crabston.ch SSL Score: A (100/100)

A 100/100

Issuer: Google Trust Services
Max TLS: TLS1.3
TLS versions: TLS 1.3 TLS 1.2 TLS 1.1 TLS 1.0
Cipher: ECDHE-ECDSA-CHACHA20-POLY1305
Expires: 1/20/2027 ( 78 d)
HSTS: ✓ Enabled
OCSP Stapling: Disabled
Last scanned: 11/4/2026, 11:47:17 AM

SSL tools Certificate Inspector SSL handshake tracer Certificate Transparency lookup

Report summary

crabston.ch currently holds an SSL grade of A (100/100) from CertH TLS health monitoring. The site supports TLS1.3, TLS1.2, has HSTS enabled, and its certificate is issued by Google Trust Services — 78 days left on the certificate. CertH records daily TLS handshake probes into an auditable certificate health trend.

Good — Solid security with only minor issues — e.g. no HSTS preload or not fully leveraging TLS 1.3. The mainstream recommended grade.

crabston.ch scores higher than 68% of the 12,269 sites we grade.

Percentile is computed over the 12,269 sites CertH has indexed (including ungraded ones), not an industry census.

Full certificate & config details

Common Name: crabston.ch
Key: ec 256bit
Sig Hash: SHA-256
Chain: Complete
SAN: crabston.ch · *.crabston.ch
Fingerprint: e3f43c48958cf1a0b87ac73b1bc6b32565d0a8e175ad473dc8695569d2741e59

Explain variables

CAA

issue "pki.goog; cansignhttpexchanges=yes" · issuewild "ssl.com" · issuewild "letsencrypt.org" · issuewild "digicert.com; cansignhttpexchanges=yes" · issue "digicert.com; cansignhttpexchanges=yes" · issuewild "pki.goog; cansignhttpexchanges=yes" · issuewild "comodoca.com" · issue "ssl.com" · issue "comodoca.com" · issue "letsencrypt.org"

CT SCT

Must-Staple

✗

HSTS preloadable

✗

Risk flags

No notable risks

What’s working

TLS 1.3 enabled
Complete certificate chain
No legacy TLS or weak ciphers

Score trend

Recent history

Time	Grade	Score	Issuer
11/4/2026, 11:47:17 AM	A	100	Google Trust Services
10/6/2026, 4:04:05 PM	A	95	Google Trust Services

Score change insights · Last 90 days

Net change ↑ +5

↑

11/4/2026 +5

Certificate rotatedTLS version support improved

Also observedCAA: — → issue "pki.goog; cansignhttpexchanges=yes", issuewild "ssl.com", issuewild "letsencrypt.org", issuewild "digicert.com; cansignhttpexchanges=yes", issue "digicert.com; cansignhttpexchanges=yes", issuewild "pki.goog; cansignhttpexchanges=yes", issuewild "comodoca.com", issue "ssl.com", issue "comodoca.com", issue "letsencrypt.org"

FAQ

When does crabston.ch’s certificate expire?

crabston.ch’s certificate expires on 1/20/2027, in 78 days, issued by Google Trust Services.

Is crabston.ch’s TLS configuration secure?

crabston.ch currently scores A (100/100). It negotiates TLS1.3, TLS1.2 and has HSTS enabled.

Why did crabston.ch’s score change?

11/4/2026: +5 points — Certificate rotated · TLS version support improved