Live · Certificate + TLS configuration
Website SSL Test
NOC Operator Toolkit
Enter a website. We check its certificate, work out which TLS versions it speaks and how strong the encryption is, and score the lot in plain English.
Live Test
Test a website
Just the address. Add a port with a colon, or paste a full https:// link.
Notes
How this test works
What the four scores mean, and what the tool deliberately does not do.
What does the score mean?
Four things are scored out of 100. Certificate: is it trusted, for the right
name, still valid, with a strong key and signature. Protocol support: which TLS
versions are offered. Key exchange: forward secrecy and key strength.
Cipher strength: the weakest cipher the server would negotiate. They combine into
one overall percentage and a letter grade. A certificate that is untrusted, expired or for the
wrong name is a hard failure (grade T), and still accepting an obsolete TLS
version caps the grade at B.
Which TLS versions are tested?
TLS 1.3, 1.2, 1.1 and 1.0, each with its own
handshake so the tool learns exactly which the server accepts. SSL 2 and
SSL 3 are decades obsolete and cannot be tested reliably, so they are left out.
Can I test a port other than 443?
Yes. Add the port to the address —
example.com:8443 — or paste a full
https:// URL. The default is 443.
Is there an API?
No. The test opens outbound TLS connections from our address, so it is only available from this
page, not as a scriptable endpoint.