How the analysis works

A live hostname scan is restricted to a public HTTPS endpoint on TCP port 443. The scanner validates destination addresses, uses SNI, verifies the TLS connection, and summarizes certificate and handshake information.

• Certificate identity, issuer, serial, validity dates, SAN coverage, signature algorithm, and public-key details.
• Negotiated TLS version and cipher suite when the endpoint provides them.
• Findings for expiration, hostname mismatch, weak cryptography, and trust-path concerns.
• A distinction between a live backend scan and a local browser parse, which cannot establish remote trust or handshake state.

How to read the A–F grade

The grade is a compact screening aid derived from observed findings: A means no major finding, B means a warning, C means a significant finding, D means multiple serious findings, and F means fundamental checks are failing. It is not a compliance certification, vulnerability score, or guarantee of safety.

Post-quantum readiness methodology

The Post-Quantum Readiness tab reports signals visible from the endpoint certificate and the scanner’s current TLS handshake data. A classical certificate is reported as classical material observed; it is not labeled “unsafe” and is not treated as proof of organizational non-compliance.

• Certificate evidence: the tool classifies recognized classical or post-quantum signature/public-key names when they are returned.
• TLS key exchange: the current scanner reports when the key-exchange group is not observable; TLS version and cipher alone do not prove hybrid ML-KEM use.
• Scope: the result does not inventory internal certificates, HSMs, VPNs, code-signing keys, applications, or stored data.

Use the result as a migration starting point. Confirm algorithm support and transition requirements against current NIST, browser, certificate-authority, and platform guidance. See the dedicated post-quantum readiness guide for terminology and next steps.

Results are not a complete vulnerability scan, compliance certification, or guarantee of future availability. Confirm important findings with the service owner and current certificate-management records.

Last reviewed: October 2026.