CertH certH

cnb.cool SSL Score & TLS Health Report

A+ 100/100
View the in-depth report on SSL Labs
Issuer
DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1
Max TLS
TLS1.3
TLS versions
TLS 1.3 TLS 1.2 TLS 1.1 TLS 1.0
Cipher
ECDHE-RSA-AES128-GCM-SHA256
Expires
3/17/2027 ( 131 d)
HSTS
✓ Enabled
OCSP Stapling
Disabled
Last scanned
11/4/2026, 11:46:12 AM
SSL tools Certificate Inspector SSL handshake tracer Certificate Transparency lookup

Report summary

cnb.cool currently holds an SSL grade of A+ (100/100) from CertH TLS health monitoring. The site supports TLS1.3, TLS1.2, has HSTS enabled, and its certificate is issued by DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1 — 131 days left on the certificate. CertH records daily TLS handshake probes into an auditable certificate health trend.

Excellent — A near-perfect setup: TLS 1.3, strong ciphers, full forward secrecy (PFS) and correctly enabled HSTS. First choice for finance, payments and other high-stakes businesses.

cnb.cool scores higher than 99% of the 12,269 sites we grade.

Percentile is computed over the 12,269 sites CertH has indexed (including ungraded ones), not an industry census.

Last scanned 2 days ago — this data may be stale

Full certificate & config details

Common Name
*.cnb.cool
Key
rsaencryption 2048bit
Sig Hash
SHA-256
Chain
Complete
SAN
*.cnb.cool · cnb.cool
Fingerprint
eba6fa8d2917a8c29f922af26c5bf9267dff2370133ceb21a489762fda16ff51
Explain variables
CAA
None (any CA may issue)
CT SCT
3
Must-Staple
✗
HSTS preloadable
✗
Risk flags
No notable risks

What’s working

  • TLS 1.3 enabled
  • HSTS enabled with a long max-age
  • Complete certificate chain
  • No legacy TLS or weak ciphers

Score trend

02550751009/10/2026, 1:44:11 PM · 95 (A)11/4/2026, 11:46:12 AM · 100 (A+)

Recent history

TimeGrade ScoreIssuer
11/4/2026, 11:46:12 AMA+100DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1
9/10/2026, 1:44:11 PMA95DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1

Score change insights · Last 90 days

Net change ↑ +5
  • ↑
    11/4/2026 +5 A → A+
    TLS version support improved
    Also observedCAA: — → —

FAQ

When does cnb.cool’s certificate expire?

cnb.cool’s certificate expires on 3/17/2027, in 131 days, issued by DigiCert Secure Site OV G2 TLS CN RSA4096 SHA256 2022 CA1.

Is cnb.cool’s TLS configuration secure?

cnb.cool currently scores A+ (100/100). It negotiates TLS1.3, TLS1.2 and has HSTS enabled.

Why did cnb.cool’s score change?

11/4/2026: +5 points — TLS version support improved