- Issuer
- Let's Encrypt
- Max TLS
- TLS1.3
- TLS versions
- TLS 1.3 TLS 1.2 TLS 1.1 TLS 1.0
- Cipher
- ECDHE-ECDSA-CHACHA20-POLY1305
- Expires
- 12/31/2026 ( 55 d)
- HSTS
- ✓ Enabled
- OCSP Stapling
- Disabled
- Last scanned
- 11/4/2026, 1:04:04 PM
Why is the score low?
A · 98/100-
-2
Certificate chain too longOptimize the chain; remove extra intermediate certificates
Report summary
www.oatriver.com currently holds an SSL grade of A (98/100) from CertH TLS health monitoring. The site supports TLS1.3, TLS1.2, has HSTS enabled, and its certificate is issued by Let's Encrypt — 55 days left on the certificate. CertH records daily TLS handshake probes into an auditable certificate health trend.
Good — Solid security with only minor issues — e.g. no HSTS preload or not fully leveraging TLS 1.3. The mainstream recommended grade.
www.oatriver.com scores higher than 68% of the 12,269 sites we grade.
Percentile is computed over the 12,269 sites CertH has indexed (including ungraded ones), not an industry census.
Last scanned 2 days ago — this data may be stale
Full certificate & config details
- Common Name
- oatriver.com
- Key
- ec 256bit
- Sig Hash
- SHA-384
- Chain
- Wrong order
- SAN
- *.oatriver.com · oatriver.com
- Fingerprint
- d84310162bc879bb86f825b34249f7cf15597ea45b42c32846959940f7fe1e36
What’s working
- TLS 1.3 enabled
- No legacy TLS or weak ciphers
Score trend
Recent history
| Time | Grade | Score | Issuer |
|---|---|---|---|
| 11/4/2026, 1:04:04 PM | A | 98 | Let's Encrypt |
| 10/3/2026, 2:14:14 PM | A | 93 | Let's Encrypt |
| 10/3/2026, 2:12:31 PM | A | 93 | Let's Encrypt |
Score change insights · Last 90 days
Net change ↑ +5-
↑
11/4/2026 +5TLS version support improvedAlso observedCAA: — → issuewild "comodoca.com", issuewild "letsencrypt.org", issue "comodoca.com", issue "pki.goog; cansignhttpexchanges=yes", issue "ssl.com", issuewild "ssl.com", issuewild "pki.goog; cansignhttpexchanges=yes", issuewild "digicert.com; cansignhttpexchanges=yes", issue "digicert.com; cansignhttpexchanges=yes", issue "letsencrypt.org"
FAQ
When does www.oatriver.com’s certificate expire?
www.oatriver.com’s certificate expires on 12/31/2026, in 55 days, issued by Let's Encrypt.
Is www.oatriver.com’s TLS configuration secure?
www.oatriver.com currently scores A (98/100). It negotiates TLS1.3, TLS1.2 and has HSTS enabled.
Why did www.oatriver.com’s score change?
11/4/2026: +5 points — TLS version support improved