- Issuer
- Amazon RSA 2048 M01
- Max TLS
- TLS1.3
- Cipher
- ECDHE-RSA-AES128-GCM-SHA256
- Expires
- 1/5/2027 ( 64 d)
- HSTS
- ✓ Enabled
- OCSP Stapling
- Disabled
- Last scanned
- 9/9/2026, 8:22:58 PM
Report summary
manhattan.institute currently holds an SSL grade of A+ (100/100) from CertH TLS health monitoring. The site supports TLS1.3, TLS1.2, has HSTS enabled, and its certificate is issued by Amazon RSA 2048 M01 — 64 days left on the certificate. CertH records daily TLS handshake probes into an auditable certificate health trend.
Excellent — A near-perfect setup: TLS 1.3, strong ciphers, full forward secrecy (PFS) and correctly enabled HSTS. First choice for finance, payments and other high-stakes businesses.
manhattan.institute scores higher than 99% of the 12,267 sites we grade.
Last scanned 55 days ago — this data may be stale
Full certificate & config details
- Common Name
- *.manhattan.institute
- Key
- rsaencryption 2048bit
- Sig Hash
- SHA-256
- SAN
- *.manhattan.institute · manhattan.institute
- Fingerprint
- cb25d281ab5793ecd1c46599718d29d4ef818212d70c10dadda31cf376365a9b
What’s working
- TLS 1.3 enabled
- HSTS enabled with a long max-age
- Complete certificate chain
- No legacy TLS or weak ciphers
Score trend
Recent history
| Time | Grade | Score | Issuer |
|---|---|---|---|
| 9/9/2026, 8:22:58 PM | A+ | 100 | Amazon RSA 2048 M01 |
| 9/8/2026, 6:29:51 PM | A | 94 | Amazon |
Score change insights · Last 90 days
Net change ↑ +6-
↑
9/9/2026 +6 A → A+Key strength changed
FAQ
When does manhattan.institute’s certificate expire?
manhattan.institute’s certificate expires on 1/5/2027, in 64 days, issued by Amazon RSA 2048 M01.
Is manhattan.institute’s TLS configuration secure?
manhattan.institute currently scores A+ (100/100). It negotiates TLS1.3, TLS1.2 and has HSTS enabled.
Why did manhattan.institute’s score change?
9/9/2026: +6 points — Key strength changed