Certificate Overview
Valid Host Names | Matched | adexpress.news-record.com www.adexpress.news-record.com | |
---|---|---|---|
Expires | in 3 years | Valid after Feb 5, 2014 | |
Trust | Trusted | The certificate was issued by Go Daddy Secure Certificate Authority - G2 |
Security
Encryption Ciphers | Weak | Weak encryption ciphers are supported. These are deprecated, and their removal will offer increased security. | |
---|---|---|---|
Public Key Size | 2048 bits | Key sizes 1024 bits or larger are considered secure. Be aware that unnecessarily large key sizes will slow down the connection establishment. | |
Secure Renegotiation | No | This server is vulnerable to man-in-the-middle attacks by allowing insecure renegotiation. | |
Protocols | Insecure | Server supports SSLv2. This is a deprecated and insecure protocol which should be disabled. |
Performance
HTTP Keepalive | Yes | ||
---|---|---|---|
SSL Session Cache | No | SSL Session caching allows faster re-establishment of a cached SSL session, improving user experience | |
TLS Stateless Resume | No | TLS stateless resume allows for faster re-connections to TLS enabled servers, without needing session state to be stored on the server. | |
SSL Handshake Size | 5855 bytes | The amount of data exchanged to establish a session with this server is large. This will result in a slower initial connection. Using a certificate with fewer intermediate chains and / or a smaller public key size can reduce the amount of data. |
Encryption Ciphers (TLS/SSLv3)
Cipher | Strength | Algo | Key | KeyEx | Handshake | ||
---|---|---|---|---|---|---|---|
DHE-RSA-AES256-SHA | High | AES | 256-bit | DH | 166ms | 5703 bytes | |
AES256-SHA | High | AES | 256-bit | RSA | 156ms | 5301 bytes | |
EDH-RSA-DES-CBC3-SHA | High | 3DES | 168-bit | DH | 157ms | 5687 bytes | |
DES-CBC3-SHA | High | 3DES | 168-bit | RSA | 157ms | 5285 bytes | |
DHE-RSA-AES128-SHA | High | AES | 128-bit | DH | 164ms | 5703 bytes | |
AES128-SHA | High | AES | 128-bit | RSA | 159ms | 5301 bytes | |
IDEA-CBC-SHA | Medium | IDEA | 128-bit | RSA | 157ms | 5285 bytes | |
RC4-SHA | Medium | RC4 | 128-bit | RSA | 153ms | 5277 bytes | |
RC4-MD5 | Medium | RC4 | 128-bit | RSA | 155ms | 5269 bytes | |
EDH-RSA-DES-CBC-SHA | Low | DES | 56-bit | DH | 159ms | 5687 bytes | |
DES-CBC-SHA | Low | DES | 56-bit | RSA | 156ms | 5285 bytes | |
EXP-EDH-RSA-DES-CBC-SHA | Export | DES | 40-bit | DH | 135ms | 5495 bytes | |
EXP-DES-CBC-SHA | Export | DES | 40-bit | RSA | 128ms | 5431 bytes | |
EXP-RC2-CBC-MD5 | Export | RC2 | 40-bit | RSA | 129ms | 5431 bytes | |
EXP-RC4-MD5 | Export | RC4 | 40-bit | RSA | 125ms | 5415 bytes |