Not the key compromise this time. eMudhra retired the certificate on its own emsign.com website on October 19 and never put a replacement in place. How to verify it with openssl, and why it matters.
Read article
A full TLS ranking of all 27 EU tax authorities, from Luxembourg to Denmark, and how they compare with the IRS, HMRC and Singapore on post-quantum readiness.
Read article
Go 1.24+ negotiates X25519MLKEM768 by default, but an old go line in go.mod, CurvePreferences or TLS 1.2 turn it off. How to check and fix it.
Read article
Node.js 22.20+ and 24.5+ negotiate X25519MLKEM768 by default. Which versions do it, how to verify it, and the ecdhCurve setting that turns it off.
Read article
Go says x509: certificate signed by unknown authority but your browser works? The four causes, how to tell them apart, and the right fix for each.
Read article
Node.js says unable to verify the first certificate but your browser works? What UNABLE_TO_VERIFY_LEAF_SIGNATURE means and how to fix it properly.
Read article
DigiCert CertCentral alternative: SSLBoard gives you TLS posture visibility for any domain without an enterprise contract or CA lock-in.
Read article
ImmuniWeb SSL Test alternative: SSLBoard scans your whole domain, not one hostname, and delivers a shareable TLS posture report with exports.
Read article
KeyChest alternative: KeyChest shut down in February 2026. SSLBoard replaces its expiry monitoring and adds full TLS posture auditing, no account needed.
Read article
Mozilla HTTP Observatory alternative: SSLBoard scans your whole domain, covering TLS protocols, ciphers, certificates, and security headers in one report.
Read article
Cert Spotter alternative: SSLBoard pairs certificate discovery with full TLS configuration auditing, no account or per-endpoint pricing required.
Read article
Red Sift Certificates alternative: SSLBoard audits your TLS configuration across an entire domain, not just your certificate inventory.
Read article
Hardenize alternative: SSLBoard gives you on-demand TLS posture reports for any domain, no account or enterprise contract required.
Read article
CSP across 25 endpoints, AEAD-only ciphers on Cloudflare and Go servers, and CAA records took SSLBoard from 92 to 99.
Read article
SSL Labs alternative: SSLBoard scans your domain, checks certificates, TLS versions, cipher suites, and more, then gives you a shareable report.
Read article
Harden Cloudflare SSL/TLS in five steps: HTTPS redirects, HSTS, TLS 1.2 minimum, TLS 1.3, and Advanced Certificate Manager to eliminate weak ciphers.
Read article
Definitions for TLS, SSL, certificates, cipher suites, OCSP, HSTS, CAA, and more. A plain-English reference for understanding SSLBoard reports.
Read article
Generate an on-demand TLS posture report for any domain. SSLBoard audits certificates, TLS versions, cipher suites, HSTS, and more in minutes.
Read article
TLS landscape report for lenovo.com — certificate issuers, subdomain depth, legacy protocol exposure, weak ciphers, and expired certificate risk.
Read article
TLS landscape report for x.com and twitter.com — certificate footprint, SAN churn, TLS version mix, legacy protocol exposure, and weak ciphers.
Read article
TLS landscape report for optum.com: certificate footprint, hostname coverage, issuance churn, and TLS version mix from observed public endpoints.
Read article
TLS landscape report for ssl.com: certificate footprint, hostname coverage, issuance churn, and TLS version mix from observed public endpoints.
Read article
Post-quantum cryptography is part of TLS hygiene alongside certificate expiry, key length, cipher strength, and protocol versions. Learn how to approach it.
Read article
Bank of Ireland TLS analysis: 52 certificates with only 8 actively used across 56 hosts, showing strong CA standardization but legacy protocol risks.
Read article Huawei TLS analysis: 534 certificates across 660 hosts, with insights on certificate lifecycle, protocol support, cipher strength, and security.
Read article
Expired SSL certificates cause website outages. SSLBoard's discovery-first approach provides instant visibility and real-time monitoring.
Read article