SSL Report:
mare-drupal.azurewebsites.us
(52.235.253.103)
Assessed on: Thu, 11 Sep 2025 18:53:46 UTC
| Clear cache
Summary
0
20
40
60
80
100
Certificate
Protocol Support
Key Exchange
Cipher Strength
Visit our documentation page
for more information, configuration guides, and books. Known issues are documented
here.
This server supports TLS 1.3. MORE INFO »
HTTP Strict Transport Security (HSTS) with long duration deployed on this server.
MORE INFO »
DNS Certification Authority Authorization (CAA) Policy found for this domain.
MORE INFO »
Certificate #1: RSA 2048 bits (SHA384withRSA)



![]() ![]() |
Configuration

Protocols | |
TLS 1.3 | Yes |
TLS 1.2 | Yes |
TLS 1.1 | No |
TLS 1.0 | No |
SSL 3 | No |
SSL 2 | No |

Cipher Suites | ||
![]() ![]() # TLS 1.3 (suites in server-preferred order)
|
||
TLS_AES_256_GCM_SHA384 (0x1302 )
ECDH secp521r1 (eq. 15360 bits RSA) FS
|
256 | |
TLS_AES_128_GCM_SHA256 (0x1301 )
ECDH secp256r1 (eq. 3072 bits RSA) FS
|
128 | |
![]() ![]() # TLS 1.2 (suites in server-preferred order)
|
||
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030 )
ECDH secp521r1 (eq. 15360 bits RSA) FS
|
256 | |
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f )
ECDH secp256r1 (eq. 3072 bits RSA) FS
|
128 |

Handshake Simulation | |||
Android 4.4.2 | RSA 2048 (SHA384) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
Android 5.0.0 | RSA 2048 (SHA384) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
Android 6.0 | RSA 2048 (SHA384) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
Android 7.0 | RSA 2048 (SHA384) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp384r1 FS |
Android 8.0 | RSA 2048 (SHA384) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp384r1 FS |
Android 8.1 | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH secp384r1 FS |
Android 9.0 | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH secp384r1 FS |
BingPreview Jan 2015 | RSA 2048 (SHA384) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
Chrome 49 / XP SP3 | RSA 2048 (SHA384) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
Chrome 69 / Win 7 R | RSA 2048 (SHA384) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp384r1 FS |
Chrome 70 / Win 10 | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH secp384r1 FS |
Chrome 80 / Win 10 R | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH secp384r1 FS |
Firefox 31.3.0 ESR / Win 7 | RSA 2048 (SHA384) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
Firefox 47 / Win 7 R | RSA 2048 (SHA384) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
Firefox 49 / XP SP3 | RSA 2048 (SHA384) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
Firefox 62 / Win 7 R | RSA 2048 (SHA384) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
Firefox 73 / Win 10 R | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH secp521r1 FS |
Googlebot Feb 2018 | RSA 2048 (SHA384) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp384r1 FS |
IE 11 / Win 7 R |
Server closed connection |
||
IE 11 / Win 8.1 R |
Server closed connection |
||
IE 11 / Win Phone 8.1 R |
Server closed connection |
||
IE 11 / Win Phone 8.1 Update R |
Server closed connection |
||
IE 11 / Win 10 R | RSA 2048 (SHA384) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp384r1 FS |
Edge 15 / Win 10 R | RSA 2048 (SHA384) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp384r1 FS |
Edge 16 / Win 10 R | RSA 2048 (SHA384) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp384r1 FS |
Edge 18 / Win 10 R | RSA 2048 (SHA384) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp384r1 FS |
Edge 13 / Win Phone 10 R | RSA 2048 (SHA384) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp384r1 FS |
Java 8u161 | RSA 2048 (SHA384) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
Java 11.0.3 | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH secp521r1 FS |
Java 12.0.1 | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH secp521r1 FS |
OpenSSL 1.0.1l R | RSA 2048 (SHA384) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
OpenSSL 1.0.2s R | RSA 2048 (SHA384) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
OpenSSL 1.1.0k R | RSA 2048 (SHA384) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
OpenSSL 1.1.1c R | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH secp521r1 FS |
Safari 6 / iOS 6.0.1 |
Server closed connection |
||
Safari 7 / iOS 7.1 R |
Server closed connection |
||
Safari 7 / OS X 10.9 R |
Server closed connection |
||
Safari 8 / iOS 8.4 R |
Server closed connection |
||
Safari 8 / OS X 10.10 R |
Server closed connection |
||
Safari 9 / iOS 9 R | RSA 2048 (SHA384) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
Safari 9 / OS X 10.11 R | RSA 2048 (SHA384) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
Safari 10 / iOS 10 R | RSA 2048 (SHA384) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
Safari 10 / OS X 10.12 R | RSA 2048 (SHA384) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
Safari 12.1.2 / MacOS 10.14.6 Beta R | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH secp521r1 FS |
Safari 12.1.1 / iOS 12.3.1 R | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH secp521r1 FS |
Apple ATS 9 / iOS 9 R | RSA 2048 (SHA384) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
Yahoo Slurp Jan 2015 | RSA 2048 (SHA384) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp384r1 FS |
YandexBot Jan 2015 | RSA 2048 (SHA384) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp521r1 FS |
![]() ![]() # Not simulated clients (Protocol mismatch)
|
|||
Android 2.3.7 No SNI 2 |
Protocol mismatch (not simulated) |
||
Android 4.0.4 |
Protocol mismatch (not simulated) |
||
Android 4.1.1 |
Protocol mismatch (not simulated) |
||
Android 4.2.2 |
Protocol mismatch (not simulated) |
||
Android 4.3 |
Protocol mismatch (not simulated) |
||
Baidu Jan 2015 |
Protocol mismatch (not simulated) |
||
IE 6 / XP No FS 1 No SNI 2 |
Protocol mismatch (not simulated) |
||
IE 7 / Vista |
Protocol mismatch (not simulated) |
||
IE 8 / XP No FS 1 No SNI 2 |
Protocol mismatch (not simulated) |
||
IE 8-10 / Win 7 R |
Protocol mismatch (not simulated) |
||
IE 10 / Win Phone 8.0 |
Protocol mismatch (not simulated) |
||
Java 6u45 No SNI 2 |
Protocol mismatch (not simulated) |
||
Java 7u25 |
Protocol mismatch (not simulated) |
||
OpenSSL 0.9.8y |
Protocol mismatch (not simulated) |
||
Safari 5.1.9 / OS X 10.6.8 |
Protocol mismatch (not simulated) |
||
Safari 6.0.4 / OS X 10.8.4 R |
Protocol mismatch (not simulated) |
||
(1) Clients that do not support Forward Secrecy (FS) are excluded when determining support for it. | |||
(2) No support for virtual SSL hosting (SNI). Connects to the default site if the server uses SNI. | |||
(3) Only first connection attempt simulated. Browsers sometimes retry with a lower protocol version. | |||
(R) Denotes a reference browser or client, with which we expect better effective security. | |||
(All) We use defaults, but some platforms do not use their best protocols and features (e.g., Java 6 & 7, older IE). | |||
(All) Certificate trust is not checked in handshake simulation, we only perform TLS handshake. |

Protocol Details | |
Secure Renegotiation | Supported |
Secure Client-Initiated Renegotiation | No |
Insecure Client-Initiated Renegotiation | No |
BEAST attack | Mitigated server-side (more info) |
POODLE (SSLv3) | No, SSL 3 not supported (more info) |
POODLE (TLS) | No (more info) |
Zombie POODLE | No (more info) |
GOLDENDOODLE | No (more info) |
OpenSSL 0-Length | No (more info) |
Sleeping POODLE | No (more info) |
Downgrade attack prevention | No, TLS_FALLBACK_SCSV not supported (more info) |
SSL/TLS compression | No |
RC4 | No |
Heartbeat (extension) | No |
Heartbleed (vulnerability) | No (more info) |
Ticketbleed (vulnerability) | No (more info) |
OpenSSL CCS vuln. (CVE-2014-0224) | No (more info) |
OpenSSL Padding Oracle vuln. (CVE-2016-2107) |
No (more info) |
ROBOT (vulnerability) | No (more info) |
Forward Secrecy | Yes (with most browsers) ROBUST (more info) |
ALPN | Yes http/1.1 |
NPN | No |
Session resumption (caching) | No (IDs assigned but not accepted) |
Session resumption (tickets) | No |
OCSP stapling | Yes |
Strict Transport Security (HSTS) | Yes
max-age=31536000; includeSubDomains; preload |
HSTS Preloading | Not in: Chrome Edge Firefox IE |
Public Key Pinning (HPKP) | No (more info) |
Public Key Pinning Report-Only | No |
Public Key Pinning (Static) | No (more info) |
Long handshake intolerance | No |
TLS extension intolerance | No |
TLS version intolerance | No |
Incorrect SNI alerts | No |
Uses common DH primes | No, DHE suites not supported |
DH public server param (Ys) reuse | No, DHE suites not supported |
ECDH public server param reuse | No |
Supported Named Groups | secp521r1, secp384r1, secp256r1 (server preferred order) |
SSL 2 handshake compatibility | No |
0-RTT enabled | No |

![]() ![]() |
1 https://mare-drupal.azurewebsites.us/
(HTTP/1.1 200 OK)
| 1 | |
Content-Length | 63076 | |
Connection | close | |
Content-Type | text/html; charset=UTF-8 | |
Date | Mon, 08 Sep 2025 18:23:52 GMT | |
Server | nginx/1.28.0 | |
Cache-Control | must-revalidate, no-cache, private | |
Content-Language | en | |
Expires | Sun, 19 Nov 1978 05:00:00 GMT | |
Set-Cookie | ARRAffinity=ff8509c7ad418a4d463699587257e4d9bc6990d056e972b6ad13a7f3285239f8;Path=/;HttpOnly;Secure;Domain=mare-drupal.azurewebsites.us | |
Set-Cookie | ARRAffinitySameSite=ff8509c7ad418a4d463699587257e4d9bc6990d056e972b6ad13a7f3285239f8;Path=/;HttpOnly;SameSite=None;Secure;Domain=mare-drupal.azurewebsites.us | |
Strict-Transport-Security | max-age=31536000; includeSubDomains; preload | |
X-Powered-By | PHP/8.2.29 | |
X-Drupal-Dynamic-Cache | MISS | |
X-Content-Type-Options | nosniff | |
X-Content-Type-Options | nosniff | |
X-Frame-Options | SAMEORIGIN | |
X-Frame-Options | SAMEORIGIN | |
X-Generator | Drupal 10 (https://www.drupal.org) | |
Surrogate-Key | config:block_list config:block.block.trailhead_theme_meetthechildrenreact config:block.block.familydetailsreact user:0 config:block.block.familydirectoryreact config:block.block.inquiryoutcomereportreact config:block.block.inquiryoutcomesadminreact config:block.block.searchforachildreact config:block.block.trailhead_theme_addchildreact config:block.block.trailhead_theme_adoptionworkeradminreact config:block.block.trailhead_theme_alertadminreact config:block.block.trailhead_theme_childadministrationreact config:block.block.trailhead_theme_familiesuseradminreact config:block.block.trailhead_theme_familyadministrationreact config:block.block.trailhead_theme_familyprofilereact config:block.block.trailhead_theme_familysubmitinquiryreact config:block.block.trailhead_theme_holdsadminreact config:block.block.trailhead_theme_inquiriesadminreact config:block.block.trailhead_theme_marechildprofilereact config:block.block.trailhead_theme_marepublicchildprofilesreact config:block.block.trailhead_theme_recentlymatchedreact config:block.block.trailhead_theme_sixmonthholdreportreact config:block.block.trailhead_theme_userprofilereact config:block.block.trailhead_theme_userregistrationreact config:block.block.trailhead_theme_viewmatchingchildrenreact config:block.block.trailhead_theme_viewmatchingfamiliesreact config:block.block.trailhead_theme_workerprofilereact config:block.block.trailhead_theme_workersubmitinquiryreact config:block.block.workerdashboardreact config:block.block.breadcrumbs config:block.block.messages config:block.block.pagetitle config:block.block.tabs config:block.block.views_block__alerts_list config:block.block.mainnavigation config:block.block.mainnavigation_2 config:block.block.mainpagecontent config:block.block.trailhead_theme_footermenu node:27 node:28 node:29 node:30 config:system.menu.footer-multi-menu-4 node:21 node:22 node:23 node:24 node:25 node:26 config:system.menu.footer-multi-menu-3 node:15 node:16 node:17 node:19 node:20 config:system.menu.footer-multi-menu-2 node:11 node:12 node:13 config:system.menu.footer-multi-menu-1 file:19 file:18 file:17 block_view node_view node:2 config:paragraphs.settings paragraph_view paragraph:19 paragraph:20 media_view media:8 config:core.entity_view_display.media.remote_video.default config:media.settings config:core.entity_view_display.paragraph.section.default paragraph:7 paragraph:6 config:core.entity_view_display.paragraph.view.default config:views.view.events node_list node:41 paragraph:14 paragraph:18 paragraph:17 paragraph:23 paragraph:25 paragraph:24 paragraph:11 paragraph:22 config:core.entity_view_display.paragraph.block.default paragraph:8 paragraph:10 config:filter.format.full_html paragraph:9 user:1 config:system.site local_task config:views.view.alerts node:4 node:37 config:system.menu.main node:33 node:140 node:141 node:142 node:143 config:webform.webform.general_adoption_information_inq webform:general_adoption_information_inq config:webform.settings node:144 node:151 node:147 node:122 node:39 node:153 node:155 node:156 node:157 node:9 node:164 node:162 node:165 node:166 node:167 node:170 node:158 node:127 node:134 node:160 node:129 node:46 node:119 node:124 node:120 node:123 node:126 node:121 node:138 node:168 node:169 node:152 node:44 node:154 node:43 node:163 node:161 node:148 node:149 node:150 node:137 config:system.menu.upper config:core.entity_view_display.menu_link_content.upper.default menu_link_content:8 menu_link_content:7 menu_link_content:6 rendered http_response config:user.role.anonymous | |
Permissions-Policy | encrypted-media=(self "https://mare-services.azurewebsites.us"), fullscreen=*, geolocation=(self "https://mare-services.azurewebsites.us") | |
Content-Security-Policy | report-uri /report-csp-violation | |
Referrer-Policy | strict-origin-when-cross-origin | |
Referrer-Policy | same-origin | |
X-Drupal-Cache | HIT |

Miscellaneous | |
Test date | Thu, 11 Sep 2025 18:52:42 UTC |
Test duration | 63.843 seconds |
HTTP status code | 200 |
HTTP server signature | nginx/1.28.0 |
Server hostname | - |
SSL Report v2.4.1