How Grading Works
This is a client-side heuristic evaluating standard security recommendations:
- RSA Key Size: ≥ 2048-bit (Pass) or ≥ 4096-bit (Strong)
- Signature Algorithm: SHA-256 / SHA-384 / SHA-512 (SHA-1 is deprecated)
- Validity Horizon: Expiration > 30 days
- SAN Coverage: Proper Subject Alternative Names