- Issuer
- DNSPod DV TLS RSA CA 2025
- Max TLS
- TLS1.3
- TLS versions
- TLS 1.3 TLS 1.2 TLS 1.1 TLS 1.0
- Cipher
- ECDHE-RSA-AES128-GCM-SHA256
- Expires
- 2/27/2027 ( 115 d)
- HSTS
- Disabled
- OCSP Stapling
- Disabled
- Last scanned
- 11/4/2026, 11:46:12 AM
Report summary
cnb.run currently holds an SSL grade of A (100/100) from CertH TLS health monitoring. The site supports TLS1.3, TLS1.2, does not enable HSTS, and its certificate is issued by DNSPod DV TLS RSA CA 2025 — 115 days left on the certificate. CertH records daily TLS handshake probes into an auditable certificate health trend.
Good — Solid security with only minor issues — e.g. no HSTS preload or not fully leveraging TLS 1.3. The mainstream recommended grade.
cnb.run scores higher than 68% of the 12,269 sites we grade.
Percentile is computed over the 12,269 sites CertH has indexed (including ungraded ones), not an industry census.
Full certificate & config details
- Common Name
- *.cnb.run
- Key
- rsaencryption 2048bit
- Sig Hash
- SHA-256
- Chain
- Complete
- SAN
- *.cnb.run · cnb.run
- Fingerprint
- 87dffc24dd32ac5e1e0396dd34263cb8a40ba82f0862539f4617f7595ca1fd60
What’s working
- TLS 1.3 enabled
- Complete certificate chain
- No legacy TLS or weak ciphers
Score trend
Recent history
| Time | Grade | Score | Issuer |
|---|---|---|---|
| 11/4/2026, 11:46:12 AM | A | 100 | DNSPod DV TLS RSA CA 2025 |
| 9/10/2026, 1:44:35 PM | A | 95 | DNSPod DV TLS RSA CA 2025 |
Score change insights · Last 90 days
Net change ↑ +5-
↑
11/4/2026 +5TLS version support improvedAlso observedCAA: — → —
FAQ
When does cnb.run’s certificate expire?
cnb.run’s certificate expires on 2/27/2027, in 115 days, issued by DNSPod DV TLS RSA CA 2025.
Is cnb.run’s TLS configuration secure?
cnb.run currently scores A (100/100). It negotiates TLS1.3, TLS1.2 and does not enable HSTS.
Why did cnb.run’s score change?
11/4/2026: +5 points — TLS version support improved