{"schema_version":"2","input_url":"https://reelix.h4ck.me/","normalized":"https://reelix.h4ck.me:443","host":"reelix.h4ck.me","port":"443","sni":"reelix.h4ck.me","share_url":"/?q=https%3A%2F%2Freelix.h4ck.me%2F","resolved_ips":["169.1.12.151"],"checked_ip":"169.1.12.151","network":{"resolved_ipv4":["169.1.12.151"],"tested_ipv4":"169.1.12.151","consistency":"single_family"},"status":"supported","summary":"The checked address completed TLS 1.3 and negotiated a supported ML-KEM hybrid.","grade":"good","assessment":{"grade":"good","headline":"Post-quantum encryption is in normal use","explanation":"The endpoint selected X25519MLKEM768 in a normal TLS 1.3 handshake. Authentication remains classical.","hndl_protected":true,"key_establishment":{"state":"post_quantum_preferred","label":"Post-quantum","summary":"Normal TLS selected X25519MLKEM768."},"authentication":{"state":"classical","label":"Classical","summary":"The server authentication key is ECDSA P-384."},"certificate_chain":{"state":"classical","label":"Classical","summary":"The verified chain contains classical certificate signatures."},"deployment":{"state":"single_family","label":"Consistent","summary":"Tested address-family paths produced equivalent readiness results."},"tls_baseline":{"state":"healthy","label":"Healthy","summary":"TLS 1.3 and certificate validation succeeded."}},"control_probe":{"attempted":true,"success":true,"tls_version":"TLS 1.3","offered_curves":["X25519MLKEM768","SecP256r1MLKEM768","SecP384r1MLKEM1024","X25519","CurveP256","CurveP384","CurveP521"],"negotiated_curve":"X25519MLKEM768","cipher_suite":"TLS_AES_256_GCM_SHA384","alpn":"h2","hello_retry_request":false,"ocsp_stapled":false,"peer_certificates":3,"presented_chain":[{"position":0,"role":"leaf","subject":"CN=reelix.h4ck.me","issuer":"CN=YE2,O=Let's Encrypt,C=US","public_key_algorithm":"ECDSA","public_key_details":"P-384","public_key_post_quantum":false,"signature_algorithm":"ECDSA-SHA384","signature_post_quantum":false,"not_before":"2026-08-23T14:46:00Z","not_after":"2026-11-21T14:45:59Z","dns_names":["reelix.h4ck.me"]},{"position":1,"role":"presented","subject":"CN=YE2,O=Let's Encrypt,C=US","issuer":"CN=Root YE,O=ISRG,C=US","public_key_algorithm":"ECDSA","public_key_details":"P-384","public_key_post_quantum":false,"signature_algorithm":"ECDSA-SHA384","signature_post_quantum":false,"not_before":"2025-09-03T00:00:00Z","not_after":"2028-09-02T23:59:59Z"},{"position":2,"role":"root_or_last","subject":"CN=Root YE,O=ISRG,C=US","issuer":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","public_key_algorithm":"ECDSA","public_key_details":"P-384","public_key_post_quantum":false,"signature_algorithm":"ECDSA-SHA384","signature_post_quantum":false,"not_before":"2026-05-13T00:00:00Z","not_after":"2032-09-02T23:59:59Z"}],"verified_chain":[{"position":0,"role":"leaf","subject":"CN=reelix.h4ck.me","issuer":"CN=YE2,O=Let's Encrypt,C=US","public_key_algorithm":"ECDSA","public_key_details":"P-384","public_key_post_quantum":false,"signature_algorithm":"ECDSA-SHA384","signature_post_quantum":false,"not_before":"2026-08-23T14:46:00Z","not_after":"2026-11-21T14:45:59Z","dns_names":["reelix.h4ck.me"]},{"position":1,"role":"verified","subject":"CN=YE2,O=Let's Encrypt,C=US","issuer":"CN=Root YE,O=ISRG,C=US","public_key_algorithm":"ECDSA","public_key_details":"P-384","public_key_post_quantum":false,"signature_algorithm":"ECDSA-SHA384","signature_post_quantum":false,"not_before":"2025-09-03T00:00:00Z","not_after":"2028-09-02T23:59:59Z"},{"position":2,"role":"verified","subject":"CN=Root YE,O=ISRG,C=US","issuer":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","public_key_algorithm":"ECDSA","public_key_details":"P-384","public_key_post_quantum":false,"signature_algorithm":"ECDSA-SHA384","signature_post_quantum":false,"not_before":"2026-05-13T00:00:00Z","not_after":"2032-09-02T23:59:59Z"},{"position":3,"role":"root_or_last","subject":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","issuer":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","public_key_algorithm":"ECDSA","public_key_details":"P-384","public_key_post_quantum":false,"signature_algorithm":"ECDSA-SHA384","signature_post_quantum":false,"not_before":"2020-09-04T00:00:00Z","not_after":"2040-09-17T16:00:00Z"}],"certificate_valid":true,"insecure_retry_performed":false},"tls12_probe":{"attempted":false,"success":false,"hello_retry_request":false,"ocsp_stapled":false,"certificate_valid":false,"insecure_retry_performed":false},"pq_probe":{"attempted":true,"success":true,"tls_version":"TLS 1.3","offered_curves":["X25519MLKEM768","SecP256r1MLKEM768","SecP384r1MLKEM1024"],"negotiated_curve":"X25519MLKEM768","cipher_suite":"TLS_AES_256_GCM_SHA384","alpn":"h2","hello_retry_request":false,"ocsp_stapled":false,"peer_certificates":3,"presented_chain":[{"position":0,"role":"leaf","subject":"CN=reelix.h4ck.me","issuer":"CN=YE2,O=Let's Encrypt,C=US","public_key_algorithm":"ECDSA","public_key_details":"P-384","public_key_post_quantum":false,"signature_algorithm":"ECDSA-SHA384","signature_post_quantum":false,"not_before":"2026-08-23T14:46:00Z","not_after":"2026-11-21T14:45:59Z","dns_names":["reelix.h4ck.me"]},{"position":1,"role":"presented","subject":"CN=YE2,O=Let's Encrypt,C=US","issuer":"CN=Root YE,O=ISRG,C=US","public_key_algorithm":"ECDSA","public_key_details":"P-384","public_key_post_quantum":false,"signature_algorithm":"ECDSA-SHA384","signature_post_quantum":false,"not_before":"2025-09-03T00:00:00Z","not_after":"2028-09-02T23:59:59Z"},{"position":2,"role":"root_or_last","subject":"CN=Root YE,O=ISRG,C=US","issuer":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","public_key_algorithm":"ECDSA","public_key_details":"P-384","public_key_post_quantum":false,"signature_algorithm":"ECDSA-SHA384","signature_post_quantum":false,"not_before":"2026-05-13T00:00:00Z","not_after":"2032-09-02T23:59:59Z"}],"verified_chain":[{"position":0,"role":"leaf","subject":"CN=reelix.h4ck.me","issuer":"CN=YE2,O=Let's Encrypt,C=US","public_key_algorithm":"ECDSA","public_key_details":"P-384","public_key_post_quantum":false,"signature_algorithm":"ECDSA-SHA384","signature_post_quantum":false,"not_before":"2026-08-23T14:46:00Z","not_after":"2026-11-21T14:45:59Z","dns_names":["reelix.h4ck.me"]},{"position":1,"role":"verified","subject":"CN=YE2,O=Let's Encrypt,C=US","issuer":"CN=Root YE,O=ISRG,C=US","public_key_algorithm":"ECDSA","public_key_details":"P-384","public_key_post_quantum":false,"signature_algorithm":"ECDSA-SHA384","signature_post_quantum":false,"not_before":"2025-09-03T00:00:00Z","not_after":"2028-09-02T23:59:59Z"},{"position":2,"role":"verified","subject":"CN=Root YE,O=ISRG,C=US","issuer":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","public_key_algorithm":"ECDSA","public_key_details":"P-384","public_key_post_quantum":false,"signature_algorithm":"ECDSA-SHA384","signature_post_quantum":false,"not_before":"2026-05-13T00:00:00Z","not_after":"2032-09-02T23:59:59Z"},{"position":3,"role":"root_or_last","subject":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","issuer":"CN=ISRG Root X2,O=Internet Security Research Group,C=US","public_key_algorithm":"ECDSA","public_key_details":"P-384","public_key_post_quantum":false,"signature_algorithm":"ECDSA-SHA384","signature_post_quantum":false,"not_before":"2020-09-04T00:00:00Z","not_after":"2040-09-17T16:00:00Z"}],"certificate_valid":true,"insecure_retry_performed":false}}