Meets the TLS requirements of PCI DSS 4.0.1 Requirement 4.2.1: requirements met

PCI Security Standards Council, PCI DSS v4.0.1 Requirement 4.2.1 (2024), https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0_1.pdf — conformance of observable TLS configuration to the standard's technical requirements. Applicable sites only; a requirement the scan cannot observe is excluded from its denominator.

All requirements met: 60.2% All requirements met: 60.2% All requirements met: 60.2% All requirements met: 60.2% All requirements met: 60.2% All requirements met: 60.2% All requirements met: 60.2% All requirements met: 60.2% All requirements met: 60.2% All requirements met: 60.2% All requirements met: 60.2% All requirements met: 60.2% All requirements met: 60.2% All requirements met: 60.2% All requirements met: 60.2% All requirements met: 60.2% All requirements met: 60.2% All requirements met: 60.2% All requirements met: 60.2% All requirements met: 60.2% 60.2%All requirements met585,914 of 973,441 applicable sites · all ranks
TLS 1.2 or newer is supported: 100% TLS 1.2 or newer is supported: 100% TLS 1.2 or newer is supported: 100% TLS 1.2 or newer is supported: 100% TLS 1.2 or newer is supported: 100% TLS 1.2 or newer is supported: 100% TLS 1.2 or newer is supported: 100% TLS 1.2 or newer is supported: 100% TLS 1.2 or newer is supported: 100% TLS 1.2 or newer is supported: 100% TLS 1.2 or newer is supported: 100% TLS 1.2 or newer is supported: 100% TLS 1.2 or newer is supported: 100% TLS 1.2 or newer is supported: 100% TLS 1.2 or newer is supported: 100% TLS 1.2 or newer is supported: 100% TLS 1.2 or newer is supported: 100% TLS 1.2 or newer is supported: 100% TLS 1.2 or newer is supported: 100% TLS 1.2 or newer is supported: 100% 100%TLS 1.2 or newer is supportedPCI Security Standards Council · n=973,441
SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% SSLv3, TLS 1.0, and TLS 1.1 are disabled: 63.5% 63.5%SSLv3, TLS 1.0, and TLS 1.1 are disabledPCI Security Standards Council · n=973,441
Weak cipher families are disabled: 89.4% Weak cipher families are disabled: 89.4% Weak cipher families are disabled: 89.4% Weak cipher families are disabled: 89.4% Weak cipher families are disabled: 89.4% Weak cipher families are disabled: 89.4% Weak cipher families are disabled: 89.4% Weak cipher families are disabled: 89.4% Weak cipher families are disabled: 89.4% Weak cipher families are disabled: 89.4% Weak cipher families are disabled: 89.4% Weak cipher families are disabled: 89.4% Weak cipher families are disabled: 89.4% Weak cipher families are disabled: 89.4% Weak cipher families are disabled: 89.4% Weak cipher families are disabled: 89.4% Weak cipher families are disabled: 89.4% Weak cipher families are disabled: 89.4% Weak cipher families are disabled: 89.4% Weak cipher families are disabled: 89.4% 89.4%Weak cipher families are disabledPCI Security Standards Council · n=973,441
Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% Certificate public key meets minimum strength: 100% 100%Certificate public key meets minimum strengthPCI Security Standards Council · n=973,441
Certificate is trusted and unexpired: 96.1% Certificate is trusted and unexpired: 96.1% Certificate is trusted and unexpired: 96.1% Certificate is trusted and unexpired: 96.1% Certificate is trusted and unexpired: 96.1% Certificate is trusted and unexpired: 96.1% Certificate is trusted and unexpired: 96.1% Certificate is trusted and unexpired: 96.1% Certificate is trusted and unexpired: 96.1% Certificate is trusted and unexpired: 96.1% Certificate is trusted and unexpired: 96.1% Certificate is trusted and unexpired: 96.1% Certificate is trusted and unexpired: 96.1% Certificate is trusted and unexpired: 96.1% Certificate is trusted and unexpired: 96.1% Certificate is trusted and unexpired: 96.1% Certificate is trusted and unexpired: 96.1% Certificate is trusted and unexpired: 96.1% Certificate is trusted and unexpired: 96.1% Certificate is trusted and unexpired: 96.1% 96.1%Certificate is trusted and unexpiredPCI Security Standards Council · n=973,441

Denominator: applicable sites (requirements the scan cannot observe are excluded) · n = 973,441

Most-failed requirement in all ranks: SSLv3, TLS 1.0, and TLS 1.1 are disabled (PCI Security Standards Council).

View as table
RequirementCitationPass sharen
All requirementsPCI Security Standards Council, PCI DSS v4.0.1 Requirement 4.2.1 (2024), https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0_1.pdf60.2%973,441
TLS 1.2 or newer is supportedPCI Security Standards Council, PCI DSS v4.0.1 Requirement 4.2.1 (2024), https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0_1.pdf100%973,441
SSLv3, TLS 1.0, and TLS 1.1 are disabledPCI Security Standards Council, PCI DSS v4.0.1 Requirement 4.2.1 (2024), https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0_1.pdf63.5%973,441
Weak cipher families are disabledPCI Security Standards Council, PCI DSS v4.0.1 Requirement 4.2.1 (2024), https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0_1.pdf89.4%973,441
Certificate public key meets minimum strengthPCI Security Standards Council, PCI DSS v4.0.1 Requirement 4.2.1 (2024), https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0_1.pdf100%973,441
Certificate is trusted and unexpiredPCI Security Standards Council, PCI DSS v4.0.1 Requirement 4.2.1 (2024), https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Standard/PCI-DSS-v4_0_1.pdf96.1%973,441

Source: GeoTrust Research — The State of SSL/TLS, October 2026