September 2016 scan results

There are additional tests performed against the servers, “last ext empty” is when the server rejects connections with last extension in Client Hello being empty.
Test with “more groups” and “more sigalgs” represents connections rejected by server when the groups extension or the signature algorithms extension included undefined codepoints. For “secure renego” tests check if the server that recognises the secure renegotiation extension or signalling cipher suite value, but does not the other, “secure renego ext” for extensions and “secure renego scsv” for the cipher suite value.

SSL/TLS survey of 617341 websites from Alexa's top 1 million
Stats only from connections that did provide valid certificates
(or anonymous DH from servers that do also have valid certificate installed)


Supported Ciphers         Count     Percent
-------------------------+---------+-------
3DES                      530948    86.0056
3DES Only                 458       0.0742
3DES Preferred            1424      0.2307
3DES forced in TLS1.1+    874       0.1416
AES                       613965    99.4531
AES Only                  53257     8.6268
AES-CBC                   613426    99.3658
AES-CBC Only              4167      0.675
AES-GCM                   534925    86.6498
AES-GCM Only              502       0.0813
CAMELLIA                  267704    43.364
CAMELLIA Only             1         0.0002
CHACHA20                  92079     14.9154
CHACHA20 Only             1         0.0002
Insecure                  47164     7.6399
RC4                       141007    22.841
RC4 Only                  89        0.0144
RC4 Preferred             10850     1.7575
RC4 forced in TLS1.1+     5931      0.9607
x:FF 29 3DES Only         499       0.0808
x:FF 29 3DES Preferred    1718      0.2783
x:FF 29 RC4 Only          131       0.0212
x:FF 29 RC4 Preferred     12343     1.9994
x:FF 29 incompatible      493       0.0799
x:FF 35 3DES Only         505       0.0818
x:FF 35 3DES Preferred    1608      0.2605
x:FF 35 RC4 Only          147       0.0238
x:FF 35 RC4 Preferred     12357     2.0016
x:FF 35 incompatible      495       0.0802
x:FF 44 3DES Only         3262      0.5284
x:FF 44 3DES Preferred    6200      1.0043
x:FF 44 incompatible      642       0.104
y:DHE-RSA-SEED-SHA        77072     12.4845
y:IDEA-CBC-SHA            76282     12.3565
y:SEED-SHA                91038     14.7468
z:ADH-AES128-GCM-SHA256   420       0.068
z:ADH-AES128-SHA          636       0.103
z:ADH-AES128-SHA256       275       0.0445
z:ADH-AES256-GCM-SHA384   432       0.07
z:ADH-AES256-SHA          675       0.1093
z:ADH-AES256-SHA256       276       0.0447
z:ADH-CAMELLIA128-SHA     327       0.053
z:ADH-CAMELLIA256-SHA     345       0.0559
z:ADH-DES-CBC-SHA         218       0.0353
z:ADH-DES-CBC3-SHA        642       0.104
z:ADH-RC4-MD5             442       0.0716
z:ADH-SEED-SHA            262       0.0424
z:AECDH-AES128-SHA        7916      1.2823
z:AECDH-AES256-SHA        7961      1.2896
z:AECDH-DES-CBC3-SHA      7860      1.2732
z:AECDH-NULL-SHA          51        0.0083
z:AECDH-RC4-SHA           7371      1.194
z:DES-CBC-MD5             5046      0.8174
z:DES-CBC-SHA             29895     4.8425
z:DES-CBC3-MD5            13554     2.1955
z:ECDHE-RSA-NULL-SHA      57        0.0092
z:EDH-RSA-DES-CBC-SHA     25634     4.1523
z:EXP-ADH-DES-CBC-SHA     131       0.0212
z:EXP-ADH-RC4-MD5         130       0.0211
z:EXP-DES-CBC-SHA         8638      1.3992
z:EXP-EDH-RSA-DES-CBC-SHA 6804      1.1021
z:EXP-RC2-CBC-MD5         10304     1.6691
z:EXP-RC4-MD5             10764     1.7436
z:EXP1024-DES-CBC-SHA     2644      0.4283
z:EXP1024-RC4-SHA         2694      0.4364
z:IDEA-CBC-MD5            1036      0.1678
z:NULL-MD5                174       0.0282
z:NULL-SHA                173       0.028
z:NULL-SHA256             55        0.0089
z:RC2-CBC-MD5             5209      0.8438
z:RC4-64-MD5              550       0.0891

Cipher ordering           Count     Percent
-------------------------+---------+-------
Client side               144584    23.4204
Server side               472757    76.5796

Supported Handshakes      Count     Percent
-------------------------+---------+-------
ADH                       834       0.1351
AECDH                     7967      1.2905
DHE                       341995    55.3981
ECDH                      1         0.0002
ECDHE                     556450    90.1366
ECDHE and DHE             305194    49.4369
RSA                       523699    84.8314

Supported NPN protocols   Count    Percent 
-------------------------+---------+--------
None                      366921    59.4357  
None Only                 366921    59.4357  
h2                        145644    23.5921  
h2 Only                   59        0.0096   
h2-12                     5         0.0008   
h2-14                     2315      0.375    
h2-14 Only                2         0.0003   
h2-16                     65        0.0105   
h2-17                     1150      0.1863   
h2-fb                     42        0.0068   
h2c                       1153      0.1868   
http                      1         0.0002   
http/1                    1         0.0002   
http/1.0                  17848     2.8911   
http/1.1                  250648    40.6012  
http/1.1 Only             79415     12.864   
http1.0                   17        0.0028   
http1.1                   17        0.0028   
https                     1         0.0002   
https Only                1         0.0002   
spdy                      1         0.0002   
spdy/2                    15091     2.4445   
spdy/2 Only               1         0.0002   
spdy/3                    15278     2.4748   
spdy/3.0                  1         0.0002   
spdy/3.1                  110468    17.8942  
spdy/3.1 Only             1         0.0002   
x-mod-spdy/0.9.4.1-0      1         0.0002   
x-mod-spdy/0.9.4.1-146826 71        0.0115   
x-mod-spdy/0.9.4.1-1e75259 2         0.0003   
x-mod-spdy/0.9.4.1-4e5ad45 2         0.0003   
x-mod-spdy/0.9.4.1-51b34c6 1         0.0002   
x-mod-spdy/0.9.4.1-6bd08c0 2         0.0003   
x-mod-spdy/0.9.4.1-ab03b62 1         0.0002   
x-mod-spdy/0.9.4.1-df466c5 1         0.0002   
x-mod-spdy/0.9.4.1-f7ff75d 1         0.0002   
x-mod-spdy/0.9.4.2-146826 84        0.0136   
x-mod-spdy/0.9.4.2-3a57358 3         0.0005   
x-mod-spdy/0.9.4.2-413    8         0.0013   
x-mod-spdy/0.9.4.2-414    1         0.0002   
x-mod-spdy/0.9.4.3-146826 854       0.1383   
x-mod-spdy/0.9.4.3-420    202       0.0327   

Supported PFS             Count     Percent  PFS Percent
-------------------------+---------+--------+-----------
DH,1024bits               108434    17.5647  31.7063
DH,1338bits               1         0.0002   0.0003
DH,2046bits               1         0.0002   0.0003
DH,2048bits               213049    34.5107  62.2959
DH,2049bits               1         0.0002   0.0003
DH,2236bits               91        0.0147   0.0266
DH,2432bits               2         0.0003   0.0006
DH,3072bits               156       0.0253   0.0456
DH,3092bits               1         0.0002   0.0003
DH,4094bits               1         0.0002   0.0003
DH,4096bits               19952     3.2319   5.834
DH,512bits                89        0.0144   0.026
DH,6144bits               1         0.0002   0.0003
DH,768bits                310       0.0502   0.0906
DH,8192bits               5         0.0008   0.0015
ECDH,B-571,570bits        5789      0.9377   1.0403
ECDH,P-192,192bits        82        0.0133   0.0147
ECDH,P-224,224bits        81        0.0131   0.0146
ECDH,P-256,256bits        521108    84.4117  93.6487
ECDH,P-384,384bits        14019     2.2709   2.5194
ECDH,P-521,521bits        17236     2.792    3.0975
Prefer DH,1024bits        37181     6.0228   10.8718
Prefer DH,2048bits        4883      0.791    1.4278
Prefer DH,3072bits        8         0.0013   0.0023
Prefer DH,4096bits        379       0.0614   0.1108
Prefer DH,768bits         33        0.0053   0.0096
Prefer ECDH,B-571,570bits 5568      0.9019   1.0006
Prefer ECDH,P-192,192bits 3         0.0005   0.0005
Prefer ECDH,P-224,224bits 79        0.0128   0.0142
Prefer ECDH,P-256,256bits 489198    79.2428  87.9141
Prefer ECDH,P-384,384bits 11465     1.8572   2.0604
Prefer ECDH,P-521,521bits 16733     2.7105   3.0071
Prefer PFS                565530    91.6074  0
Support PFS               593251    96.0978  0

Supported ECC curves      Count     Percent 
-------------------------+---------+--------
None                      1         0.0002   
None Only                 1         0.0002   
brainpoolP256r1           37819     6.1261   
brainpoolP384r1           37835     6.1287   
brainpoolP512r1           37847     6.1306   
prime192v1                1655      0.2681   
prime256v1                533959    86.4934  
prime256v1 Only           443013    71.7615  
secp160k1                 1531      0.248    
secp160r1                 1545      0.2503   
secp160r2                 1529      0.2477   
secp192k1                 1543      0.2499   
secp224k1                 1614      0.2614   
secp224r1                 5247      0.8499   
secp224r1 Only            2         0.0003   
secp256k1                 40064     6.4898   
secp384r1                 99404     16.102   
secp384r1 Only            7234      1.1718   
secp521r1                 69486     11.2557  
secp521r1 Only            145       0.0235   
sect163k1                 1531      0.248    
sect163k1 Only            3         0.0005   
sect163r1                 1530      0.2478   
sect163r2                 1530      0.2478   
sect193r1                 1530      0.2478   
sect193r2                 1530      0.2478   
sect233k1                 1606      0.2601   
sect233r1                 1606      0.2601   
sect239k1                 1606      0.2601   
sect283k1                 39167     6.3445   
sect283k1 Only            1         0.0002   
sect283r1                 39164     6.344    
sect409k1                 39168     6.3446   
sect409r1                 39167     6.3445   
sect571k1                 39169     6.3448   
sect571r1                 39174     6.3456   
sect571r1 Only            2         0.0003   
server                    38749     6.2768   
server Only               38749     6.2768   

Unsupported curve fallback     Count     Percent 
------------------------------+---------+--------
False                          556236    90.1019  
unknown                        61105     9.8981   

ECC curve ordering        Count     Percent 
-------------------------+---------+--------
                          37735     6.1125   
client                    18709     3.0306   
server                    500010    80.9941  
unknown                   60887     9.8628   

TLSv1.2 PFS supported sigalgs  Count     Percent 
------------------------------+---------+--------
ECDSA-SHA1                     60396     9.7832   
ECDSA-SHA1 Only                4         0.0006   
ECDSA-SHA224                   60341     9.7743   
ECDSA-SHA256                   79253     12.8378  
ECDSA-SHA384                   79228     12.8337  
ECDSA-SHA512                   79233     12.8346  
ECDSA-SHA512 Only              22        0.0036   
RSA-MD5                        19577     3.1712   
RSA-SHA1                       481896    78.0599  
RSA-SHA1 Only                  26070     4.2229   
RSA-SHA224                     411504    66.6575  
RSA-SHA256                     464624    75.2621  
RSA-SHA256 Only                7718      1.2502   
RSA-SHA384                     427149    69.1917  
RSA-SHA384 Only                4         0.0006   
RSA-SHA512                     427025    69.1717  
RSA-SHA512 Only                100       0.0162   

TLSv1.2 PFS ordering           Count     Percent 
------------------------------+---------+--------
client                         291070    47.149   
indeterminate                  44        0.0071   
intolerant                     6217      1.0071   
order-fallback                 6         0.001    
server                         252346    40.8763  
unsupported                    12582     2.0381   

TLSv1.2 PFS sigalg fallback    Count     Percent 
------------------------------+---------+--------
ECDSA SHA1                     60314     9.77     
ECDSA intolerant               218       0.0353   
ECDSA pfs-rsa-SHA512           18785     3.0429   
ECDSA soft-nopfs               9         0.0015   
RSA False                      19392     3.1412   
RSA SHA1                       419870    68.0127  
RSA intolerant                 51966     8.4177   
RSA pfs-ecdsa-SHA512           21        0.0034   
RSA soft-nopfs                 369       0.0598   

Renegotiation             Count     Percent 
-------------------------+---------+--------
False                     3666      0.5938   
insecure                  14566     2.3595   
secure                    599109    97.0467  

Compression               Count     Percent 
-------------------------+---------+--------
1 (zlib compression)      5637      0.9131   
False                     3666      0.5938   
NONE                      608038    98.4931  

TLS session ticket hint   Count     Percent 
-------------------------+---------+--------
1                         3         0.0005   
1 only                    3         0.0005   
2                         1         0.0002   
2 only                    1         0.0002   
5                         6         0.001    
5 only                    6         0.001    
10                        9         0.0015   
10 only                   9         0.0015   
12                        1         0.0002   
12 only                   1         0.0002   
15                        7         0.0011   
15 only                   7         0.0011   
30                        24        0.0039   
30 only                   24        0.0039   
60                        151       0.0245   
60 only                   143       0.0232   
65                        1         0.0002   
65 only                   1         0.0002   
70                        10        0.0016   
70 only                   8         0.0013   
90                        1         0.0002   
90 only                   1         0.0002   
100                       17        0.0028   
100 only                  17        0.0028   
120                       32        0.0052   
120 only                  32        0.0052   
128                       5         0.0008   
128 only                  5         0.0008   
150                       8         0.0013   
150 only                  6         0.001    
180                       99        0.016    
180 only                  98        0.0159   
240                       17        0.0028   
240 only                  17        0.0028   
300                       304473    49.3201  
300 only                  301855    48.896   
302                       1         0.0002   
302 only                  1         0.0002   
360                       2         0.0003   
360 only                  1         0.0002   
400                       6         0.001    
400 only                  6         0.001    
420                       114       0.0185   
420 only                  100       0.0162   
450                       1         0.0002   
450 only                  1         0.0002   
480                       14        0.0023   
480 only                  14        0.0023   
500                       5         0.0008   
500 only                  5         0.0008   
540                       4         0.0006   
540 only                  4         0.0006   
600                       36341     5.8867   
600 only                  36218     5.8668   
660                       1         0.0002   
660 only                  1         0.0002   
700                       1         0.0002   
700 only                  1         0.0002   
720                       2         0.0003   
720 only                  2         0.0003   
840                       2         0.0003   
840 only                  2         0.0003   
900                       1855      0.3005   
900 only                  1836      0.2974   
960                       3         0.0005   
960 only                  3         0.0005   
1200                      3924      0.6356   
1200 only                 3920      0.635    
1320                      1         0.0002   
1320 only                 1         0.0002   
1380                      1         0.0002   
1380 only                 1         0.0002   
1440                      1         0.0002   
1440 only                 1         0.0002   
1500                      10        0.0016   
1500 only                 9         0.0015   
1800                      895       0.145    
1800 only                 886       0.1435   
1920                      1         0.0002   
1920 only                 1         0.0002   
1980                      2         0.0003   
1980 only                 2         0.0003   
2100                      2         0.0003   
2100 only                 1         0.0002   
2400                      6         0.001    
2400 only                 6         0.001    
2700                      10        0.0016   
2700 only                 10        0.0016   
3000                      46        0.0075   
3000 only                 46        0.0075   
3600                      1309      0.212    
3600 only                 1298      0.2103   
3840                      5         0.0008   
3840 only                 5         0.0008   
3900                      1         0.0002   
3900 only                 1         0.0002   
4100                      1         0.0002   
4100 only                 1         0.0002   
4200                      1         0.0002   
4500                      2         0.0003   
4500 only                 2         0.0003   
5160                      1         0.0002   
5160 only                 1         0.0002   
5400                      17        0.0028   
5400 only                 17        0.0028   
6000                      385       0.0624   
6000 only                 385       0.0624   
7200                      15426     2.4988   
7200 only                 15407     2.4957   
7500                      2         0.0003   
7500 only                 2         0.0003   
9000                      2         0.0003   
9000 only                 2         0.0003   
10800                     5668      0.9181   
10800 only                5641      0.9138   
14400                     234       0.0379   
14400 only                234       0.0379   
18000                     8         0.0013   
18000 only                8         0.0013   
21600                     4933      0.7991   
21600 only                4932      0.7989   
25200                     1         0.0002   
25200 only                1         0.0002   
28800                     1747      0.283    
28800 only                1746      0.2828   
30000                     2         0.0003   
30000 only                1         0.0002   
30322                     1         0.0002   
30342                     1         0.0002   
30359                     1         0.0002   
30375                     1         0.0002   
30389                     1         0.0002   
30407                     1         0.0002   
30426                     1         0.0002   
30447                     1         0.0002   
30463                     1         0.0002   
30481                     1         0.0002   
30496                     1         0.0002   
30513                     1         0.0002   
30533                     1         0.0002   
30555                     1         0.0002   
30574                     1         0.0002   
36000                     1425      0.2308   
36000 only                1422      0.2303   
43200                     70        0.0113   
43200 only                70        0.0113   
54000                     1         0.0002   
54000 only                1         0.0002   
60000                     1         0.0002   
60000 only                1         0.0002   
64800                     80026     12.963   
64800 only                80024     12.9627  
72000                     16        0.0026   
72000 only                16        0.0026   
79200                     1         0.0002   
79200 only                1         0.0002   
86400                     3726      0.6036   
86400 only                3720      0.6026   
90000                     1         0.0002   
90000 only                1         0.0002   
100000                    1         0.0002   
100000 only               1         0.0002   
100800                    10409     1.6861   
100800 only               10396     1.684    
108000                    1         0.0002   
108000 only               1         0.0002   
115200                    1         0.0002   
115200 only               1         0.0002   
129600                    7         0.0011   
129600 only               7         0.0011   
172800                    55        0.0089   
172800 only               55        0.0089   
216000                    3         0.0005   
216000 only               3         0.0005   
259200                    1         0.0002   
259200 only               1         0.0002   
432000                    1         0.0002   
432000 only               1         0.0002   
604800                    1         0.0002   
864000                    3         0.0005   
864000 only               3         0.0005   
7776000                   1         0.0002   
7776000 only              1         0.0002   
None                      146605    23.7478  
None only                 143741    23.2839  

Certificate sig alg     Count     Percent 
-------------------------+---------+--------
None                      8517      1.3796   
ecdsa-with-SHA256         77357     12.5307  
sha1WithRSAEncryption     8710      1.4109   
sha256WithRSAEncryption   550018    89.0947  
sha384WithRSAEncryption   12        0.0019   
sha512WithRSAEncryption   94        0.0152   

Certificate key size    Count     Percent 
-------------------------+---------+--------
ECDSA 256                 79263     12.8394  
ECDSA 384                 64        0.0104   
ECDSA 521                 1         0.0002   
RSA 1024                  8         0.0013   
RSA 2048                  522923    84.7057  
RSA 2049                  4         0.0006   
RSA 2056                  1         0.0002   
RSA 2058                  1         0.0002   
RSA 2059                  1         0.0002   
RSA 2060                  1         0.0002   
RSA 2080                  7         0.0011   
RSA 2084                  1         0.0002   
RSA 2086                  1         0.0002   
RSA 2096                  2         0.0003   
RSA 2432                  4         0.0006   
RSA 2560                  1         0.0002   
RSA 2948                  1         0.0002   
RSA 3048                  1         0.0002   
RSA 3050                  1         0.0002   
RSA 3072                  171       0.0277   
RSA 3096                  2         0.0003   
RSA 3248                  3         0.0005   
RSA 4048                  1         0.0002   
RSA 4056                  11        0.0018   
RSA 4068                  2         0.0003   
RSA 4069                  1         0.0002   
RSA 4086                  3         0.0005   
RSA 4092                  2         0.0003   
RSA 4094                  1         0.0002   
RSA 4096                  35502     5.7508   
RSA 4098                  1         0.0002   
RSA 4196                  1         0.0002   
RSA 8192                  12        0.0019   
RSA 8392                  1         0.0002   
RSA/ECDSA Dual Stack      20648     3.3447

OCSP stapling             Count     Percent 
-------------------------+---------+--------
Supported                 147812    23.9433  
Unsupported               469529    76.0567  

Supported Protocols       Count     Percent
-------------------------+---------+-------
SSL2                      13670     2.2143
SSL2 Only                 7         0.0011
SSL3                      79648     12.9018
SSL3 Only                 291       0.0471
SSL3 or TLS1 Only         40940     6.6317
SSL3 or lower Only        298       0.0483
TLS1                      602893    97.6596
TLS1 Only                 24668     3.9958
TLS1 or lower Only        53665     8.6929
TLS1.1                    554533    89.826
TLS1.1 Only               43        0.007
TLS1.1 or up Only         13986     2.2655
TLS1.2                    562252    91.0764
TLS1.2 Only               4393      0.7116
TLS1.2, 1.0 but not 1.1   4370      0.7079

Client Hello intolerance                 Count     Percent
----------------------------------------+---------+-------
ext:ALPN                                 5         0.0008
ext:EMS                                  396       0.0641
ext:EtM                                  63        0.0102
ext:ext #38                              23        0.0037
ext:key share                            423       0.0685
ext:NPN                                  5         0.0008
ext:OCSP staple                          13        0.0021
ext:padding                              402       0.0651
ext:SNI                                  109       0.0177
last ext empty                           18        0.0029
more groups                              415       0.0672
more sigalgs                             485       0.0786
secure renego ext                        567       0.0918
secure renego scsv                       526       0.0852
size c#/12                               77        0.0125
size c#/20                               40        0.0065
size c#/22                               363       0.0588
size c#/129                              1334      0.2161
size c#/201                              75        0.0121
size c#/257                              419       0.0679
size c#/304                              17        0.0028
size c#/475                              21        0.0034
size c#/501                              180       0.0292
size c#/606                              5         0.0008
size c#/612                              236       0.0382
size c#/614                              10        0.0016
size c#/651                              6         0.001
size c#/653                              161       0.0261
size c#/703                              6         0.001
size c#/734                              6         0.001
size c#/943                              5         0.0008
size c#/945                              6         0.001
size c#/998                              29        0.0047
size c#/1000                             159       0.0258
size c#/1001                             10        0.0016
size c#/1972                             36        0.0058
size c#/1979                             8         0.0013
size c#/1980                             16        0.0026
size c#/1981                             22        0.0036
size c#/1982                             44        0.0071
size c#/1983                             49        0.0079
size c#/1984                             73        0.0118
size c#/1985                             109       0.0177
size c#/1986                             137       0.0222
size c#/1987                             135       0.0219
size c#/1988                             117       0.019
size c#/1989                             62        0.01
size c#/1990                             35        0.0057
size c#/1991                             5         0.0008
size c#/2013                             5         0.0008
size c#/2021                             713       0.1155
size c#/2027                             8         0.0013
size c#/3223                             8         0.0013
size c#/4017                             5         0.0008
size c#/4018                             7         0.0011
size c#/4019                             15        0.0024
size c#/4020                             14        0.0023
size c#/4021                             17        0.0028
size c#/4022                             20        0.0032
size c#/4023                             11        0.0018
size c#/4024                             8         0.0013
size c#/4035                             69        0.0112
size c#/4088                             8         0.0013
size c#/4317                             34        0.0055
size c#/5023                             13        0.0021
size c#/5056                             9         0.0015
size c#/5075                             120       0.0194
size c#/5098                             4811      0.7793
size c#/5103                             6         0.001
size c#/5261                             7         0.0011
size c#/5510                             9         0.0015
size c#/5747                             5         0.0008
size c#/5748                             6         0.001
size c#/5751                             264       0.0428
size c#/5757                             6         0.001
size c#/6119                             55        0.0089
size c#/6207                             5         0.0008
size c#/6773                             7         0.0011
size c#/7086                             18        0.0029
size c#/7087                             46        0.0075
size c#/7088                             76        0.0123
size c#/7089                             138       0.0224
size c#/7090                             224       0.0363
size c#/7091                             355       0.0575
size c#/7092                             486       0.0787
size c#/7093                             563       0.0912
size c#/7094                             579       0.0938
size c#/7095                             491       0.0795
size c#/7096                             249       0.0403
size c#/7097                             98        0.0159
size c#/7103                             27        0.0044
size c#/7104                             31        0.005
size c#/7105                             2162      0.3502
size c#/7106                             79        0.0128
size c#/7107                             78025     12.6389
size c#/7146                             7         0.0011
size c#/7235                             12        0.0019
size c#/7656                             5         0.0008
size c#/8038                             5         0.0008
size c#/8091                             11        0.0018
size c#/8102                             6         0.001
size c#/8107                             10        0.0016
size c#/8108                             9         0.0015
size c#/8109                             24        0.0039
size c#/8110                             86        0.0139
size c#/8111                             29        0.0047
size c#/8112                             42        0.0068
size c#/8113                             44        0.0071
size c#/8114                             40        0.0065
size c#/8115                             38        0.0062
size c#/8116                             27        0.0044
size c#/8117                             20        0.0032
size c#/8118                             20        0.0032
size c#/8119                             11        0.0018
size c#/8120                             22        0.0036
size c#/8121                             21        0.0034
size c#/8122                             10        0.0016
size c#/8123                             13        0.0021
size c#/8124                             20        0.0032
size c#/8125                             34        0.0055
size c#/8126                             9054      1.4666
size c#/8127                             115       0.0186
size c#/8128                             463       0.075
size c#/8129                             496       0.0803
size c#/8130                             1058      0.1714
size c#/8131                             1875      0.3037
size c#/8132                             3274      0.5303
size c#/8133                             5263      0.8525
size c#/8134                             7846      1.2709
size c#/8135                             11111     1.7998
size c#/8136                             12963     2.0998
size c#/8137                             12113     1.9621
size c#/8138                             16315     2.6428
size c#/8139                             2233      0.3617
size c#/8140                             394       0.0638
size c#/8141                             23        0.0037
size c#/8142                             19        0.0031
size c#/8143                             22        0.0036
size c#/8144                             25        0.004
size c#/8145                             6063      0.9821
size c#/8146                             98        0.0159
size c#/8147                             21529     3.4874
size c#/8150                             9         0.0015
size c#/8152                             68        0.011
size c#/8164                             6         0.001
size c#/8165                             52        0.0084
size c#/8166                             1019      0.1651
size c#/8167                             162       0.0262
size c#/8168                             10471     1.6961
size c#/8169                             234       0.0379
size c#/8170                             393215    63.6949
size c#/8171                             69        0.0112
size c#/8172                             104       0.0168
size c#/8173                             81        0.0131
size c#/8259                             17        0.0028
size c#/8298                             124       0.0201
size c#/15299                            8         0.0013
size c#/16362                            113       0.0183
size c#/24552                            35        0.0057
size c/74                                60        0.0097
size c/78                                6         0.001
size c/161                               6         0.001
size c/162                               10        0.0016
size c/163                               9         0.0015
size c/164                               12        0.0019
size c/165                               15        0.0024
size c/166                               8         0.0013
size c/167                               6         0.001
size c/168                               10        0.0016
size c/169                               9         0.0015
size c/170                               8         0.0013
size c/171                               10        0.0016
size c/172                               20        0.0032
size c/173                               15        0.0024
size c/174                               15        0.0024
size c/175                               18        0.0029
size c/176                               20        0.0032
size c/177                               36        0.0058
size c/178                               20        0.0032
size c/179                               20        0.0032
size c/180                               18        0.0029
size c/181                               11        0.0018
size c/182                               9         0.0015
size c/183                               14        0.0023
size c/184                               10        0.0016
size c/185                               9         0.0015
size c/186                               7         0.0011
size c/187                               8         0.0013
size c/188                               5         0.0008
size c/194                               5         0.0008
size c/308                               1203      0.1949
size c/312                               124       0.0201
size c/391                               5         0.0008
size c/452                               74        0.012
size c/564                               333       0.0539
size c/568                               16        0.0026
size c/667                               5         0.0008
size c/670                               5         0.0008
size c/673                               8         0.0013
size c/674                               5         0.0008
size c/1000                              22        0.0036
size c/1052                              116       0.0188
size c/1097                              11        0.0018
size c/1135                              49        0.0079
size c/1344                              10        0.0016
size c/1356                              415       0.0672
size c/1456                              8         0.0013
size c/1521                              6         0.001
size c/1977                              5         0.0008
size c/2049                              189       0.0306
size c/2052                              10        0.0016
size c/2496                              5         0.0008
size c/2784                              10        0.0016
size c/4076                              39        0.0063
size c/4092                              1545      0.2503
size c/4103                              8         0.0013
size c/6496                              8         0.0013
size c/8192                              11        0.0018
size c/8226                              8         0.0013
size c/8766                              34        0.0055
size c/10095                             13        0.0021
size c/10245                             5104      0.8268
size c/10338                             6         0.001
size c/10654                             7         0.0011
size c/11074                             10        0.0016
size c/11628                             6         0.001
size c/11634                             263       0.0426
size c/12288                             60        0.0097
size c/12464                             5         0.0008
size c/12825                             5         0.0008
size c/13596                             7         0.0011
size c/14342                             6         0.001
size c/15360                             5         0.0008
size c/15362                             6         0.001
size c/16254                             6         0.001
size c/16289                             8         0.0013
size c/16350                             6         0.001
size c/16353                             136       0.022
size c/16378                             5         0.0008
size c/16380                             32        0.0052
size c/16382                             166       0.0269
size c/16383                             130       0.0211
size c/16384                             218       0.0353
size c/16385                             29768     4.822
size c/16386                             1462      0.2368
size c/16387                             199       0.0322
size c/16388                             334       0.0541
size c/16389                             560436    90.7822
size c/16392                             35        0.0057
size c/16396                             6         0.001
size c/16397                             8         0.0013
size c/16400                             75        0.0121
size c/16401                             65        0.0105
size c/16404                             10        0.0016
size c/16406                             7         0.0011
size c/16408                             8898      1.4413
size c/16645                             153       0.0248
size c/18502                             8         0.0013
size c/32773                             123       0.0199
size c/49153                             36        0.0058
size c/65536                             6         0.001
SSL 3.254                                12324     1.9963
SSL 4.0                                  15533     2.5161
SSL 4.3                                  14995     2.429
SSL 255.255                              15052     2.4382
TLS 1.0                                  13383     2.1678
TLS 1.1                                  3950      0.6398
TLS 1.2                                  27        0.0044
TLS 1.3                                  6836      1.1073
TLS 1.4                                  7445      1.206

Implementation families                               Count       Percent
-----------------------------------------------------+-----------+-------
c/177 c#/22                                        11        0.0018
c/308 c#/129 TLS_1.3+                              1199      0.1942
c/312 c#/129 TLS_1.3+                              59        0.0096
c/391 c#/129                                       5         0.0008
c/452 c#/201 SSL_4.0+                              74        0.012
c/564 c#/257                                       273       0.0442
c/564 c#/257 SSL_4.0+                              16        0.0026
c/564 c#/257 SSL_4.0+ SSL_3.254                    6         0.001
c/564 c#/257 TLS_1.3+                              34        0.0055
c/568 c#/257 TLS_1.3+                              16        0.0026
c/667 c#/257                                       5         0.0008
c/670 c#/257                                       5         0.0008
c/673 c#/257                                       8         0.0013
c/674 c#/257                                       5         0.0008
c/1000 c#/475 TLS_1.3+                             21        0.0034
c/1052 c#/501                                      91        0.0147
c/1052 c#/501 SSL_4.0+                             14        0.0023
c/1052 c#/501 TLS_1.3+                             9         0.0015
c/1097 c#/501                                      11        0.0018
c/1135 c#/501                                      48        0.0078
c/1344 c#/606                                      5         0.0008
c/1356 c#/612                                      236       0.0382
c/1356 c#/614 SSL_4.0+                             6         0.001
c/1356 c#/653 SSL_4.0+                             132       0.0214
c/1356 c#/653 TLS_1.3+                             24        0.0039
c/1456 c#/703 SSL_4.0+                             6         0.001
c/1521 c#/734 TLS_1.4 TLS_1.3 TLS_1.2 SSL_3.254    6         0.001
c/2049 c#/998 TLS_1.3+                             29        0.0047
c/2049 c#/1000 TLS_1.3+                            159       0.0258
c/2052 c#/1001                                     10        0.0016
c/4076 c#/1972                                     36        0.0058
c/4092 c#/943                                      5         0.0008
c/4092 c#/945                                      6         0.001
c/4092 c#/1979                                     8         0.0013
c/4092 c#/1980                                     16        0.0026
c/4092 c#/1981                                     21        0.0034
c/4092 c#/1982                                     43        0.007
c/4092 c#/1983                                     49        0.0079
c/4092 c#/1984                                     71        0.0115
c/4092 c#/1985                                     108       0.0175
c/4092 c#/1986                                     137       0.0222
c/4092 c#/1987                                     135       0.0219
c/4092 c#/1988                                     115       0.0186
c/4092 c#/1989                                     61        0.0099
c/4092 c#/1990                                     34        0.0055
c/4092 c#/2021                                     712       0.1153
c/4103 c#/2027                                     8         0.0013
c/6496 c#/3223                                     8         0.0013
c/8226 c#/4088                                     5         0.0008
c/8766 c#/4317                                     34        0.0055
c/10095                                            13        0.0021
c/10245                                            708       0.1147
c/10245 c#/4017 SSL_3.254                          5         0.0008
c/10245 c#/4018 SSL_3.254                          6         0.001
c/10245 c#/4019 SSL_3.254                          12        0.0019
c/10245 c#/4020 SSL_3.254                          13        0.0021
c/10245 c#/4021 SSL_3.254                          16        0.0026
c/10245 c#/4022 SSL_3.254                          18        0.0029
c/10245 c#/4023 SSL_3.254                          10        0.0016
c/10245 c#/4024 SSL_3.254                          7         0.0011
c/10245 c#/4035                                    69        0.0112
c/10245 SSL_3.254                                  4225      0.6844
c/10338                                            6         0.001
c/10654                                            7         0.0011
c/11074                                            10        0.0016
c/11628                                            6         0.001
c/11634                                            263       0.0426
c/12464                                            5         0.0008
c/12825                                            5         0.0008
c/13596                                            5         0.0008
c/14342                                            6         0.001
c/16254                                            5         0.0008
c/16289 SSL_4.0+                                   8         0.0013
c/16353                                            123       0.0199
c/16353 TLS_1.3+                                   12        0.0019
c/16380                                            31        0.005
c/16382                                            126       0.0204
c/16382 SSL_4.0+                                   11        0.0018
c/16383                                            89        0.0144
c/16383 SSL_4.0+                                   6         0.001
c/16383 TLS_1.3+                                   5         0.0008
c/16384                                            150       0.0243
c/16384 SSL_4.0+                                   22        0.0036
c/16384 TLS_1.3+                                   13        0.0021
c/16385                                            22319     3.6153
c/16385 SSL_4.0                                    12        0.0019
c/16385 SSL_4.0+                                   2410      0.3904
c/16385 TLS_1.3+                                   4773      0.7732
c/16385 TLS_1.3+ TLS_1.2                           6         0.001
c/16385 TLS_1.4 SSL_4.0+ SSL_3.254                 182       0.0295
c/16386                                            1352      0.219
c/16386 SSL_4.0+                                   39        0.0063
c/16386 TLS_1.3+                                   34        0.0055
c/16387                                            121       0.0196
c/16387 SSL_4.0+                                   55        0.0089
c/16388                                            282       0.0457
c/16388 SSL_4.0+                                   5         0.0008
c/16388 TLS_1.3+                                   5         0.0008
c/16389                                            555008    89.903
c/16389 SSL_4.0+                                   4661      0.755
c/16389 TLS_1.3+                                   198       0.0321
c/16392                                            34        0.0055
c/16396                                            6         0.001
c/16397                                            8         0.0013
c/16400                                            75        0.0121
c/16401                                            65        0.0105
c/16404                                            9         0.0015
c/16406                                            7         0.0011
c/16408                                            8897      1.4412
c/16645                                            131       0.0212
c/16645 SSL_4.0+                                   21        0.0034
c/18502 SSL_4.0                                    6         0.001
c/32773                                            59        0.0096
c/32773 SSL_4.0                                    64        0.0104
c/49153                                            36        0.0058
c/65536                                            5         0.0008
ext:OCSP_staple c/16389                            8         0.0013
ext:padding ext:key_share ext:EMS c/161 c#/22 TLS_1.4 SSL_3.254 5         0.0008
ext:padding ext:key_share ext:EMS c/162 c#/22 TLS_1.4 SSL_3.254 10        0.0016
ext:padding ext:key_share ext:EMS c/163 c#/22 TLS_1.4 SSL_3.254 7         0.0011
ext:padding ext:key_share ext:EMS c/164 c#/22 TLS_1.4 SSL_3.254 11        0.0018
ext:padding ext:key_share ext:EMS c/165 c#/22 TLS_1.4 SSL_3.254 14        0.0023
ext:padding ext:key_share ext:EMS c/166 c#/22 TLS_1.4 SSL_3.254 6         0.001
ext:padding ext:key_share ext:EMS c/167 c#/22 TLS_1.4 SSL_3.254 6         0.001
ext:padding ext:key_share ext:EMS c/168 c#/22 TLS_1.4 SSL_3.254 10        0.0016
ext:padding ext:key_share ext:EMS c/169 c#/22 TLS_1.4 SSL_3.254 9         0.0015
ext:padding ext:key_share ext:EMS c/170 c#/22 TLS_1.4 SSL_3.254 7         0.0011
ext:padding ext:key_share ext:EMS c/171 c#/22 TLS_1.4 SSL_3.254 10        0.0016
ext:padding ext:key_share ext:EMS c/172 c#/22 TLS_1.4 SSL_3.254 18        0.0029
ext:padding ext:key_share ext:EMS c/173 c#/22 TLS_1.4 SSL_3.254 15        0.0024
ext:padding ext:key_share ext:EMS c/174 c#/22 TLS_1.4 SSL_3.254 14        0.0023
ext:padding ext:key_share ext:EMS c/175 c#/22 TLS_1.4 SSL_3.254 18        0.0029
ext:padding ext:key_share ext:EMS c/176 c#/22 TLS_1.4 SSL_3.254 20        0.0032
ext:padding ext:key_share ext:EMS c/177 c#/22 TLS_1.4 SSL_3.254 24        0.0039
ext:padding ext:key_share ext:EMS c/178 c#/22 TLS_1.4 SSL_3.254 19        0.0031
ext:padding ext:key_share ext:EMS c/179 c#/22 TLS_1.4 SSL_3.254 20        0.0032
ext:padding ext:key_share ext:EMS c/180 c#/22 TLS_1.4 SSL_3.254 16        0.0026
ext:padding ext:key_share ext:EMS c/181 c#/22 TLS_1.4 SSL_3.254 11        0.0018
ext:padding ext:key_share ext:EMS c/182 c#/22 TLS_1.4 SSL_3.254 9         0.0015
ext:padding ext:key_share ext:EMS c/183 c#/22 TLS_1.4 SSL_3.254 11        0.0018
ext:padding ext:key_share ext:EMS c/184 c#/22 TLS_1.4 SSL_3.254 9         0.0015
ext:padding ext:key_share ext:EMS c/185 c#/22 TLS_1.4 SSL_3.254 8         0.0013
ext:padding ext:key_share ext:EMS c/188 c#/22 TLS_1.4 SSL_3.254 5         0.0008
ext:SNI c/16385 TLS_1.3+                           14        0.0023
ext:SNI c/16389                                    85        0.0138
last_ext_empty                                     7         0.0011
more_groups c/16382                                5         0.0008
more_groups c/16384                                5         0.0008
more_groups c/16385                                6         0.001
more_groups c/16388                                6         0.001
more_groups c/16389                                77        0.0125
more_sigalgs                                       33        0.0053
more_sigalgs c/16385                               10        0.0016
more_sigalgs c/16386                               8         0.0013
more_sigalgs c/16389                               99        0.016
more_sigalgs more_groups c/16389                   11        0.0018
secure_renego_ext c/312 c#/129 TLS_1.3+            65        0.0105
secure_renego_ext c/12288                          58        0.0094
secure_renego_ext c/16384                          5         0.0008
secure_renego_ext c/16385                          6         0.001
secure_renego_ext c/16388                          10        0.0016
secure_renego_ext c/16389                          98        0.0159
secure_renego_ext more_groups c/16389              6         0.001
secure_renego_ext more_sigalgs c/16389             10        0.0016
secure_renego_scsv c/16382                         5         0.0008
secure_renego_scsv c/16385                         14        0.0023
secure_renego_scsv c/16386                         7         0.0011
secure_renego_scsv c/16387                         9         0.0015
secure_renego_scsv c/16389                         84        0.0136
secure_renego_scsv c/16389 SSL_4.0+                23        0.0037
secure_renego_scsv more_sigalgs c/16389            16        0.0026
secure_renego_scsv more_sigalgs more_groups c/16389 5         0.0008
secure_renego_scsv secure_renego_ext c/16389       8         0.0013
secure_renego_scsv secure_renego_ext more_groups c/16389 6         0.001
secure_renego_scsv secure_renego_ext more_sigalgs more_groups ext:key_share c/74 c#/12 TLS_1.4 SSL_3.254 51        0.0083
secure_renego_scsv SSL_4.0+                        14        0.0023
secure_renego_scsv SSL_4.0+ SSL_3.254              27        0.0044
SSL_3.254 SSL_255.255                              20        0.0032
SSL_4.0                                            395       0.064
SSL_4.0 SSL_3.254 SSL_255.255                      30        0.0049
SSL_4.0+                                           11        0.0018
SSL_4.0+ SSL_3.254                                 360       0.0583
TLS_1.3+                                           37        0.006
TLS_1.3+ TLS_1.2                                   5         0.0008



Statistics from 380577 chains provided by 741802 hosts

Server provided chains    Count     Percent
-------------------------+---------+-------
complete                  355021    47.8593
incomplete                14438     1.9463
untrusted                 372343    50.1944

Trusted chain statistics
========================

Chain length              Count     Percent
-------------------------+---------+-------
2                         1         0.0003
3                         375989    98.7945
4                         4576      1.2024
5                         11        0.0029

CA key size in chains     Count
-------------------------+---------
ECDSA 256                 10554     
ECDSA 384                 10500     
RSA 1024                  1         
RSA 2045                  2         
RSA 2048                  599063    
RSA 4096                  145631    

Chains with CA key        Count     Percent
-------------------------+---------+-------
ECDSA 256                 10554     2.7732
ECDSA 384                 10500     2.759
RSA 1024                  1         0.0003
RSA 2045                  2         0.0005
RSA 2048                  369728    97.1493
RSA 4096                  145057    38.115

Signature algorithm (ex. root) Count
------------------------------+---------
ecdsa-with-SHA384              10480     
sha1WithRSAEncryption          4001      
sha256WithRSAEncryption        240251    
sha384WithRSAEncryption        130369    
sha512WithRSAEncryption        73        

Eff. host cert chain LoS  Count     Percent
-------------------------+---------+-------
80                        3967      1.0424
112                       366102    96.1966
128                       10508     2.7611

Most common root CAs                          Count     Percent
---------------------------------------------+---------+-------
(d6325660) COMODO RSA Certification Authority 114912    30.1942
(2c543cd1) GeoTrust Global CA                 59675     15.6801
(cbf06781) Go Daddy Root Certificate Authorit 34287     9.0092
(5ad8a5d6) GlobalSign Root CA                 25336     6.6573
(244b5494) DigiCert High Assurance EV Root CA 17608     4.6267
(b204d74a) VeriSign Class 3 Public Primary Ce 16082     4.2257
(fc5a8f99) USERTrust RSA Certification Author 15380     4.0412
(4bfab552) Starfield Root Certificate Authori 11040     2.9009
(2e4eed3c) thawte Primary Root CA             10561     2.775
(eed8c118) COMODO ECC Certification Authority 10478     2.7532
(653b494a) Baltimore CyberTrust Root          8661      2.2758
(3513523f) DigiCert Global Root CA            8436      2.2166
(ae8153b9) StartCom Certification Authority   6077      1.5968
(e2799e36) GeoTrust Primary Certification Aut 5377      1.4129
(480720ec) GeoTrust Primary Certification Aut 4278      1.1241

Most common intermediate CA                   Count     Percent
---------------------------------------------+---------+-------
(8d28ae65) COMODO RSA Domain Validation Secur 80544     21.1637
(27eb7704) Go Daddy Secure Certificate Author 34287     9.0092
(53f3e569) RapidSSL SHA256 CA - G3            23547     6.1872
(1400f578) cPanel, Inc. Certification Authori 20473     5.3795
(80ecc636) RapidSSL SHA256 CA                 17373     4.5649
(38ae8eda) DigiCert SHA2 High Assurance Serve 14767     3.8802
(cd7781e5) Starfield Secure Certificate Autho 11040     2.9009
(7d9c641e) Symantec Class 3 Secure Server CA  10812     2.8409
(16744f0c) AlphaSSL CA - SHA256 - G2          10734     2.8205
(10310d4b) GeoTrust SSL CA - G3               10577     2.7792
(6cfa716c) COMODO ECC Domain Validation Secur 10433     2.7414
(c43a77d9) COMODO RSA Organization Validation 8974      2.358
(85cf5865) DigiCert SHA2 Secure Server CA     8419      2.2122
(d7d634d4) GlobalSign Domain Validation CA -  7954      2.09
(fd917e82) SecureCore RSA DV CA               7248      1.9045
(3d97f5e2) Verizon Akamai SureServer CA G14-S 6322      1.6612
(9ad474ec) thawte SSL CA - G2                 5746      1.5098
(b85455c4) GlobalSign Organization Validation 4922      1.2933
(a0f7ac3e) Symantec Class 3 EV SSL CA - G3    4831      1.2694
(b71a5f76) GeoTrust EV SSL CA - G4            4278      1.1241
(98d7cad7) GeoTrust DV SSL CA - G3            4266      1.1209


Scan performed between 1st and 21st of October 2016.

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s