{
  "schema_version": "2",
  "input_url": "https://reelix.h4ck.me/",
  "normalized": "https://reelix.h4ck.me:443",
  "host": "reelix.h4ck.me",
  "port": "443",
  "sni": "reelix.h4ck.me",
  "share_url": "/?q=https%3A%2F%2Freelix.h4ck.me%2F",
  "resolved_ips": [
    "169.1.12.151"
  ],
  "checked_ip": "169.1.12.151",
  "network": {
    "resolved_ipv4": [
      "169.1.12.151"
    ],
    "tested_ipv4": "169.1.12.151",
    "consistency": "single_family"
  },
  "status": "supported",
  "summary": "The checked address completed TLS 1.3 and negotiated a supported ML-KEM hybrid.",
  "grade": "good",
  "assessment": {
    "grade": "good",
    "headline": "Post-quantum encryption is in normal use",
    "explanation": "The endpoint selected X25519MLKEM768 in a normal TLS 1.3 handshake. Authentication remains classical.",
    "hndl_protected": true,
    "key_establishment": {
      "state": "post_quantum_preferred",
      "label": "Post-quantum",
      "summary": "Normal TLS selected X25519MLKEM768."
    },
    "authentication": {
      "state": "classical",
      "label": "Classical",
      "summary": "The server authentication key is ECDSA P-384."
    },
    "certificate_chain": {
      "state": "classical",
      "label": "Classical",
      "summary": "The verified chain contains classical certificate signatures."
    },
    "deployment": {
      "state": "single_family",
      "label": "Consistent",
      "summary": "Tested address-family paths produced equivalent readiness results."
    },
    "tls_baseline": {
      "state": "healthy",
      "label": "Healthy",
      "summary": "TLS 1.3 and certificate validation succeeded."
    }
  },
  "control_probe": {
    "attempted": true,
    "success": true,
    "tls_version": "TLS 1.3",
    "offered_curves": [
      "X25519MLKEM768",
      "SecP256r1MLKEM768",
      "SecP384r1MLKEM1024",
      "X25519",
      "CurveP256",
      "CurveP384",
      "CurveP521"
    ],
    "negotiated_curve": "X25519MLKEM768",
    "cipher_suite": "TLS_AES_256_GCM_SHA384",
    "alpn": "h2",
    "hello_retry_request": false,
    "ocsp_stapled": false,
    "peer_certificates": 3,
    "presented_chain": [
      {
        "position": 0,
        "role": "leaf",
        "subject": "CN=reelix.h4ck.me",
        "issuer": "CN=YE2,O=Let's Encrypt,C=US",
        "public_key_algorithm": "ECDSA",
        "public_key_details": "P-384",
        "public_key_post_quantum": false,
        "signature_algorithm": "ECDSA-SHA384",
        "signature_post_quantum": false,
        "not_before": "2026-08-23T14:46:00Z",
        "not_after": "2026-11-21T14:45:59Z",
        "dns_names": [
          "reelix.h4ck.me"
        ]
      },
      {
        "position": 1,
        "role": "presented",
        "subject": "CN=YE2,O=Let's Encrypt,C=US",
        "issuer": "CN=Root YE,O=ISRG,C=US",
        "public_key_algorithm": "ECDSA",
        "public_key_details": "P-384",
        "public_key_post_quantum": false,
        "signature_algorithm": "ECDSA-SHA384",
        "signature_post_quantum": false,
        "not_before": "2025-09-03T00:00:00Z",
        "not_after": "2028-09-02T23:59:59Z"
      },
      {
        "position": 2,
        "role": "root_or_last",
        "subject": "CN=Root YE,O=ISRG,C=US",
        "issuer": "CN=ISRG Root X2,O=Internet Security Research Group,C=US",
        "public_key_algorithm": "ECDSA",
        "public_key_details": "P-384",
        "public_key_post_quantum": false,
        "signature_algorithm": "ECDSA-SHA384",
        "signature_post_quantum": false,
        "not_before": "2026-05-13T00:00:00Z",
        "not_after": "2032-09-02T23:59:59Z"
      }
    ],
    "verified_chain": [
      {
        "position": 0,
        "role": "leaf",
        "subject": "CN=reelix.h4ck.me",
        "issuer": "CN=YE2,O=Let's Encrypt,C=US",
        "public_key_algorithm": "ECDSA",
        "public_key_details": "P-384",
        "public_key_post_quantum": false,
        "signature_algorithm": "ECDSA-SHA384",
        "signature_post_quantum": false,
        "not_before": "2026-08-23T14:46:00Z",
        "not_after": "2026-11-21T14:45:59Z",
        "dns_names": [
          "reelix.h4ck.me"
        ]
      },
      {
        "position": 1,
        "role": "verified",
        "subject": "CN=YE2,O=Let's Encrypt,C=US",
        "issuer": "CN=Root YE,O=ISRG,C=US",
        "public_key_algorithm": "ECDSA",
        "public_key_details": "P-384",
        "public_key_post_quantum": false,
        "signature_algorithm": "ECDSA-SHA384",
        "signature_post_quantum": false,
        "not_before": "2025-09-03T00:00:00Z",
        "not_after": "2028-09-02T23:59:59Z"
      },
      {
        "position": 2,
        "role": "verified",
        "subject": "CN=Root YE,O=ISRG,C=US",
        "issuer": "CN=ISRG Root X2,O=Internet Security Research Group,C=US",
        "public_key_algorithm": "ECDSA",
        "public_key_details": "P-384",
        "public_key_post_quantum": false,
        "signature_algorithm": "ECDSA-SHA384",
        "signature_post_quantum": false,
        "not_before": "2026-05-13T00:00:00Z",
        "not_after": "2032-09-02T23:59:59Z"
      },
      {
        "position": 3,
        "role": "root_or_last",
        "subject": "CN=ISRG Root X2,O=Internet Security Research Group,C=US",
        "issuer": "CN=ISRG Root X2,O=Internet Security Research Group,C=US",
        "public_key_algorithm": "ECDSA",
        "public_key_details": "P-384",
        "public_key_post_quantum": false,
        "signature_algorithm": "ECDSA-SHA384",
        "signature_post_quantum": false,
        "not_before": "2020-09-04T00:00:00Z",
        "not_after": "2040-09-17T16:00:00Z"
      }
    ],
    "certificate_valid": true,
    "insecure_retry_performed": false
  },
  "tls12_probe": {
    "attempted": false,
    "success": false,
    "hello_retry_request": false,
    "ocsp_stapled": false,
    "certificate_valid": false,
    "insecure_retry_performed": false
  },
  "pq_probe": {
    "attempted": true,
    "success": true,
    "tls_version": "TLS 1.3",
    "offered_curves": [
      "X25519MLKEM768",
      "SecP256r1MLKEM768",
      "SecP384r1MLKEM1024"
    ],
    "negotiated_curve": "X25519MLKEM768",
    "cipher_suite": "TLS_AES_256_GCM_SHA384",
    "alpn": "h2",
    "hello_retry_request": false,
    "ocsp_stapled": false,
    "peer_certificates": 3,
    "presented_chain": [
      {
        "position": 0,
        "role": "leaf",
        "subject": "CN=reelix.h4ck.me",
        "issuer": "CN=YE2,O=Let's Encrypt,C=US",
        "public_key_algorithm": "ECDSA",
        "public_key_details": "P-384",
        "public_key_post_quantum": false,
        "signature_algorithm": "ECDSA-SHA384",
        "signature_post_quantum": false,
        "not_before": "2026-08-23T14:46:00Z",
        "not_after": "2026-11-21T14:45:59Z",
        "dns_names": [
          "reelix.h4ck.me"
        ]
      },
      {
        "position": 1,
        "role": "presented",
        "subject": "CN=YE2,O=Let's Encrypt,C=US",
        "issuer": "CN=Root YE,O=ISRG,C=US",
        "public_key_algorithm": "ECDSA",
        "public_key_details": "P-384",
        "public_key_post_quantum": false,
        "signature_algorithm": "ECDSA-SHA384",
        "signature_post_quantum": false,
        "not_before": "2025-09-03T00:00:00Z",
        "not_after": "2028-09-02T23:59:59Z"
      },
      {
        "position": 2,
        "role": "root_or_last",
        "subject": "CN=Root YE,O=ISRG,C=US",
        "issuer": "CN=ISRG Root X2,O=Internet Security Research Group,C=US",
        "public_key_algorithm": "ECDSA",
        "public_key_details": "P-384",
        "public_key_post_quantum": false,
        "signature_algorithm": "ECDSA-SHA384",
        "signature_post_quantum": false,
        "not_before": "2026-05-13T00:00:00Z",
        "not_after": "2032-09-02T23:59:59Z"
      }
    ],
    "verified_chain": [
      {
        "position": 0,
        "role": "leaf",
        "subject": "CN=reelix.h4ck.me",
        "issuer": "CN=YE2,O=Let's Encrypt,C=US",
        "public_key_algorithm": "ECDSA",
        "public_key_details": "P-384",
        "public_key_post_quantum": false,
        "signature_algorithm": "ECDSA-SHA384",
        "signature_post_quantum": false,
        "not_before": "2026-08-23T14:46:00Z",
        "not_after": "2026-11-21T14:45:59Z",
        "dns_names": [
          "reelix.h4ck.me"
        ]
      },
      {
        "position": 1,
        "role": "verified",
        "subject": "CN=YE2,O=Let's Encrypt,C=US",
        "issuer": "CN=Root YE,O=ISRG,C=US",
        "public_key_algorithm": "ECDSA",
        "public_key_details": "P-384",
        "public_key_post_quantum": false,
        "signature_algorithm": "ECDSA-SHA384",
        "signature_post_quantum": false,
        "not_before": "2025-09-03T00:00:00Z",
        "not_after": "2028-09-02T23:59:59Z"
      },
      {
        "position": 2,
        "role": "verified",
        "subject": "CN=Root YE,O=ISRG,C=US",
        "issuer": "CN=ISRG Root X2,O=Internet Security Research Group,C=US",
        "public_key_algorithm": "ECDSA",
        "public_key_details": "P-384",
        "public_key_post_quantum": false,
        "signature_algorithm": "ECDSA-SHA384",
        "signature_post_quantum": false,
        "not_before": "2026-05-13T00:00:00Z",
        "not_after": "2032-09-02T23:59:59Z"
      },
      {
        "position": 3,
        "role": "root_or_last",
        "subject": "CN=ISRG Root X2,O=Internet Security Research Group,C=US",
        "issuer": "CN=ISRG Root X2,O=Internet Security Research Group,C=US",
        "public_key_algorithm": "ECDSA",
        "public_key_details": "P-384",
        "public_key_post_quantum": false,
        "signature_algorithm": "ECDSA-SHA384",
        "signature_post_quantum": false,
        "not_before": "2020-09-04T00:00:00Z",
        "not_after": "2040-09-17T16:00:00Z"
      }
    ],
    "certificate_valid": true,
    "insecure_retry_performed": false
  }
}