CertH certH

incomplete-chain.badssl.com SSL Score & TLS Health Report

A 95/100
View the in-depth report on SSL Labs
Issuer
Let's Encrypt
Max TLS
TLS1.2
TLS versions
TLS 1.3 TLS 1.2 TLS 1.1 TLS 1.0
Cipher
ECDHE-RSA-AES128-GCM-SHA256
Expires
12/28/2026 ( 52 d)
HSTS
Disabled
OCSP Stapling
Disabled
Last scanned
11/4/2026, 9:51:20 AM

Why is the score low?

A · 95/100
  • -5
    TLS 1.3 not enabled
    Enable TLS 1.3 on the server
SSL tools Certificate Inspector SSL handshake tracer Certificate Transparency lookup

Report summary

incomplete-chain.badssl.com currently holds an SSL grade of A (95/100) from CertH TLS health monitoring. The site supports TLS1.2, does not enable HSTS, and its certificate is issued by Let's Encrypt — 52 days left on the certificate. CertH records daily TLS handshake probes into an auditable certificate health trend.

Good — Solid security with only minor issues — e.g. no HSTS preload or not fully leveraging TLS 1.3. The mainstream recommended grade.

incomplete-chain.badssl.com scores higher than 68% of the 12,269 sites we grade.

Percentile is computed over the 12,269 sites CertH has indexed (including ungraded ones), not an industry census.

Last scanned 2 days ago — this data may be stale

Full certificate & config details

Common Name
*.badssl.com
Key
rsaencryption 2048bit
Sig Hash
SHA-256
Chain
Incomplete or broken
SAN
*.badssl.com · badssl.com
Fingerprint
101154813e8fdab6ba4fab575185c1a13944bcec1d849ae2cd94a073494997e3
Explain variables
CAA
None (any CA may issue)
CT SCT
2
Must-Staple
✗
HSTS preloadable
✗
Risk flags
No notable risks

What’s working

  • No legacy TLS or weak ciphers

Score trend

No history yet — run a scan to start the trend.

Recent history

TimeGrade ScoreIssuer
11/4/2026, 9:51:20 AMA95Let's Encrypt

Score change insights · Last 90 days

No score changes recorded yet. Once snapshots accumulate, this section shows why the score moved.

FAQ

When does incomplete-chain.badssl.com’s certificate expire?

incomplete-chain.badssl.com’s certificate expires on 12/28/2026, in 52 days, issued by Let's Encrypt.

Is incomplete-chain.badssl.com’s TLS configuration secure?

incomplete-chain.badssl.com currently scores A (95/100). It negotiates TLS1.2 and does not enable HSTS.

Why did incomplete-chain.badssl.com’s score change?

No score changes were recorded for incomplete-chain.badssl.com in the last 90 days.