Protocols
TLS 1.2 	Yes
TLS 1.1 	Yes*
TLS 1.0 	Yes*
SSL 3 	Yes*
SSL 2 	No
(*) Without JavaScript, this test reliably detects only the highest supported protocol.


Cipher Suites (in order of preference)
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (0xc02b)   Forward Secrecy 	128
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f)   Forward Secrecy 	128
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xc00a)   Forward Secrecy 	256
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xc009)   Forward Secrecy 	128
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013)   Forward Secrecy 	128
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014)   Forward Secrecy 	256
TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA (0xc012)   Forward Secrecy 	112
TLS_ECDHE_ECDSA_WITH_RC4_128_SHA (0xc007)   WEAK		128
TLS_ECDHE_RSA_WITH_RC4_128_SHA (0xc011)   WEAK		128
TLS_DHE_RSA_WITH_AES_128_CBC_SHA (0x33)   Forward Secrecy 	128
TLS_DHE_DSS_WITH_AES_128_CBC_SHA (0x32)   Forward Secrecy2 	128
TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA (0x45)   Forward Secrecy 	128
TLS_DHE_RSA_WITH_AES_256_CBC_SHA (0x39)   Forward Secrecy 	256
TLS_DHE_DSS_WITH_AES_256_CBC_SHA (0x38)   Forward Secrecy2 	256
TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA (0x88)   Forward Secrecy 	256
TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA (0x16)   Forward Secrecy 	112
TLS_RSA_WITH_AES_128_CBC_SHA (0x2f) 	128
TLS_RSA_WITH_CAMELLIA_128_CBC_SHA (0x41) 	128
TLS_RSA_WITH_AES_256_CBC_SHA (0x35) 	256
TLS_RSA_WITH_CAMELLIA_256_CBC_SHA (0x84) 	256
TLS_RSA_WITH_3DES_EDE_CBC_SHA (0xa) 	112
TLS_RSA_WITH_RC4_128_SHA (0x5)   WEAK		128
TLS_RSA_WITH_RC4_128_MD5 (0x4)   WEAK		128
(1) When a browser supports SSL 2, its SSL 2-only suites are shown only on the very first connection to this site. To see the suites, close all browser windows, then open this exact page directly. Don't refresh.
(2) Cannot be used for Forward Secrecy because they require DSA keys, which are effectively limited to 1024 bits.


Protocol Details
Server Name Indication (SNI) 	Yes
Secure Renegotiation 	Yes
TLS compression 	No
Session tickets 	Yes
OCSP stapling 	Yes
Signature algorithms 	SHA256/RSA, SHA384/RSA, SHA1/RSA, SHA256/ECDSA, SHA384/ECDSA, SHA1/ECDSA, SHA256/DSA, SHA1/DSA
Elliptic curves 	secp256r1, secp384r1, secp521r1
Next Protocol Negotiation 	Yes
Application Layer Protocol Negotiation 	No
SSL 2 handshake compatibility 	No

Copyright © 2009-2015 Qualys, Inc. All Rights Reserved. 	Terms and Conditions