CertH certH

caddy.community SSL Score & TLS Health Report

Issuer
Let's Encrypt
Max TLS
TLS1.3
TLS versions
TLS 1.3 TLS 1.2 TLS 1.1 TLS 1.0
Cipher
ECDHE-ECDSA-AES128-GCM-SHA256
Expires
12/24/2026 ( 48 d)
HSTS
Disabled
OCSP Stapling
Disabled
Last scanned
11/4/2026, 11:17:58 AM

Why is the score low?

A · 98/100
  • -2
    Certificate chain too long
    Optimize the chain; remove extra intermediate certificates

Report summary

caddy.community currently holds an SSL grade of A (98/100) from CertH TLS health monitoring. The site supports TLS1.3, TLS1.2, does not enable HSTS, and its certificate is issued by Let's Encrypt — 48 days left on the certificate. CertH records daily TLS handshake probes into an auditable certificate health trend.

Good — Solid security with only minor issues — e.g. no HSTS preload or not fully leveraging TLS 1.3. The mainstream recommended grade.

caddy.community scores higher than 68% of the 12,269 sites we grade.

Percentile is computed over the 12,269 sites CertH has indexed (including ungraded ones), not an industry census.

Last scanned 2 days ago — this data may be stale

Full certificate & config details

Common Name
caddy.community
Key
ec 256bit
Sig Hash
SHA-384
Chain
Wrong order
SAN
caddy.community
Fingerprint
f328e9f8e161cb8b42936cd6c2110398106441bf3c068be0fe312c4b386dc0e2
Explain variables
CAA
None (any CA may issue)
CT SCT
2
Must-Staple
✗
HSTS preloadable
✗
Risk flags
No notable risks

What’s working

  • TLS 1.3 enabled
  • No legacy TLS or weak ciphers

Score trend

02550751009/8/2026, 6:29:51 PM · 85 (B)9/9/2026, 7:52:33 PM · 98 (A)11/4/2026, 11:17:58 AM · 98 (A)

Recent history

TimeGrade ScoreIssuer
11/4/2026, 11:17:58 AMA98Let's Encrypt
9/9/2026, 7:52:33 PMA98Let's Encrypt
9/8/2026, 6:29:51 PMB85Let's Encrypt

Score change insights · Last 90 days

Net change ↑ +13
  • ↑
    9/9/2026 +13 B → A
    Config scoring adjustment

FAQ

When does caddy.community’s certificate expire?

caddy.community’s certificate expires on 12/24/2026, in 48 days, issued by Let's Encrypt.

Is caddy.community’s TLS configuration secure?

caddy.community currently scores A (98/100). It negotiates TLS1.3, TLS1.2 and does not enable HSTS.

Why did caddy.community’s score change?

9/9/2026: +13 points — Config scoring adjustment