Meets the TLS requirements of NIST SP 800-52r2: requirements met

NIST Special Publication 800-52 Revision 2, Guidelines for TLS Implementations (2019), https://doi.org/10.6028/NIST.SP.800-52r2 — conformance of observable TLS configuration to the standard's technical requirements. Applicable sites only; a requirement the scan cannot observe is excluded from its denominator.

All requirements met: 3.9% All requirements met: 3.9% All requirements met: 3.9% All requirements met: 3.9% All requirements met: 3.9% All requirements met: 3.9% All requirements met: 3.9% All requirements met: 3.9% All requirements met: 3.9% All requirements met: 3.9% All requirements met: 3.9% All requirements met: 3.9% All requirements met: 3.9% All requirements met: 3.9% All requirements met: 3.9% All requirements met: 3.9% All requirements met: 3.9% All requirements met: 3.9% All requirements met: 3.9% All requirements met: 3.9% 3.9%All requirements met38,062 of 973,441 applicable sites · all ranks
TLS 1.2 is supported: 99.3% TLS 1.2 is supported: 99.3% TLS 1.2 is supported: 99.3% TLS 1.2 is supported: 99.3% TLS 1.2 is supported: 99.3% TLS 1.2 is supported: 99.3% TLS 1.2 is supported: 99.3% TLS 1.2 is supported: 99.3% TLS 1.2 is supported: 99.3% TLS 1.2 is supported: 99.3% TLS 1.2 is supported: 99.3% TLS 1.2 is supported: 99.3% TLS 1.2 is supported: 99.3% TLS 1.2 is supported: 99.3% TLS 1.2 is supported: 99.3% TLS 1.2 is supported: 99.3% TLS 1.2 is supported: 99.3% TLS 1.2 is supported: 99.3% TLS 1.2 is supported: 99.3% TLS 1.2 is supported: 99.3% 99.3%TLS 1.2 is supportedNIST Special Publication 800-52 Revision 2 · n=973,441
TLS 1.3 is supported: 89.5% TLS 1.3 is supported: 89.5% TLS 1.3 is supported: 89.5% TLS 1.3 is supported: 89.5% TLS 1.3 is supported: 89.5% TLS 1.3 is supported: 89.5% TLS 1.3 is supported: 89.5% TLS 1.3 is supported: 89.5% TLS 1.3 is supported: 89.5% TLS 1.3 is supported: 89.5% TLS 1.3 is supported: 89.5% TLS 1.3 is supported: 89.5% TLS 1.3 is supported: 89.5% TLS 1.3 is supported: 89.5% TLS 1.3 is supported: 89.5% TLS 1.3 is supported: 89.5% TLS 1.3 is supported: 89.5% TLS 1.3 is supported: 89.5% TLS 1.3 is supported: 89.5% TLS 1.3 is supported: 89.5% 89.5%TLS 1.3 is supportedNIST Special Publication 800-52 Revision 2 · n=973,441
SSLv2, SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv2, SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv2, SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv2, SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv2, SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv2, SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv2, SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv2, SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv2, SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv2, SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv2, SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv2, SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv2, SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv2, SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv2, SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv2, SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv2, SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv2, SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv2, SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv2, SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% 63.5%SSLv2, SSLv3, TLS 1.0, and TLS 1.1 are disabledNIST Special Publication 800-52 Revision 2 · n=973,441
Forward-secrecy cipher suites are available: 99.8% Forward-secrecy cipher suites are available: 99.8% Forward-secrecy cipher suites are available: 99.8% Forward-secrecy cipher suites are available: 99.8% Forward-secrecy cipher suites are available: 99.8% Forward-secrecy cipher suites are available: 99.8% Forward-secrecy cipher suites are available: 99.8% Forward-secrecy cipher suites are available: 99.8% Forward-secrecy cipher suites are available: 99.8% Forward-secrecy cipher suites are available: 99.8% Forward-secrecy cipher suites are available: 99.8% Forward-secrecy cipher suites are available: 99.8% Forward-secrecy cipher suites are available: 99.8% Forward-secrecy cipher suites are available: 99.8% Forward-secrecy cipher suites are available: 99.8% Forward-secrecy cipher suites are available: 99.8% Forward-secrecy cipher suites are available: 99.8% Forward-secrecy cipher suites are available: 99.8% Forward-secrecy cipher suites are available: 99.8% Forward-secrecy cipher suites are available: 99.8% 99.8%Forward-secrecy cipher suites are availableNIST Special Publication 800-52 Revision 2 · n=973,441
Obsoleted CBC-only offering is absent: 27.7% Obsoleted CBC-only offering is absent: 27.7% Obsoleted CBC-only offering is absent: 27.7% Obsoleted CBC-only offering is absent: 27.7% Obsoleted CBC-only offering is absent: 27.7% Obsoleted CBC-only offering is absent: 27.7% Obsoleted CBC-only offering is absent: 27.7% Obsoleted CBC-only offering is absent: 27.7% Obsoleted CBC-only offering is absent: 27.7% Obsoleted CBC-only offering is absent: 27.7% Obsoleted CBC-only offering is absent: 27.7% Obsoleted CBC-only offering is absent: 27.7% Obsoleted CBC-only offering is absent: 27.7% Obsoleted CBC-only offering is absent: 27.7% Obsoleted CBC-only offering is absent: 27.7% Obsoleted CBC-only offering is absent: 27.7% Obsoleted CBC-only offering is absent: 27.7% Obsoleted CBC-only offering is absent: 27.7% Obsoleted CBC-only offering is absent: 27.7% Obsoleted CBC-only offering is absent: 27.7% 27.7%Obsoleted CBC-only offering is absentNIST Special Publication 800-52 Revision 2 · n=973,441
Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% 100%Certificate public key meets minimum strengthNIST Special Publication 800-52 Revision 2 · n=973,441
Certificate signature uses SHA-256 or stronger: 99.9% Certificate signature uses SHA-256 or stronger: 99.9% Certificate signature uses SHA-256 or stronger: 99.9% Certificate signature uses SHA-256 or stronger: 99.9% Certificate signature uses SHA-256 or stronger: 99.9% Certificate signature uses SHA-256 or stronger: 99.9% Certificate signature uses SHA-256 or stronger: 99.9% Certificate signature uses SHA-256 or stronger: 99.9% Certificate signature uses SHA-256 or stronger: 99.9% Certificate signature uses SHA-256 or stronger: 99.9% Certificate signature uses SHA-256 or stronger: 99.9% Certificate signature uses SHA-256 or stronger: 99.9% Certificate signature uses SHA-256 or stronger: 99.9% Certificate signature uses SHA-256 or stronger: 99.9% Certificate signature uses SHA-256 or stronger: 99.9% Certificate signature uses SHA-256 or stronger: 99.9% Certificate signature uses SHA-256 or stronger: 99.9% Certificate signature uses SHA-256 or stronger: 99.9% Certificate signature uses SHA-256 or stronger: 99.9% Certificate signature uses SHA-256 or stronger: 99.9% 99.9%Certificate signature uses SHA-256 or strongerNIST Special Publication 800-52 Revision 2 · n=973,441
Secure renegotiation is supported: 99.2% Secure renegotiation is supported: 99.2% Secure renegotiation is supported: 99.2% Secure renegotiation is supported: 99.2% Secure renegotiation is supported: 99.2% Secure renegotiation is supported: 99.2% Secure renegotiation is supported: 99.2% Secure renegotiation is supported: 99.2% Secure renegotiation is supported: 99.2% Secure renegotiation is supported: 99.2% Secure renegotiation is supported: 99.2% Secure renegotiation is supported: 99.2% Secure renegotiation is supported: 99.2% Secure renegotiation is supported: 99.2% Secure renegotiation is supported: 99.2% Secure renegotiation is supported: 99.2% Secure renegotiation is supported: 99.2% Secure renegotiation is supported: 99.2% Secure renegotiation is supported: 99.2% Secure renegotiation is supported: 99.2% 99.2%Secure renegotiation is supportedNIST Special Publication 800-52 Revision 2 · n=973,438
OCSP stapling recommendation is met: 8.3% OCSP stapling recommendation is met: 8.3% OCSP stapling recommendation is met: 8.3% OCSP stapling recommendation is met: 8.3% OCSP stapling recommendation is met: 8.3% OCSP stapling recommendation is met: 8.3% OCSP stapling recommendation is met: 8.3% OCSP stapling recommendation is met: 8.3% OCSP stapling recommendation is met: 8.3% OCSP stapling recommendation is met: 8.3% OCSP stapling recommendation is met: 8.3% OCSP stapling recommendation is met: 8.3% OCSP stapling recommendation is met: 8.3% OCSP stapling recommendation is met: 8.3% OCSP stapling recommendation is met: 8.3% OCSP stapling recommendation is met: 8.3% OCSP stapling recommendation is met: 8.3% OCSP stapling recommendation is met: 8.3% OCSP stapling recommendation is met: 8.3% OCSP stapling recommendation is met: 8.3% 8.3%OCSP stapling recommendation is metNIST Special Publication 800-52 Revision 2 · n=973,441
Certificate is publicly trusted: 96.1% Certificate is publicly trusted: 96.1% Certificate is publicly trusted: 96.1% Certificate is publicly trusted: 96.1% Certificate is publicly trusted: 96.1% Certificate is publicly trusted: 96.1% Certificate is publicly trusted: 96.1% Certificate is publicly trusted: 96.1% Certificate is publicly trusted: 96.1% Certificate is publicly trusted: 96.1% Certificate is publicly trusted: 96.1% Certificate is publicly trusted: 96.1% Certificate is publicly trusted: 96.1% Certificate is publicly trusted: 96.1% Certificate is publicly trusted: 96.1% Certificate is publicly trusted: 96.1% Certificate is publicly trusted: 96.1% Certificate is publicly trusted: 96.1% Certificate is publicly trusted: 96.1% Certificate is publicly trusted: 96.1% 96.1%Certificate is publicly trustedNIST Special Publication 800-52 Revision 2 · n=973,441

Denominator: applicable sites (requirements the scan cannot observe are excluded) · n = 973,441

Most-failed requirement in all ranks: OCSP stapling recommendation is met (NIST Special Publication 800-52 Revision 2).

View as table
RequirementCitationPass sharen
All requirementsNIST Special Publication 800-52 Revision 2, Guidelines for TLS Implementations (2019), https://doi.org/10.6028/NIST.SP.800-52r23.9%973,441
TLS 1.2 is supportedNIST Special Publication 800-52 Revision 2, Guidelines for TLS Implementations (2019), https://doi.org/10.6028/NIST.SP.800-52r299.3%973,441
TLS 1.3 is supportedNIST Special Publication 800-52 Revision 2, Guidelines for TLS Implementations (2019), https://doi.org/10.6028/NIST.SP.800-52r289.5%973,441
SSLv2, SSLv3, TLS 1.0, and TLS 1.1 are disabledNIST Special Publication 800-52 Revision 2, Guidelines for TLS Implementations (2019), https://doi.org/10.6028/NIST.SP.800-52r263.5%973,441
Forward-secrecy cipher suites are availableNIST Special Publication 800-52 Revision 2, Guidelines for TLS Implementations (2019), https://doi.org/10.6028/NIST.SP.800-52r299.8%973,441
Obsoleted CBC-only offering is absentNIST Special Publication 800-52 Revision 2, Guidelines for TLS Implementations (2019), https://doi.org/10.6028/NIST.SP.800-52r227.7%973,441
Certificate public key meets minimum strengthNIST Special Publication 800-52 Revision 2, Guidelines for TLS Implementations (2019), https://doi.org/10.6028/NIST.SP.800-52r2100%973,441
Certificate signature uses SHA-256 or strongerNIST Special Publication 800-52 Revision 2, Guidelines for TLS Implementations (2019), https://doi.org/10.6028/NIST.SP.800-52r299.9%973,441
Secure renegotiation is supportedNIST Special Publication 800-52 Revision 2, Guidelines for TLS Implementations (2019), https://doi.org/10.6028/NIST.SP.800-52r299.2%973,438
OCSP stapling recommendation is metNIST Special Publication 800-52 Revision 2, Guidelines for TLS Implementations (2019), https://doi.org/10.6028/NIST.SP.800-52r28.3%973,441
Certificate is publicly trustedNIST Special Publication 800-52 Revision 2, Guidelines for TLS Implementations (2019), https://doi.org/10.6028/NIST.SP.800-52r296.1%973,441

Source: GeoTrust Research — The State of SSL/TLS, October 2026