
TLS 1.2
TLS 1.1
TLS 1.0
SSL 3
SSL 2

Negotiated Cipher

TLS_AES_128_GCM_SHA256

Protocol Details

Connection
ALPN h2
SNI Required Yes
Supported Named Groups x25519 secp256r1 secp384r1 (inferred)
Post-Quantum Key Exchange Unknown
HTTP/3 (QUIC) Unknown
Encrypted Client Hello Unknown
Security Features
Forward SecrecyYes (ECDHE / DHE)
Downgrade Prevention Yes (legacy TLS disabled)
Secure Renegotiation Unknown
Extended Master Secret Unknown
OCSP Stapling Unknown (measured on TLS 1.2 only)
HSTS Yes
HSTS Preloading Not preloadedSubmit →
Security Checks
BEAST attack Mitigated
POODLE (SSLv3) No (SSL 3 not supported)
POODLE (TLS) No
RC4 No
SSL/TLS CompressionNo (not supported by .NET TLS stack)
HeartbleedNot tested

Cipher Suite Analysis

Cipher SuiteHexKey ExchangeFSBitsStrength
# TLS 1.3
TLS_AES_256_GCM_SHA3840x1302ECDHEFS256Secure
TLS_CHACHA20_POLY1305_SHA2560x1303ECDHEFS256Secure
TLS_AES_128_GCM_SHA2560x1301ECDHEFS128Secure
# TLS 1.2
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA3840xC030ECDH secp256r1 (eq. 3072 bits RSA)FS256Secure
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA2560xC02FECDH secp256r1 (eq. 3072 bits RSA)FS128Secure
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA3840xC028ECDH secp256r1 (eq. 3072 bits RSA)FS256Weak
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA0xC014ECDH secp256r1 (eq. 3072 bits RSA)FS256Weak
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA2560xC027ECDH secp256r1 (eq. 3072 bits RSA)FS128Weak
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA0xC013ECDH secp256r1 (eq. 3072 bits RSA)FS128Weak
TLS_RSA_WITH_AES_256_GCM_SHA3840x009DRSANo FS256Weak
TLS_RSA_WITH_AES_128_GCM_SHA2560x009CRSANo FS128Weak
TLS_RSA_WITH_AES_256_CBC_SHA2560x003DRSANo FS256Weak
TLS_RSA_WITH_AES_256_CBC_SHA0x0035RSANo FS256Weak
TLS_RSA_WITH_AES_128_CBC_SHA2560x003CRSANo FS128Weak
TLS_RSA_WITH_AES_128_CBC_SHA0x002FRSANo FS128Weak
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA2560xCCA8ECDH secp256r1 (eq. 3072 bits RSA)FS256Secure

Handshake Simulation

ClientProtocolCipher SuiteResult
Chrome 120 / Win 11TLS 1.3TLS_AES_256_GCM_SHA384Success
Chrome 80 / Win 10TLS 1.3TLS_AES_256_GCM_SHA384Success
Firefox 115 / Win 10TLS 1.3TLS_AES_256_GCM_SHA384Success
iOS 17 / SafariTLS 1.3TLS_CHACHA20_POLY1305_SHA256Success
macOS 14 / SafariTLS 1.3TLS_AES_256_GCM_SHA384Success
Android 14TLS 1.3TLS_AES_128_GCM_SHA256Success
Chrome 69 / Win 7TLS 1.2TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384Success
Chrome 49 / XP SP3TLS 1.2TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256Success
IE 11 / Win 10TLS 1.2TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384Success
IE 11 / Win 7TLS 1.2TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384Success
Android 9.0TLS 1.2TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384Success
Android 7.0TLS 1.2TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384Success
Android 5.0TLS 1.2TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256Success
Android 4.4.2TLS 1.2TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384Success
Java 11TLS 1.2TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384Success
Java 8u121TLS 1.2TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256Success
Android 4.0.4--No
Android 4.1.1--No
Baidu Jan 2015--No
Java 6--No

* Simulated based on server's supported protocols and cipher configuration.

Certificate Identity

Common Nameimperva.com
Alt Names www.imperva.com imperva.com
IssuerCN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US
Validity 2026-03-04 to 2026-09-18 (47 days ago — expired)
KeyRSA 2048 bits (sha256RSA)
Serial Number04BD856DE521C39E172A5977FD67D333
SHA256 Fingerprint 94d0890518b541b69d71fdc0169de2f4f35038246e196cbfb0749763735a3e39
Pin SHA256sF/Ln/JbMhAoIyz+V0l6zpRHj5SJZQBAjx3Kcel296c=

Certificate Properties

Type OV
Cert Transparency Yes (SCT)
OCSP Must Staple No
Revocation Good (not revoked) OCSP: http://ocsp.digicert.com
DNS CAA No (missing)
Trusted By Yes Mozilla · Apple · Android · Java · Windows
Validity Period 199 days (maximum 398 days for certificates issued then)
Chain Issues
• Contains anchor (root CA included in chain)

Trust Chain Architecture

End-Entity Certificate
CN=www.imperva.com, O=Imperva Inc., L=San Mateo, S=California, C=US (Issuer: CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US)
Intermediate CA
CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US (Issuer: CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US)
Root Certificate
CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US (Issuer: CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US)

TLS History & Relations

Everything our scans have seen for imperva.com, first seen 2026-06-07; current certificate since 2026-06-07.

Certificates served

Certificate (SHA-256)IssuerValidServed
94d0890518b541b6… current DigiCert Global G2 TLS RSA SHA256 2020 CA12026-03-04 → 2026-09-182026-06-07

Addresses

AddressCertificateSeen
45.60.0.60 94d0890518b541b6… 2026-06-07
45.60.6.60 94d0890518b541b6… 2026-06-07

TLS history (a row per change; repeated checks only extend it)

Since → last checked (UTC)GradeTLSCertificatesAddresses
2026-06-07 13:49A+TLS 1.3 94d0890518b541b6… 45.60.0.60, 45.60.6.60