Server Type

Nginx Apache Caddy HAProxy

Security Profile

Modern

TLS 1.3 only. Maximum security, supports all current browsers.

Chrome 70+, Firefox 63+, Safari 12.1+, Edge 79+, Android 10+, iOS 12.2+

Balanced Recommended

TLS 1.2 + 1.3 with strong cipher suites. Recommended for most sites.

Chrome 30+, Firefox 27+, Safari 7+, Edge 12+, Android 4.4+, iOS 9+, IE 11

Legacy (Unsafe) Unsafe

Includes TLS 1.0/1.1 for maximum compatibility. Not recommended.

IE 8+, Android 2.3+, Java 6+, OpenSSL 0.9.8+

TLS 1.0 and 1.1 are deprecated (RFC 8996). Use only if you must support very old clients.

Domain & Certificate Paths

Domain Name

Certificate Source

Certificate Path

Private Key Path

CA Chain Path

Options

HSTS Header

Force HTTPS via Strict-Transport-Security

OCSP Stapling

Embed certificate revocation status

HTTP/2

Enable HTTP/2 protocol support

HTTP → HTTPS Redirect

Redirect all HTTP traffic to HTTPS

HSTS Preload

Include preload directive (submit to hstspreload.org)

How it works

1 Select your web server type
2 Choose a security profile
3 Enter your domain and cert paths
4 Copy the config to your server
5 Verify with our SSL scanner

Profile Comparison

Feature	Modern	Balanced	Legacy
TLS 1.3	✓	✓	✓
TLS 1.2	✗	✓	✓
TLS 1.0/1.1	✗	✗	✓
IE 11	✗	✓	✓
Android 4.x	✗	✓	✓
Security	★★★	★★	★

Paste Your SSL Configuration

We'll detect the server type and find security anti-patterns.

Server Type (optional)

What we check

● Obsolete TLS versions (SSLv3, TLS 1.0/1.1)
● Weak cipher suites (RC4, 3DES, NULL)
● Broad cipher aliases (ALL, HIGH)
● Session ticket configuration
● OCSP stapling status
● HSTS header presence

Report a Bug

We're new and need your help to grow! Your feedback helps us improve.

Your Email (optional)

So we can follow up with you

What went wrong?

Describe the issue

Screenshot (optional)

Click to upload, drag & drop, or paste (Ctrl+V)

PNG, JPG up to 5MB

SSL Configuration Generator