Neat tool. If anyone wants to see what a broken SSL certificate looks like, here's one of my expired ones (I really gotta renew it one of these days...)<p><a href="https://www.ssllabs.com/ssldb/analyze.html?d=https://secure.tweetname.com" rel="nofollow">https://www.ssllabs.com/ssldb/analyze.html?d=https://secure....</a>
While I liked the opportunity to tweak my configuration:<p>A tool that doesn't support SNI (at least it complains about getting the wrong certificate for one of my domains, something that doesn't happen in any browser I tested) is - restricted.
This is great although I'm not sure I agree with showing a list of "Recent Worst-Rated" (graded "F", presumed with vulnerabilities), seems like painting a target on some servers.
If you're running apache this line helped me improved my score drastically:<p>SSLCipherSuite ALL:!ADH:!EXPORT56:!EXPORT40:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:+EXP:+eNULL