Getting a perfect A+ ssllabs.com score

Yesterday evening I was trying to get my A+ score even better. Currently I was having this score:

And offcourse, nerds as we are, I wanted to get the perfect score. With perfect I mean that all bars are 100% green. On my Technical Fellows whatsapp group we where challenging each other to get this working.

There are a couple of posts on the web showing how to score an A+, Citrix has this blog post covering that: https://www.citrix.com/blogs/2016/06/09/scoring-an-a-at-ssllabs-com-with-citrix-netscaler-2016-update/

But how to get the perfect score?

There are a couple of things you need to tweak:

1: Get yourself a 4K certificate; (100% Key Exchange)


2: Remove all 128bits ciphers; (100% Cipher Strength)


3: Remove DH key (DH Key is maxxed at 2048 bits); (100% Key Exchange)

4: Remove the ECC Curves 256 and lower;. (100% Key Exchange)


5: Uncheck all SSL protocols except TLS1.2. (100% Protocol Support)

This will give you this perfect score:

I even added a CAA dns record so I have CAA support. 🙂

Thanks Erik Bakker, Henry Heres and Ruud Huud.

Posts created 113

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Related Posts

Begin typing your search term above and press enter to search. Press ESC to cancel.

Back To Top