OpsBench

TLS Protocol Scan

Which TLS versions a server accepts, plus the cipher it negotiates.

● Runs on our server
Our server tries each TLS version on its own and sees what is accepted. Accepting TLS 1.0 or 1.1 is a weakness — both are deprecated. Works with implicit TLS (443, 465, 993), not STARTTLS.

How it works

We open a separate connection for each TLS version — 1.0, 1.1, 1.2 and 1.3 — forcing that version only, and record whether the handshake succeeds and which cipher the server chose.

Related tools

Let's Encrypt Wizard SSL Checker PEM to PFX CSR Generator