SSL Report:
gilead.com
(40.70.27.35)
Assessed on: Wed, 26 Nov 2025 18:08:24 UTC
| Clear cache
Summary
0
20
40
60
80
100
Certificate
Protocol Support
Key Exchange
Cipher Strength
Visit our documentation page
for more information, configuration guides, and books. Known issues are documented
here.
This site works only in browsers with SNI support.
This server supports TLS 1.3. MORE INFO »
Certificate #1: RSA 2048 bits (SHA256withRSA)
|
Server Key and Certificate #1
|
|
| Subject |
Gilead.com
Fingerprint SHA256: 092266f32ce20950c3eeb88201f8304efba45e355cb0006610329ecb043ab26c Pin SHA256: pf5TCLSWyA7vUQTojrDwF/0zLAlP+jLmoyLUW7BT7WA= |
| Common names | Gilead.com |
| Alternative names | Gilead.com agencyaat.gilead.com agencyam1.gilead.com agencyam103.gilead.com agencyamd2.gilead.com agencycmp.gilead.com agencyd.gilead.com agencyea2.gilead.com agencyeat2.gilead.com agencysolr2.gilead.com digitalexperienceamd.gilead.com digitalexperienceamd1.gilead.com digitalexperienceamt.gilead.com digitalexperiencecmp2.gilead.com digitalexperiencecmpd2.gilead.com digitalexperienceead.gilead.com digitalexperienceead103.gilead.com digitalexperienceeat2.gilead.com digitalexperiencesolrd1.gilead.com digitalexperiencesolrt1.gilead.com digitalexperiencet1.gilead.com wwwcmp103.gilead.com wwwcmpd103.gilead.com wwwsolrd103.gilead.com storiesamd.gilead.com storiescmpd1.gilead.com storiescmpt.gilead.com storiesead1.gilead.com agencyaad.gilead.com agencyamt1.gilead.com agencycmp1.gilead.com agencycmp2.gilead.com agencycmpd103.gilead.com agencyd103.gilead.com agencyead103.gilead.com agencyt.gilead.com agencyt103.gilead.com digitalexperienceaad.gilead.com digitalexperiencecmp1.gilead.com digitalexperiencecmpt.gilead.com digitalexperienced2.gilead.com digitalexperiencesolrd103.gilead.com digitalexperience.gilead.com wwwam.gilead.com wwwamt.gilead.com wwwcmp.gilead.com wwwcmpd.gilead.com wwwd2.gilead.com wwwead103.gilead.com wwwsolr2.gilead.com storiesam103.gilead.com storiesamd103.gilead.com storiescmp.gilead.com storiescmpd.gilead.com storiescmpd103.gilead.com storiescmpd2.gilead.com storiescmpt103.gilead.com storiesd103.gilead.com storiesea1.gilead.com storiesea2.gilead.com storiessolr.gilead.com storiessolr103.gilead.com storiessolrd1.gilead.com storiest2.gilead.com agencyamt.gilead.com agencyamt103.gilead.com agencycmpd2.gilead.com agencycmpt103.gilead.com agencyea103.gilead.com wwwamd1.gilead.com wwwcmpd1.gilead.com wwwcmpt.gilead.com wwwcmpt1.gilead.com wwwcmpt2.gilead.com wwwd103.gilead.com wwwea103.gilead.com wwwea2.gilead.com wwweat2.gilead.com storiesaad.gilead.com storiesamt.gilead.com storieseat1.gilead.com storieseat2.gilead.com storiessolr1.gilead.com storiessolr2.gilead.com digitalexperienceamd103.gilead.com digitalexperienceamd2.gilead.com digitalexperienceamt1.gilead.com digitalexperienceamt2.gilead.com digitalexperiencecmpt2.gilead.com digitalexperienceea1.gilead.com digitalexperienceeat1.gilead.com digitalexperiencesolr2.gilead.com digitalexperiencet103.gilead.com agencyaa.gilead.com agencycmpt.gilead.com agencyead.gilead.com agencyead1.gilead.com agencysolrd.gilead.com agencysolrt1.gilead.com agencysolrt2.gilead.com digitalexperiencecmpd.gilead.com digitalexperiencecmpt103.gilead.com digitalexperienced103.gilead.com digitalexperienceea103.gilead.com digitalexperienceea2.gilead.com digitalexperienceead2.gilead.com digitalexperienceeat103.gilead.com digitalexperiencesolr.gilead.com digitalexperiencesolr1.gilead.com digitalexperiencesolrt103.gilead.com digitalexperiencesolrt2.gilead.com wwwaat.gilead.com wwwamd2.gilead.com wwwamt103.gilead.com wwwsolrt2.gilead.com wwwt.gilead.com storiesamd1.gilead.com storiesamd2.gilead.com storiesamt2.gilead.com storiescmp103.gilead.com storiesd1.gilead.com storiesead.gilead.com storiessolrd2.gilead.com storiessolrt2.gilead.com agencyamd.gilead.com agencyamd1.gilead.com agencyd2.gilead.com agencyead2.gilead.com agencyeat103.gilead.com agencysolrd1.gilead.com agencysolrt.gilead.com agencyt1.gilead.com agency.gilead.com digitalexperiencecmp103.gilead.com digitalexperiencecmpd103.gilead.com digitalexperienceead1.gilead.com wwwaad.gilead.com wwwcmp2.gilead.com wwwead1.gilead.com wwweat.gilead.com wwweat1.gilead.com wwwsolr.gilead.com storiesaat.gilead.com storiesam2.gilead.com storiesamt103.gilead.com storiescmpt2.gilead.com storiesead103.gilead.com storiessolrt.gilead.com storiest.gilead.com storiest1.gilead.com www.gilead.com agencyamd103.gilead.com agencycmpd1.gilead.com agencycmpt1.gilead.com agencycmpt2.gilead.com agencyd1.gilead.com agencyeat1.gilead.com agencysolr103.gilead.com agencysolrd103.gilead.com agencysolrd2.gilead.com agencysolrt103.gilead.com agencyt2.gilead.com wwwamd.gilead.com wwwamt1.gilead.com wwwd.gilead.com wwwead.gilead.com wwwsolrd2.gilead.com wwwt103.gilead.com wwwaa.gilead.com storiesamt1.gilead.com storiescmp1.gilead.com storiesead2.gilead.com storieseat103.gilead.com storiessolrt1.gilead.com digitalexperienceaat.gilead.com digitalexperienceam1.gilead.com digitalexperienceamt103.gilead.com digitalexperiencecmp.gilead.com digitalexperiencecmpd1.gilead.com digitalexperienced.gilead.com agencyam2.gilead.com agencyamt2.gilead.com agencysolr.gilead.com agencysolr1.gilead.com digitalexperienced1.gilead.com digitalexperienceea.gilead.com digitalexperiencesolrd.gilead.com digitalexperiencet.gilead.com digitalexperiencet2.gilead.com wwwam1.gilead.com wwwam103.gilead.com wwwamt2.gilead.com wwwcmp1.gilead.com wwwd1.gilead.com wwwea.gilead.com wwwea1.gilead.com wwwead2.gilead.com wwweat103.gilead.com wwwsolr103.gilead.com wwwsolrd1.gilead.com stories.gilead.com storiesaa.gilead.com storiesam.gilead.com storiesam1.gilead.com storiescmp2.gilead.com storiescmpt1.gilead.com storiesd2.gilead.com storiesea.gilead.com storiessolrd.gilead.com wwwam2.gilead.com wwwamd103.gilead.com wwwcmpd2.gilead.com wwwcmpt103.gilead.com wwwsolr1.gilead.com wwwsolrd.gilead.com wwwsolrt.gilead.com wwwsolrt1.gilead.com wwwsolrt103.gilead.com wwwt1.gilead.com wwwt2.gilead.com storiesd.gilead.com storiesea103.gilead.com storieseat.gilead.com storiessolrd103.gilead.com storiessolrt103.gilead.com storiest103.gilead.com digitalexperienceaa.gilead.com digitalexperienceam.gilead.com digitalexperienceam103.gilead.com digitalexperienceam2.gilead.com digitalexperiencecmpt1.gilead.com digitalexperienceeat.gilead.com digitalexperiencesolr103.gilead.com digitalexperiencesolrd2.gilead.com digitalexperiencesolrt.gilead.com agencyam.gilead.com agencycmp103.gilead.com agencycmpd.gilead.com agencyea.gilead.com agencyea1.gilead.com agencyeat.gilead.com |
| Serial Number | 0d616e327887d4ff02e8bb9a0e6c9bf3 |
| Valid from | Thu, 16 Jan 2025 00:00:00 UTC |
| Valid until | Fri, 06 Feb 2026 23:59:59 UTC (expires in 2 months and 11 days) |
| Key | RSA 2048 bits (e 65537) |
| Weak key (Debian) | No |
| Issuer | DigiCert Global G2 TLS RSA SHA256 2020 CA1
AIA: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt |
| Signature algorithm | SHA256withRSA |
| Extended Validation | No |
| Certificate Transparency | Yes (certificate) |
| OCSP Must Staple | No |
| Revocation information |
CRL, OCSP CRL: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl OCSP: http://ocsp.digicert.com |
| Revocation status | Good (not revoked)
CRL ERROR: IOException occurred |
| DNS CAA | No (more info) |
| Trusted | Yes
Mozilla Apple Android Java Windows |
Certification Paths |
Certificate #2: RSA 2048 bits (SHA384withRSA)
No SNI
|
Certification Paths |
Configuration
| Protocols | |
| TLS 1.3 | Yes |
| TLS 1.2 | Yes* |
| TLS 1.1 | No |
| TLS 1.0 | No |
| SSL 3 | No |
| SSL 2 | No |
| (*) Experimental: Server negotiated using No-SNI | |
| Cipher Suites | ||
|
# TLS 1.3 (suites in server-preferred order)
|
||
TLS_AES_256_GCM_SHA384 (0x1302)
ECDH secp521r1 (eq. 15360 bits RSA) FS
|
256 | |
TLS_AES_128_GCM_SHA256 (0x1301)
ECDH secp256r1 (eq. 3072 bits RSA) FS
|
128 | |
|
# TLS 1.2 (suites in server-preferred order)
|
||
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030)
ECDH secp521r1 (eq. 15360 bits RSA) FS
|
256 | |
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f)
ECDH secp256r1 (eq. 3072 bits RSA) FS
|
128 | |
| Handshake Simulation | |||
| Android 4.4.2 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
| Android 5.0.0 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
| Android 6.0 | RSA 2048 (SHA256) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
| Android 7.0 | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp384r1 FS |
| Android 8.0 | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp384r1 FS |
| Android 8.1 | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH secp384r1 FS |
| Android 9.0 | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH secp384r1 FS |
| BingPreview Jan 2015 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
| Chrome 49 / XP SP3 | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
| Chrome 69 / Win 7 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp384r1 FS |
| Chrome 70 / Win 10 | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH secp384r1 FS |
| Chrome 80 / Win 10 R | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH secp384r1 FS |
| Firefox 31.3.0 ESR / Win 7 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
| Firefox 47 / Win 7 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
| Firefox 49 / XP SP3 | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
| Firefox 62 / Win 7 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
| Firefox 73 / Win 10 R | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH secp521r1 FS |
| Googlebot Feb 2018 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp384r1 FS |
| IE 11 / Win 7 R |
Server closed connection |
||
| IE 11 / Win 8.1 R |
Server closed connection |
||
| IE 11 / Win Phone 8.1 R |
Server closed connection |
||
| IE 11 / Win Phone 8.1 Update R |
Server closed connection |
||
| IE 11 / Win 10 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp384r1 FS |
| Edge 15 / Win 10 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp384r1 FS |
| Edge 16 / Win 10 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp384r1 FS |
| Edge 18 / Win 10 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp384r1 FS |
| Edge 13 / Win Phone 10 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp384r1 FS |
| Java 8u161 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
| Java 11.0.3 | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH secp521r1 FS |
| Java 12.0.1 | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH secp521r1 FS |
| OpenSSL 1.0.1l R | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
| OpenSSL 1.0.2s R | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
| OpenSSL 1.1.0k R | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
| OpenSSL 1.1.1c R | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH secp521r1 FS |
| Safari 6 / iOS 6.0.1 |
Server closed connection |
||
| Safari 7 / iOS 7.1 R |
Server closed connection |
||
| Safari 7 / OS X 10.9 R |
Server closed connection |
||
| Safari 8 / iOS 8.4 R |
Server closed connection |
||
| Safari 8 / OS X 10.10 R |
Server closed connection |
||
| Safari 9 / iOS 9 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
| Safari 9 / OS X 10.11 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
| Safari 10 / iOS 10 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
| Safari 10 / OS X 10.12 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
| Safari 12.1.2 / MacOS 10.14.6 Beta R | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH secp521r1 FS |
| Safari 12.1.1 / iOS 12.3.1 R | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH secp521r1 FS |
| Apple ATS 9 / iOS 9 R | RSA 2048 (SHA256) | TLS 1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
| Yahoo Slurp Jan 2015 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp384r1 FS |
| YandexBot Jan 2015 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
|
# Not simulated clients (Protocol mismatch)
|
|||
| Android 2.3.7 No SNI 2 |
Protocol mismatch (not simulated) |
||
| Android 4.0.4 |
Protocol mismatch (not simulated) |
||
| Android 4.1.1 |
Protocol mismatch (not simulated) |
||
| Android 4.2.2 |
Protocol mismatch (not simulated) |
||
| Android 4.3 |
Protocol mismatch (not simulated) |
||
| Baidu Jan 2015 |
Protocol mismatch (not simulated) |
||
| IE 6 / XP No FS 1 No SNI 2 |
Protocol mismatch (not simulated) |
||
| IE 7 / Vista |
Protocol mismatch (not simulated) |
||
| IE 8 / XP No FS 1 No SNI 2 |
Protocol mismatch (not simulated) |
||
| IE 8-10 / Win 7 R |
Protocol mismatch (not simulated) |
||
| IE 10 / Win Phone 8.0 |
Protocol mismatch (not simulated) |
||
| Java 6u45 No SNI 2 |
Protocol mismatch (not simulated) |
||
| Java 7u25 |
Protocol mismatch (not simulated) |
||
| OpenSSL 0.9.8y |
Protocol mismatch (not simulated) |
||
| Safari 5.1.9 / OS X 10.6.8 |
Protocol mismatch (not simulated) |
||
| Safari 6.0.4 / OS X 10.8.4 R |
Protocol mismatch (not simulated) |
||
| (1) Clients that do not support Forward Secrecy (FS) are excluded when determining support for it. | |||
| (2) No support for virtual SSL hosting (SNI). Connects to the default site if the server uses SNI. | |||
| (3) Only first connection attempt simulated. Browsers sometimes retry with a lower protocol version. | |||
| (R) Denotes a reference browser or client, with which we expect better effective security. | |||
| (All) We use defaults, but some platforms do not use their best protocols and features (e.g., Java 6 & 7, older IE). | |||
| (All) Certificate trust is not checked in handshake simulation, we only perform TLS handshake. | |||
| Protocol Details | |
| Secure Renegotiation | Supported |
| Secure Client-Initiated Renegotiation | No |
| Insecure Client-Initiated Renegotiation | No |
| BEAST attack | Mitigated server-side (more info) |
| POODLE (SSLv3) | No, SSL 3 not supported (more info) |
| POODLE (TLS) | No (more info) |
| Zombie POODLE | No (more info) |
| GOLDENDOODLE | No (more info) |
| OpenSSL 0-Length | No (more info) |
| Sleeping POODLE | No (more info) |
| Downgrade attack prevention | No, TLS_FALLBACK_SCSV not supported (more info) |
| SSL/TLS compression | No |
| RC4 | No |
| Heartbeat (extension) | No |
| Heartbleed (vulnerability) | No (more info) |
| Ticketbleed (vulnerability) | No (more info) |
| OpenSSL CCS vuln. (CVE-2014-0224) | No (more info) |
| OpenSSL Padding Oracle vuln. (CVE-2016-2107) |
No (more info) |
| ROBOT (vulnerability) | No (more info) |
| Forward Secrecy | Yes (with most browsers) ROBUST (more info) |
| ALPN | Yes h2 http/1.1 |
| NPN | No |
| Session resumption (caching) | No (IDs assigned but not accepted) |
| Session resumption (tickets) | No |
| OCSP stapling | Yes |
| Strict Transport Security (HSTS) | No |
| HSTS Preloading | Not in: Chrome Edge Firefox IE |
| Public Key Pinning (HPKP) | No (more info) |
| Public Key Pinning Report-Only | No |
| Public Key Pinning (Static) | No (more info) |
| Long handshake intolerance | No |
| TLS extension intolerance | No |
| TLS version intolerance | No |
| Incorrect SNI alerts | No |
| Uses common DH primes | No, DHE suites not supported |
| DH public server param (Ys) reuse | No, DHE suites not supported |
| ECDH public server param reuse | No |
| Supported Named Groups | secp521r1, secp384r1, secp256r1 (server preferred order) |
| SSL 2 handshake compatibility | No |
| 0-RTT enabled | No |
|
HTTP Requests
|
|
1 https://gilead.com/
(HTTP/1.1 301 Moved Permanently)
| 1 | |
| Content-Length | 0 | |
| Connection | close | |
| Date | Wed, 26 Nov 2025 18:07:44 GMT | |
| Server | Microsoft-IIS/10.0 | |
| Location | https://www.gilead.com/ | |
| Set-Cookie | ARRAffinity=c0bcf0869a648d0079585ecb32de70d3ba0b9cc8d6fdf8bb40b42f4a431796d4;Path=/;HttpOnly;Secure;Domain=gilead.com | |
| Set-Cookie | ARRAffinitySameSite=c0bcf0869a648d0079585ecb32de70d3ba0b9cc8d6fdf8bb40b42f4a431796d4;Path=/;HttpOnly;SameSite=None;Secure;Domain=gilead.com | |
| X-Powered-By | ASP.NET | |
| Miscellaneous | |
| Test date | Wed, 26 Nov 2025 18:07:27 UTC |
| Test duration | 56.617 seconds |
| HTTP status code | 301 |
| HTTP forwarding | https://www.gilead.com |
| HTTP server signature | Microsoft-IIS/10.0 |
| Server hostname | - |
SSL Report v2.4.1