SSL Check WHOIS
Dashboard / Security Report

midphase.com

Overall grade based on: IPv4: 3 of 3 complete · IPv6: 0 of 3 complete, 3 pending — IPv6 results are added below when their scan finishes; they do not count until then.
IPv6 scan in progress
2606:4700:20::681a:e6a IPv6 · Pending: IPv6 scan not started yet (it runs when the report is opened, or via POST /api/ssl-check/{domain}/ipv6).
2606:4700:20::681a:f6a IPv6 · Pending: IPv6 scan not started yet (it runs when the report is opened, or via POST /api/ssl-check/{domain}/ipv6).
2606:4700:20::ac43:44e6 IPv6 · Pending: IPv6 scan not started yet (it runs when the report is opened, or via POST /api/ssl-check/{domain}/ipv6).

The IPv4 report below is complete. IPv6 results will be added to this page automatically when the scan finishes.

All 3 endpoints share identical configuration Select an IP for owner, ASN & location
A+ 104.26.14.106 IPv4 WHOIS › A+ 104.26.15.106 IPv4 WHOIS › A+ 172.67.68.230 IPv4 WHOIS ›
A+

Exceptional Security

Overall Rating
Assessed 2026-11-07 12:38 UTC

Grade Breakdown

Protocol Support 100%
Key Exchange 90%
Cipher Strength 100%
Certificate 100%

Protocol Configuration

Supported Protocols

TLS 1.3
TLS 1.2
TLS 1.1
TLS 1.0
SSL 3
SSL 2

Negotiated Cipher

TLS_AES_256_GCM_SHA384

Protocol Details

Connection
ALPN h2 http/1.1
SNI Required Yes
Supported Named Groups X25519MLKEM768 X25519Kyber768Draft00 x25519 secp256r1 secp384r1 secp521r1 (server preference order)
Post-Quantum Key Exchange Yes X25519MLKEM768, X25519Kyber768Draft00
HTTP/3 (QUIC) Yes (advertised)
Encrypted Client Hello Yes(ECH config in HTTPS DNS record)
Security Features
Forward SecrecyYes (ECDHE / DHE)
Downgrade Prevention Yes (legacy TLS disabled)
Secure Renegotiation N/A (TLS 1.3 only — no renegotiation)
Extended Master Secret N/A (built into TLS 1.3)
OCSP Stapling Unknown (measured on TLS 1.2 only)
HSTS Yes 2 years · includeSubDomains · preload
HSTS Preloading Not preloadedSubmit →
Security Checks
BEAST attack Mitigated
POODLE (SSLv3) No (SSL 3 not supported)
POODLE (TLS) No
RC4 No
SSL/TLS CompressionNo (not supported by .NET TLS stack)
HeartbleedNot tested

Cipher Suite Analysis

Cipher SuiteHexKey ExchangeFSBitsStrength
# TLS 1.3
TLS_AES_128_GCM_SHA2560x1301ECDHEFS128Secure
TLS_AES_256_GCM_SHA3840x1302ECDHEFS256Secure
TLS_CHACHA20_POLY1305_SHA2560x1303ECDHEFS256Secure

Handshake Simulation

ClientProtocolCipher SuiteResult
Chrome 120 / Win 11TLS 1.3TLS_AES_256_GCM_SHA384Success
Chrome 80 / Win 10TLS 1.3TLS_AES_256_GCM_SHA384Success
Firefox 115 / Win 10TLS 1.3TLS_AES_256_GCM_SHA384Success
iOS 17 / SafariTLS 1.3TLS_CHACHA20_POLY1305_SHA256Success
macOS 14 / SafariTLS 1.3TLS_AES_256_GCM_SHA384Success
Android 14TLS 1.3TLS_AES_128_GCM_SHA256Success
Chrome 69 / Win 7--No
Chrome 49 / XP SP3--No
IE 11 / Win 10--No
IE 11 / Win 7--No
Android 9.0--No
Android 7.0--No
Android 5.0--No
Android 4.4.2--No
Java 11--No
Java 8u121--No
Android 4.0.4--No
Android 4.1.1--No
Baidu Jan 2015--No
Java 6--No

* Simulated based on server's supported protocols and cipher configuration.

Site Access: HTTP and HTTPS

What a visitor typing each address gets, and where its redirects end (up to 5 are followed), as seen from our scanner.

Hosthttp:// (port 80)https:// (port 443)
midphase.com301 → https://www.midphase.com/ → 200 OK301 → https://www.midphase.com/ → 200 OK
www.midphase.com301 → https://www.midphase.com/ → 200 OK200 OK
  • http://midphase.com redirects to HTTPS.

DNS Records

As a public resolver answered for midphase.com. Looked up 2026-11-07 12:38 UTC · today

TypeRecords
A
AAAA
NS
boyd.ns.cloudflare.com gina.ns.cloudflare.com
MX
0 mx.stackmail.com
SPF
v=spf1 ip4:174.127.116.26 +a +mx +ip4:67.212.237.77 +ip4:67.212.237.72 +ip4:67.212.236.169 +ip4:67.212.237.124 +ip6:2607:fc98:0:80:0:0:7add:16cc include:spf.zoho.eu include:eu.transmail.net include:spf.stackmail.com include:spf.mydomainprovider.com -all

Certificate Identity

Common Namemidphase.com
Alt Names *.midphase.com midphase.com
IssuerCN=YE2, O=Let's Encrypt, C=US
Validity 2026-10-26 to 2027-01-24 (78 days remaining)
KeyECDSA 256 bits (sha384ECDSA)
Serial Number05DFDF6216F9F11D9678229BEB9E79EEEE6C
SHA256 Fingerprint 9c7247f020567b961fc9ad35331d4f35c24fd179f2e69482e07e011f56ef36bd
Pin SHA2566QdM+aWgTW9P9jlBJWtJqFpHgYZcLIrOieqZFcy2zGw=

Certificate Properties

Type DV
Cert Transparency Yes (SCT)
OCSP Must Staple No
Revocation Good (not revoked) CRL: http://ye2.c.lencr.org/109.crl No OCSP responder — revocation is published via CRL only (as CA/B Forum rules now allow).
DNS CAA No (missing)
Trusted By Yes Mozilla · Apple · Android · Java · Windows
Name Match Yes
Validity Period 90 days (maximum 200 days for certificates issued then)
Chain IssuesNone

Trust Chain Architecture

End-Entity Certificate
CN=midphase.com (Issuer: CN=YE2, O=Let's Encrypt, C=US)
Intermediate CA
CN=YE2, O=Let's Encrypt, C=US (Issuer: CN=Root YE, O=ISRG, C=US)
Intermediate CA
CN=Root YE, O=ISRG, C=US (Issuer: CN=ISRG Root X2, O=Internet Security Research Group, C=US)
Root Certificate
CN=ISRG Root X2, O=Internet Security Research Group, C=US (Issuer: CN=ISRG Root X2, O=Internet Security Research Group, C=US)

TLS History & Relations

Everything our scans have seen for midphase.com, first seen 2026-11-07; current certificate since 2026-11-07.

Certificates served

Certificate (SHA-256)IssuerValidServed
9c7247f020567b96… current YE22026-10-26 → 2027-01-242026-11-07

Addresses

AddressCertificateSeen
104.26.14.106 9c7247f020567b96… 2026-11-07
104.26.15.106 9c7247f020567b96… 2026-11-07
172.67.68.230 9c7247f020567b96… 2026-11-07

TLS history (a row per change; repeated checks only extend it)

Since → last checked (UTC)GradeTLSCertificatesAddresses
2026-11-07 12:38A+TLS 1.3 9c7247f020567b96… 104.26.14.106, 104.26.15.106, 172.67.68.230

Other hosts seen on the same addresses