tls info

nmap --script ssl-cert -p 443 root0.ca
Starting Nmap 7.80 ( https://nmap.org ) at 2022-01-03 07:38 EST
Nmap scan report for root0.ca (170.52.84.103)
Host is up (0.0013s latency).

PORT    STATE SERVICE
443/tcp open  https
| ssl-cert: Subject: commonName=root0.ca
| Subject Alternative Name: DNS:root0.ca, DNS:www.root0.ca
| Issuer: commonName=R3/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 2048
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2021-12-16T21:20:27
| Not valid after:  2022-03-16T21:20:26
| MD5:   7aee 7650 83a6 f38a c2e6 fd3b 075f 1bbd
|_SHA-1: 0a27 23e4 229e b8bb 22bc 5100 0bb7 6aff 1a9c fd28

Nmap done: 1 IP address (1 host up) scanned in 0.90 seconds

cipher list

nmap --script ssl-enum-ciphers -p 443 root0.ca
Starting Nmap 7.70 ( https://nmap.org ) at 2022-01-03 07:54 EST
Nmap scan report for root0.ca (170.52.84.103)
Host is up (0.0059s latency).

PORT    STATE SERVICE
443/tcp open  https
| ssl-enum-ciphers: 
|   TLSv1.2: 
|     ciphers: 
|       TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A
|       TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A
|       TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
|       TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 2048) - A
|       TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 2048) - A
|     compressors: 
|       NULL
|     cipher preference: server
|_  least strength: A

Nmap done: 1 IP address (1 host up) scanned in 3.09 seconds