CLIENT
SERVER
Click any step above to see details — or press Play
Cipher Suites
TLS 1.2 — Key Exchange + Auth + Enc + MAC
ECDHE-RSA-AES128-GCM-SHA256
Key Exchange
ECDHE
Authentication
RSA
Encryption
AES-128-GCM
MAC / PRF
SHA-256
ECDHE-RSA-AES256-GCM-SHA384
Key Exchange
ECDHE
Authentication
RSA
Encryption
AES-256-GCM
MAC / PRF
SHA-384
DHE-RSA-CHACHA20-POLY1305
Key Exchange
DHE
Authentication
RSA
Encryption
ChaCha20
MAC / PRF
Poly1305
Certificate Chain
👑 Root CA
DigiCert Global Root CA — Self-signed, 20yr validity
Key: RSA 4096 | Sig: SHA-256
Key: RSA 4096 | Sig: SHA-256
↓ signs
🏭 Intermediate CA
DigiCert SHA2 Secure Server CA — 5yr validity
Key: RSA 2048 | Sig: SHA-256 | OCSP stapling
Key: RSA 2048 | Sig: SHA-256 | OCSP stapling
↓ signs
📄 Leaf / Server Cert
*.ximg.app — 90 days (Let's Encrypt)
Key: EC P-256 | SANs: ximg.app, *.ximg.app
Key: EC P-256 | SANs: ximg.app, *.ximg.app
Key Concepts