github.com, 140.82.121.4:443

TLS Test Results from August 17 2026 22:18:19 UTC. Scan took 114 seconds.

Summary

Finding	Severity	Result
OCSP Revoked	WARN
TLS 1.2	OK	offered
TLS 1.3	OK	offered with final
Perfect Forward Secrecy	OK	offered
Common Name (CN)	OK	github.com
Subject Alternative Name (SAN)	INFO	github.com www.github.com
CA Issuers	INFO	Sectigo Public Server Authentication CA DV R36 (Sectigo Limited from GB)
Valid Not After	OK	2026-11-01 23:59

Protocols

Version	Status
SSL v2	not offered
SSL v3	not offered
TLS 1.0	not offered
TLS 1.1	not offered
TLS 1.2	offered
TLS 1.3	offered with final
ALPN HTTP2	h2
ALPN / HTTP2	http/1.1

How do you like TestTLS?

Seriously? All five?!

I’m flattered, thanks a lot! Your hair looks beautiful!

While we're both riding this wave of joy, would you to give @testtls_com a shoutout on Twitter?

Not too bad, but not perfect.

Thanks a lot, I’m glad that you liked this website!

If you like, follow @testtls_com on Twitter to hear about new features as they are added.

Honest feedback, much appreciated!

So you think that this site could be better, understood.

Would you tell us what’s missing? Reach out either via @testtls_com or e-mail.

Almost 2.5 stars. Oh, boy!

So you think this website is shit, I get it.

Note to self: do not encourage users who rated below 3 stars to comment at @testtls_com.

Ouch, that hurts.

Father? Is that you? What can I do so that you will finally be proud of me?

Let me guess... you would have chosen zero stars if it were available, right? Let it all out via e-mail.

Cipher Categories

Category	Status
NULL ciphers (no encryption)	not offered
Anonymous NULL Ciphers (no authentication)	not offered
Export ciphers (excluding ADH+NULL)	not offered
LOW: 64 Bit + DES, RC[2,4] (excluding export)	not offered
Triple DES Ciphers / IDEA	not offered
Obsolete CBC ciphers (AES, ARIA etc.)	offered
Strong encryption (AEAD ciphers)	offered

Perfect Forward Secrecy

Category	Status
Perfect Forward Secrecy	offered
PFS Ciphers	ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-SHA384 ECDHE-ECDSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA
PFS ECDHE Curves	prime256v1

Server Preferences

Category	Finding
Cipher Order	server
Protocol Negotiated	Default protocol TLS1.3
Cipher Negotiated	TLS_AES_128_GCM_SHA256, 253 bit ECDH (X25519)
Cipher Order TLS v1.2	ECDHE-ECDSA-AES128-GCM-SHA256

Server Defaults

Category	Finding
TLS Extensions	renegotiation info/#65281 server name/#0 EC point formats/#11 supported versions/#43 key share/#51 supported_groups/#10 max fragment length/#1 application layer protocol negotiation/#16 encrypt-then-mac/#22 extended master secret/#23
TLS Session Ticket	no -- no lifetime advertised
SSL Session-ID Support	yes
Session Resumption Ticket	not supported
Session Resumption ID	not supported
TLS Timestamp	random
Number of Certificates	2

Certificate #1

Category	Finding
Signature Algorithm	SHA256 with RSA
Key Size	RSA 4096 bits
Key Usage	Digital Signature, Key Encipherment
Extended Key Usage	TLS Web Server Authentication
Serial Number	890314DF04F85724DAB9B0942EE2BC05
SHA1 Fingerprint	CFC308D753D2657A4F78729630EEE250815EADA2
SHA256 Fingerprint	6A6984DE4486D95D21770DD9E910BF65DBEADF2D582DEC06EABA882B482DE7EA
X.509 Certificate	Download github.com_443_CFC308D7.pem
Common Name (CN)	github.com
Common Name w/o SNI	github.com
Subject Alternative Name (SAN)	github.com www.github.com
CA Issuers	Sectigo Public Server Authentication CA DV R36 (Sectigo Limited from GB)
Certificate Trust	Ok via SAN (same w/o SNI)
Chain Of Trust	passed.
Extended-Validation Policies	no
ETS (prev. "eTLS")	not present
Expiration Status	76 >= 60 days
Valid Not Before	2026-08-04 00:00
Valid Not After	2026-11-01 23:59
Validity Period	No finding
Certificate Count Server	3
Certs List Ordering Problem	no
Leaked Key (pwnedkeys)	not in database
CRL Distribution Points	--
OCSP Revoked
OCSP URL	http://ocsp.sectigo.com
OCSP Stapling	not offered
OCSP Must Staple Extension	--
DNS CAA Record	issue=digicert.com, issue=globalsign.com, issue=letsencrypt.org, issue=sectigo.com, issuewild=digicert.com, issuewild=letsencrypt.org, issuewild=sectigo.com
Certificate Transparency	yes (certificate extension)

Certificate #2

Category	Finding
Signature Algorithm	ECDSA with SHA256
Key Size	EC 256 bits
Key Usage	Digital Signature
Extended Key Usage	TLS Web Server Authentication
Serial Number	72010E03F4A067FE4E796266430718F6
SHA1 Fingerprint	A5471F8766FEAFB2EE469970AEDA6C614D14B21B
SHA256 Fingerprint	17F8FD2E3FD2C113FCB9772D8A4BABB8522DD06DD0794915A4FF98B1B6863A00
X.509 Certificate	Download github.com_443_A5471F87.pem
Common Name (CN)	github.com
Common Name w/o SNI	github.com
Subject Alternative Name (SAN)	github.com www.github.com
CA Issuers	Sectigo Public Server Authentication CA DV E36 (Sectigo Limited from GB)
Certificate Trust	Ok via SAN (same w/o SNI)
Chain Of Trust	passed.
Extended-Validation Policies	no
ETS (prev. "eTLS")	not present
Expiration Status	expires < 60 days (44)
Valid Not Before	2026-07-03 00:00
Valid Not After	2026-09-30 23:59
Validity Period	No finding
Certificate Count Server	3
Certs List Ordering Problem	no
Leaked Key (pwnedkeys)	not in database
CRL Distribution Points	--
OCSP Revoked
OCSP URL	http://ocsp.sectigo.com
OCSP Stapling	not offered
OCSP Must Staple Extension	--
DNS CAA Record	issue=digicert.com, issue=globalsign.com, issue=letsencrypt.org, issue=sectigo.com, issuewild=digicert.com, issuewild=letsencrypt.org, issuewild=sectigo.com
Certificate Transparency	yes (certificate extension)

HTTP response

Category	Finding
HTTP Status Code	200 OK ('/')
HTTP Clock Skew	-1 seconds from localtime
HSTS Expiration Time	365 days (=31536000 seconds) > 15552000 seconds
HSTS Subdomains	includes subdomains
HSTS Preload	domain IS marked for preloading
Server Banner	github.com
Banner Application	No application banner found
Cookie Count	3 at '/'
Secure Cookie	All (3) at '/' marked as secure
HTTP-only Cookie	3/3 at '/' marked as HttpOnly
Reverse Proxy Banner	--

Vulnerabilities

Category	Finding
Heartbleed	not vulnerable, no heartbeat extension
CCS	not vulnerable
Ticketbleed	no session ticket extension
ROBOT	not vulnerable
Secure Renegotiation	supported
Secure Client Renegotiation	not vulnerable
CRIME TLS	not vulnerable
BREACH	potentially VULNERABLE, gzip HTTP compression detected - only supplied '/' tested
POODLE SSL	not vulnerable, no SSLv3
Fallback SCSV	no protocol below TLS 1.2 offered
SWEET32	not vulnerable
FREAK	not vulnerable
DROWN	not vulnerable on this host and port
DROWN Hint	Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see censys.io
LOGJAM	not vulnerable, no DH EXPORT ciphers,
LOGJAM Common Primes	no DH key with <= TLS 1.2
BEAST	not vulnerable, no SSL3 or TLS1
LUCKY13	potentially vulnerable, uses TLS CBC ciphers
RC4	not vulnerable

Ciphers

Name	Key Exchange	Encryption	Key Length	IANA ID
ECDHE-RSA-AES256-GCM-SHA384	ECDH 256	AESGCM	256	xc030
ECDHE-ECDSA-AES256-GCM-SHA384	ECDH 256	AESGCM	256	xc02c
ECDHE-RSA-AES256-SHA384	ECDH 256	AES	256	xc028
ECDHE-ECDSA-AES256-SHA384	ECDH 256	AES	256	xc024
ECDHE-RSA-AES256-SHA	ECDH 256	AES	256	xc014
ECDHE-ECDSA-AES256-SHA	ECDH 256	AES	256	xc00a
AES256-GCM-SHA384	RSA	AESGCM	256	x9d
AES256-SHA256	RSA	AES	256	x3d
AES256-SHA	RSA	AES	256	x35
ECDHE-RSA-AES128-GCM-SHA256	ECDH 256	AESGCM	128	xc02f
ECDHE-ECDSA-AES128-GCM-SHA256	ECDH 256	AESGCM	128	xc02b
ECDHE-RSA-AES128-SHA256	ECDH 256	AES	128	xc027
ECDHE-ECDSA-AES128-SHA256	ECDH 256	AES	128	xc023
AES128-GCM-SHA256	RSA	AESGCM	128	x9c
AES128-SHA256	RSA	AES	128	x3c
AES128-SHA	RSA	AES	128	x2f

Client Simulation

Category	Connection via
Android 4.4.2	TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
Android 5.0	TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
Android 6.0	TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
Android 7.0	TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
Android 8.1	TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
Android 9.0	TLSv1.3 TLS_AES_128_GCM_SHA256
Android X	TLSv1.3 TLS_AES_128_GCM_SHA256
Chrome 74 Windows 10	TLSv1.3 TLS_AES_128_GCM_SHA256
Chrome 79 Windows 10	TLSv1.3 TLS_AES_128_GCM_SHA256
Firefox 66 Windows 8.1/10	TLSv1.3 TLS_AES_128_GCM_SHA256
Firefox 71 Windows 10	TLSv1.3 TLS_AES_128_GCM_SHA256
IE 6 Windows XP	No connection
IE 8 Windows 7	No connection
IE 8 Windows XP	No connection
IE 11 Windows 7	TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
IE 11 Windows 8.1	TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
IE 11 Windows Phone 8.1	TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
IE 11 Windows 10	TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
Edge 15 Windows 10	TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
Edge 17 Windows 10	TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
Opera 66 Windows 10	TLSv1.3 TLS_AES_128_GCM_SHA256
Safari 9 IOS9	TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
Safari 9 OSX 10.11	TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
Safari 10 OSX 10.12	TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
Safari 12.1 iOS 12.2	TLSv1.3 TLS_CHACHA20_POLY1305_SHA256
Safari 13.0 OSX 10.14.6	TLSv1.3 TLS_CHACHA20_POLY1305_SHA256
Apple ATS 9 IOS9	TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
Java 6u45	No connection
Java 7u25	No connection
Java 8u161	TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
Java 11.0.2 (OpenJDK)	TLSv1.3 TLS_AES_128_GCM_SHA256
Java 12.0.1 (OpenJDK)	TLSv1.3 TLS_AES_128_GCM_SHA256
OpenSSL 1.02e	TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
OpenSSL 1.10l (Debian)	TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
OpenSSL 1.11d (Debian)	TLSv1.3 TLS_AES_128_GCM_SHA256
Thunderbird 68.3	TLSv1.3 TLS_AES_128_GCM_SHA256

About

Contact