{"id":7916,"date":"2023-01-20T14:49:18","date_gmt":"2023-01-20T22:49:18","guid":{"rendered":"https:\/\/cheapsslsecurity.com\/blog\/?p=7916"},"modified":"2023-01-20T14:49:20","modified_gmt":"2023-01-20T22:49:20","slug":"tls-checker-how-to-check-the-tls-version-of-a-website","status":"publish","type":"post","link":"https:\/\/cheapsslsecurity.com\/blog\/tls-checker-how-to-check-the-tls-version-of-a-website\/","title":{"rendered":"TLS Checker: How to Check the TLS Version of a Website"},"content":{"rendered":"\n

We\u2019ll quickly walk you through how to check the TLS version (TLS 1.1, TLS 1.2, TLS 1.3) that a website supports using the Qualys SSL Labs TLS checker tool<\/h2>\n\n\n\n

Want to know how to check which TLS protocol versions are configured to run on a website\u2019s web server? The process is actually quite easy \u2014 simply pick one of the TLS checker tools available on the internet and follow the instructions. Usually, all you need is to provide your website’s domain or IP address.<\/p>\n\n\n\n

In this example, we\u2019ll use the SSL Test online tool <\/a>from Qualys SSL Labs to check our blog\u2019s domain: cheapsslsecurity.com. This method doesn’t cost anything and provides a quick and easy way to check your domain. <\/p>\n\n\n\n

How to Check the TLS Version of a Domain in 4 Steps<\/h2>\n\n\n\n

These directions here are for website users or owners to check to see which version of the TLS protocol a website (moreover, its web server) supports. This way, you know whether your site offers perfect forward secrecy<\/a> to browsers that support TLS version 1.3 or if it\u2019s using TLS 1.2 as a minimum.<\/p>\n\n\n\n

NOTE:<\/em><\/strong> Your SSL\/TLS certificate<\/a> really has no bearing on the TLS version that a server uses. The decision about which TLS protocol gets used is decided by the server based on the list of protocols supported by both parties (i.e., the server and the client attempting to connect to it).<\/em><\/p>\n\n\n\n

    \n
  1. Type the website\u2019s main domain.<\/strong> For example, this would be the information before the top-level domain (i.e., .com, .net, .co.uk). <\/li>\n<\/ol>\n\n\n\n
    \"A
    Image source: This screenshot was captured using the SSL Server Test tool on SSLLabs.com<\/a>.<\/figcaption><\/figure>\n\n\n\n

    Image source: This screenshot was captured using the SSL Server Test tool on SSLLabs.com<\/a>.<\/p>\n\n\n\n

      \n
    1. Press the submit button to enable the tool to start analyzing the domain.<\/strong> Note: If you have more than one IP, the tool will analyze all of them one by one. It\u2019ll then provide you with a detailed result for each IP individually.<\/li>\n<\/ol>\n\n\n\n
      \"A
      Image source: This screenshot was captured using Qualys’ SSL Server Test tool.<\/figcaption><\/figure>\n\n\n\n
        \n
      1. Select an IP address in the left-hand column and click on the embedded link. <\/strong>Doing this will enable you to view its detailed results. As you can see (stated in the second-from-the-bottom green box), the first IP address shows that the server supports TLS 1.3.<\/li>\n<\/ol>\n\n\n\n
        \"A
        Image source: This screenshot was captured using the SSL Server Test tool from Qualys SSL Labs.<\/figcaption><\/figure>\n\n\n\n
          \n
        1. Scroll down to the Configuration section to find the TLS version information.<\/strong> Here, you’ll notice in the screenshot below a whole bunch of interesting information relating to the TLS versions supported and which cipher suites the server prefers. For example, it shows that TLS 1.2 and TLS 1.3 are supported but that SSL 2, SSL 3, TLS 1.0, and TLS 1.1 aren\u2019t.<\/li>\n<\/ol>\n\n\n\n
          \"A
          Image source: This screenshot was captured using the SSL Server Test tool on SSLLabs.com.<\/figcaption><\/figure>\n\n\n\n

          If you scroll down even further, you\u2019ll find a slew of information about the supported protocols. This includes info relating to:<\/p>\n\n\n\n