SSL Analysis & Certificate Guide
Examine your site's SSL certificate in depth; if something is wrong, find out exactly why and how to fix it, step by step.
SSL/TLS Signature Algorithms
The certificate authority signs your certificate with a signature algorithm, and that signature is what proves the certificate isn't forged. Analyse your domain to see which algorithm signed yours.
To see it for your own site, enter your domain above and press Analyse SSL.
RSA
Classic and widespread; larger keys, but the most compatible.
ECDSA
Modern elliptic curve; small keys, high speed.
The SHA-2 family
SHA-256/384/512, today's secure hash functions.
SHA-1 (abandoned)
Breakable; it should no longer be used.
The industry standard. The most common and trusted signature, supported by every client. The right choice for most sites.
Elliptic curve based; it delivers the same security as RSA with a smaller key and a faster handshake. Modern and efficient.
A stronger member of the SHA-2 family, preferred in corporate scenarios that call for higher security.
Combines high security with high performance; ideal in large corporate infrastructures.
Maximum SHA-2 strength. The performance cost is a little higher; 256 is enough for most sites.
No longer SECURE. SHA-1 is vulnerable to collision attacks and browsers don't trust certificates signed with it. If you find this, move to SHA-256.
RSA or ECDSA?
Both are secure today. RSA is the most compatible choice and works on every client; its drawback is key size (2048+ bits). ECDSA delivers the same security with a far smaller key (256-bit ECDSA is considered equivalent to 3072-bit RSA), the handshake is faster and server load drops. On new sites most CAs now offer ECDSA by default; best of all is serving both (a dual certificate) and letting the client pick.
On signatures, the essential rule is simple: don't use SHA-1. Anything in the SHA-2 family (SHA-256 and above) is secure, and SHA-256 strikes the right balance for most sites.
Want to see your site's full technical health? SSL is only the beginning; Turksemveri Web examines security, speed and SEO together across 90 checks.
Free SEO Analysis →