- Issuer
- Let's Encrypt
- Max TLS
- TLS1.3
- Cipher
- ECDHE-RSA-AES128-GCM-SHA256
- Expires
- 12/8/2026 ( 35 d)
- HSTS
- ✓ Enabled
- OCSP Stapling
- Disabled
- Last scanned
- 10/6/2026, 4:11:48 PM
Report summary
nicholas-krebs.ch currently holds an SSL grade of A+ (100/100) from CertH TLS health monitoring. The site supports TLS1.3, TLS1.2, has HSTS enabled, and its certificate is issued by Let's Encrypt — 35 days left on the certificate. CertH records daily TLS handshake probes into an auditable certificate health trend.
Excellent — A near-perfect setup: TLS 1.3, strong ciphers, full forward secrecy (PFS) and correctly enabled HSTS. First choice for finance, payments and other high-stakes businesses.
nicholas-krebs.ch scores higher than 99% of the 12,267 sites we grade.
Last scanned 28 days ago — this data may be stale
Full certificate & config details
- Common Name
- nicholas-krebs.ch
- Key
- rsaencryption 2048bit
- Sig Hash
- SHA-256
- SAN
- nicholas-krebs.ch
- Fingerprint
- 21daf5c9b801e760ff3d53769cd14bdbd9649eddae70bf04c4de825336ee1aa3
What’s working
- TLS 1.3 enabled
- HSTS enabled with a long max-age
- Complete certificate chain
- No legacy TLS or weak ciphers
Score trend
Recent history
| Time | Grade | Score | Issuer |
|---|---|---|---|
| 10/6/2026, 4:11:48 PM | A+ | 100 | Let's Encrypt |
Score change insights · Last 90 days
No score changes recorded yet. Once snapshots accumulate, this section shows why the score moved.
FAQ
When does nicholas-krebs.ch’s certificate expire?
nicholas-krebs.ch’s certificate expires on 12/8/2026, in 35 days, issued by Let's Encrypt.
Is nicholas-krebs.ch’s TLS configuration secure?
nicholas-krebs.ch currently scores A+ (100/100). It negotiates TLS1.3, TLS1.2 and has HSTS enabled.
Why did nicholas-krebs.ch’s score change?
No score changes were recorded for nicholas-krebs.ch in the last 90 days.