App: SSLRobot - SSL/TLS Checker
Developer: Neumetrix Limited
Genres: Developer Tools, Utilities

Quickly test the configuration of your SSL web server on the internet or local network to see if has been configured correctly and securely.

An overall grade is assigned to the server and details of the SSL/TLS setup are checked:

- Server and intermediate certificates

- Encryption Protocols

- SSL/TLS supported versions

- HSTS configuration

- Forward Secrecy

- HTTP/2 support

Warnings and errors are displayed for settings that require attention such as:

-Insecure SSL protocol versions that should be disabled

-Certificates using weak SHA1 hashes

-Missing intermediate certificates that require a separate download in the browser

-Weak encryption algorithms 

The SSL settings of SMTP, IMAP and POP3 servers can also be checked by adding a port number to the host name.

SSLRobot is a free app. Any host name can be checked for free but the email, print and save features require an in-app purchase. You can try out the  email, print and save features without making a purchase by using one of the following host names -  facebook.com, amazon.com, microsoft.com, twitter.com, sslroboto.io, httpwatch.com

Release notes:
Changed: Encryption ciphers that do not support forward secrecy are now marked as weak
Changed: Encryption ciphers that use SHA message authentication (MAC) are now marked as weak
Changed: Encryption ciphers that use CBC mode are now marked as weak
Changed: A warning is generated for the TLS 1.0 and TLS 1.1 protocols as they will soon be deprecated by browsers
Changed: On macOS version 10.13 (High Sierra) or later is required
Fixed: The detection of downgrade protection (SCSV) failed on some hosts