Testing for online vulnerabilities for your website is part of both PCI compliance, but is now the best practice for systems admins around the world. Making sure your web-server is secure, and your systems are reasonably safe is a priority. Use these tools to help develop a testing regimen to treat your systems and make sure that they are healthy. https://www.ssllabs.com/ssltest/ https://www.sslchecker.com/sslchecker https://www.sslshopper.com/ssl-checker.html https://www.howsmyssl.com https://sslanalyzer.comodoca.com https://www.htbridge.com/ssl/ https://www.wormly.com/test_ssl https://www.thesslstore.com/ssltools/ssl-checker.php https://www.digicert.com/help/ Other build your own option: https://prbinu.github.io/tls-scan/ Notes: SSL Cipher Suite: ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384!DSS SSL/TLS Protocols TLSv1.3 TLSv1.2 |