expireddomains.com SSL Score: A (100/100)

A 100/100

Issuer: Google Trust Services
Max TLS: TLS1.3
TLS versions: TLS 1.3 TLS 1.2 TLS 1.1 TLS 1.0
Cipher: ECDHE-ECDSA-CHACHA20-POLY1305
Expires: 1/25/2027 ( 82 d)
HSTS: Disabled
OCSP Stapling: Disabled
Last scanned: 11/4/2026, 11:54:32 AM

SSL tools Certificate Inspector SSL handshake tracer Certificate Transparency lookup

Report summary

expireddomains.com currently holds an SSL grade of A (100/100) from CertH TLS health monitoring. The site supports TLS1.3, TLS1.2, does not enable HSTS, and its certificate is issued by Google Trust Services — 82 days left on the certificate. CertH records daily TLS handshake probes into an auditable certificate health trend.

Good — Solid security with only minor issues — e.g. no HSTS preload or not fully leveraging TLS 1.3. The mainstream recommended grade.

expireddomains.com scores higher than 68% of the 12,269 sites we grade.

Percentile is computed over the 12,269 sites CertH has indexed (including ungraded ones), not an industry census.

Full certificate & config details

Common Name: expireddomains.com
Key: ec 256bit
Sig Hash: SHA-256
Chain: Complete
SAN: expireddomains.com · *.expireddomains.com
Fingerprint: 52c5f831a9908eaf9fd46843731349b0ea3f37e832da55e4ba2fa6b2c6be9e27

Explain variables

CAA

issuewild "digicert.com; cansignhttpexchanges=yes" · issuewild "comodoca.com" · issue "pki.goog; cansignhttpexchanges=yes" · issue "comodoca.com" · issue "letsencrypt.org" · issuewild "pki.goog; cansignhttpexchanges=yes" · issue "digicert.com; cansignhttpexchanges=yes" · issuewild "letsencrypt.org" · issuewild "ssl.com" · issue "ssl.com"

CT SCT

Must-Staple

✗

HSTS preloadable

✗

Risk flags

No notable risks

What’s working

TLS 1.3 enabled
Complete certificate chain
No legacy TLS or weak ciphers

Score trend

Recent history

Time	Grade	Score	Issuer
11/4/2026, 11:54:32 AM	A	100	Google Trust Services
11/3/2026, 3:24:18 AM	A	95	Google Trust Services
11/3/2026, 3:23:58 AM	A	95	Google Trust Services
10/27/2026, 3:23:51 AM	A	95	Google Trust Services
10/27/2026, 3:23:30 AM	A	95	Google Trust Services
10/19/2026, 3:23:58 AM	A	95	Google Trust Services
10/19/2026, 3:23:40 AM	A	95	Google Trust Services
10/11/2026, 3:23:59 AM	A	95	Google Trust Services
10/11/2026, 3:23:41 AM	A	95	Google Trust Services
10/3/2026, 3:24:15 AM	A	95	Google Trust Services
10/3/2026, 3:23:56 AM	A	95	Google Trust Services
9/26/2026, 3:24:03 AM	C	75	Google Trust Services
9/26/2026, 3:23:43 AM	C	75	Google Trust Services
9/18/2026, 3:23:47 AM	C	75	Google Trust Services
9/18/2026, 3:23:27 AM	C	75	Google Trust Services
9/10/2026, 3:24:17 AM	B	87	Google Trust Services
9/10/2026, 3:23:57 AM	B	87	Google Trust Services

Score change insights · Last 90 days

Net change ↑ +13

↑

10/3/2026 +20 C → A

Certificate rotated
↓

9/18/2026 -12 B → C

Config scoring adjustment
↑

11/4/2026 +5

TLS version support improved

Also observedCAA: — → issuewild "digicert.com; cansignhttpexchanges=yes", issuewild "comodoca.com", issue "pki.goog; cansignhttpexchanges=yes", issue "comodoca.com", issue "letsencrypt.org", issuewild "pki.goog; cansignhttpexchanges=yes", issue "digicert.com; cansignhttpexchanges=yes", issuewild "letsencrypt.org", issuewild "ssl.com", issue "ssl.com"

FAQ

When does expireddomains.com’s certificate expire?

expireddomains.com’s certificate expires on 1/25/2027, in 82 days, issued by Google Trust Services.

Is expireddomains.com’s TLS configuration secure?

expireddomains.com currently scores A (100/100). It negotiates TLS1.3, TLS1.2 and does not enable HSTS.

Why did expireddomains.com’s score change?

10/3/2026: +20 points — Certificate rotated