CheckTLS Default Cipher List
(in order of strength/preference)
| TLS_AES_256_GCM_SHA384 | TLSv1.3 | Kx=any | Au=any | Enc=AESGCM(256) | Mac=AEAD |
| TLS_CHACHA20_POLY1305_SHA256 | TLSv1.3 | Kx=any | Au=any | Enc=CHACHA20/POLY1305(256) | Mac=AEAD |
| TLS_AES_128_GCM_SHA256 | TLSv1.3 | Kx=any | Au=any | Enc=AESGCM(128) | Mac=AEAD |
| TLS_AES_128_CCM_SHA256 | TLSv1.3 | Kx=any | Au=any | Enc=AESCCM(128) | Mac=AEAD |
| ECDHE-ECDSA-AES256-GCM-SHA384 | TLSv1.2 | Kx=ECDH | Au=ECDSA | Enc=AESGCM(256) | Mac=AEAD |
| ECDHE-RSA-AES256-GCM-SHA384 | TLSv1.2 | Kx=ECDH | Au=RSA | Enc=AESGCM(256) | Mac=AEAD |
| DHE-DSS-AES256-GCM-SHA384 | TLSv1.2 | Kx=DH | Au=DSS | Enc=AESGCM(256) | Mac=AEAD |
| DHE-RSA-AES256-GCM-SHA384 | TLSv1.2 | Kx=DH | Au=RSA | Enc=AESGCM(256) | Mac=AEAD |
| ECDHE-ECDSA-CHACHA20-POLY1305 | TLSv1.2 | Kx=ECDH | Au=ECDSA | Enc=CHACHA20/POLY1305(256) | Mac=AEAD |
| ECDHE-RSA-CHACHA20-POLY1305 | TLSv1.2 | Kx=ECDH | Au=RSA | Enc=CHACHA20/POLY1305(256) | Mac=AEAD |
| DHE-RSA-CHACHA20-POLY1305 | TLSv1.2 | Kx=DH | Au=RSA | Enc=CHACHA20/POLY1305(256) | Mac=AEAD |
| ECDHE-ECDSA-AES256-CCM | TLSv1.2 | Kx=ECDH | Au=ECDSA | Enc=AESCCM(256) | Mac=AEAD |
| DHE-RSA-AES256-CCM | TLSv1.2 | Kx=DH | Au=RSA | Enc=AESCCM(256) | Mac=AEAD |
| ECDHE-ECDSA-ARIA256-GCM-SHA384 | TLSv1.2 | Kx=ECDH | Au=ECDSA | Enc=ARIAGCM(256) | Mac=AEAD |
| ECDHE-ARIA256-GCM-SHA384 | TLSv1.2 | Kx=ECDH | Au=RSA | Enc=ARIAGCM(256) | Mac=AEAD |
| DHE-DSS-ARIA256-GCM-SHA384 | TLSv1.2 | Kx=DH | Au=DSS | Enc=ARIAGCM(256) | Mac=AEAD |
| DHE-RSA-ARIA256-GCM-SHA384 | TLSv1.2 | Kx=DH | Au=RSA | Enc=ARIAGCM(256) | Mac=AEAD |
| ADH-AES256-GCM-SHA384 | TLSv1.2 | Kx=DH | Au=None | Enc=AESGCM(256) | Mac=AEAD |
| ECDHE-ECDSA-AES256-SHA384 | TLSv1.2 | Kx=ECDH | Au=ECDSA | Enc=AES(256) | Mac=SHA384 |
| ECDHE-RSA-AES256-SHA384 | TLSv1.2 | Kx=ECDH | Au=RSA | Enc=AES(256) | Mac=SHA384 |
| DHE-RSA-AES256-SHA256 | TLSv1.2 | Kx=DH | Au=RSA | Enc=AES(256) | Mac=SHA256 |
| DHE-DSS-AES256-SHA256 | TLSv1.2 | Kx=DH | Au=DSS | Enc=AES(256) | Mac=SHA256 |
| ECDHE-ECDSA-CAMELLIA256-SHA384 | TLSv1.2 | Kx=ECDH | Au=ECDSA | Enc=Camellia(256) | Mac=SHA384 |
| ECDHE-RSA-CAMELLIA256-SHA384 | TLSv1.2 | Kx=ECDH | Au=RSA | Enc=Camellia(256) | Mac=SHA384 |
| DHE-RSA-CAMELLIA256-SHA256 | TLSv1.2 | Kx=DH | Au=RSA | Enc=Camellia(256) | Mac=SHA256 |
| DHE-DSS-CAMELLIA256-SHA256 | TLSv1.2 | Kx=DH | Au=DSS | Enc=Camellia(256) | Mac=SHA256 |
| ADH-AES256-SHA256 | TLSv1.2 | Kx=DH | Au=None | Enc=AES(256) | Mac=SHA256 |
| ADH-CAMELLIA256-SHA256 | TLSv1.2 | Kx=DH | Au=None | Enc=Camellia(256) | Mac=SHA256 |
| ECDHE-ECDSA-AES256-SHA | TLSv1 | Kx=ECDH | Au=ECDSA | Enc=AES(256) | Mac=SHA1 |
| ECDHE-RSA-AES256-SHA | TLSv1 | Kx=ECDH | Au=RSA | Enc=AES(256) | Mac=SHA1 |
| DHE-RSA-AES256-SHA | SSLv3 | Kx=DH | Au=RSA | Enc=AES(256) | Mac=SHA1 |
| DHE-DSS-AES256-SHA | SSLv3 | Kx=DH | Au=DSS | Enc=AES(256) | Mac=SHA1 |
| DHE-RSA-CAMELLIA256-SHA | SSLv3 | Kx=DH | Au=RSA | Enc=Camellia(256) | Mac=SHA1 |
| DHE-DSS-CAMELLIA256-SHA | SSLv3 | Kx=DH | Au=DSS | Enc=Camellia(256) | Mac=SHA1 |
| AECDH-AES256-SHA | TLSv1 | Kx=ECDH | Au=None | Enc=AES(256) | Mac=SHA1 |
| ADH-AES256-SHA | SSLv3 | Kx=DH | Au=None | Enc=AES(256) | Mac=SHA1 |
| ADH-CAMELLIA256-SHA | SSLv3 | Kx=DH | Au=None | Enc=Camellia(256) | Mac=SHA1 |
| RSA-PSK-AES256-GCM-SHA384 | TLSv1.2 | Kx=RSAPSK | Au=RSA | Enc=AESGCM(256) | Mac=AEAD |
| DHE-PSK-AES256-GCM-SHA384 | TLSv1.2 | Kx=DHEPSK | Au=PSK | Enc=AESGCM(256) | Mac=AEAD |
| RSA-PSK-CHACHA20-POLY1305 | TLSv1.2 | Kx=RSAPSK | Au=RSA | Enc=CHACHA20/POLY1305(256) | Mac=AEAD |
| DHE-PSK-CHACHA20-POLY1305 | TLSv1.2 | Kx=DHEPSK | Au=PSK | Enc=CHACHA20/POLY1305(256) | Mac=AEAD |
| ECDHE-PSK-CHACHA20-POLY1305 | TLSv1.2 | Kx=ECDHEPSK | Au=PSK | Enc=CHACHA20/POLY1305(256) | Mac=AEAD |
| DHE-PSK-AES256-CCM | TLSv1.2 | Kx=DHEPSK | Au=PSK | Enc=AESCCM(256) | Mac=AEAD |
| RSA-PSK-ARIA256-GCM-SHA384 | TLSv1.2 | Kx=RSAPSK | Au=RSA | Enc=ARIAGCM(256) | Mac=AEAD |
| DHE-PSK-ARIA256-GCM-SHA384 | TLSv1.2 | Kx=DHEPSK | Au=PSK | Enc=ARIAGCM(256) | Mac=AEAD |
| AES256-GCM-SHA384 | TLSv1.2 | Kx=RSA | Au=RSA | Enc=AESGCM(256) | Mac=AEAD |
| AES256-CCM | TLSv1.2 | Kx=RSA | Au=RSA | Enc=AESCCM(256) | Mac=AEAD |
| ARIA256-GCM-SHA384 | TLSv1.2 | Kx=RSA | Au=RSA | Enc=ARIAGCM(256) | Mac=AEAD |
| PSK-AES256-GCM-SHA384 | TLSv1.2 | Kx=PSK | Au=PSK | Enc=AESGCM(256) | Mac=AEAD |
| PSK-CHACHA20-POLY1305 | TLSv1.2 | Kx=PSK | Au=PSK | Enc=CHACHA20/POLY1305(256) | Mac=AEAD |
| PSK-AES256-CCM | TLSv1.2 | Kx=PSK | Au=PSK | Enc=AESCCM(256) | Mac=AEAD |
| PSK-ARIA256-GCM-SHA384 | TLSv1.2 | Kx=PSK | Au=PSK | Enc=ARIAGCM(256) | Mac=AEAD |
| AES256-SHA256 | TLSv1.2 | Kx=RSA | Au=RSA | Enc=AES(256) | Mac=SHA256 |
| CAMELLIA256-SHA256 | TLSv1.2 | Kx=RSA | Au=RSA | Enc=Camellia(256) | Mac=SHA256 |
| ECDHE-PSK-AES256-CBC-SHA384 | TLSv1 | Kx=ECDHEPSK | Au=PSK | Enc=AES(256) | Mac=SHA384 |
| ECDHE-PSK-AES256-CBC-SHA | TLSv1 | Kx=ECDHEPSK | Au=PSK | Enc=AES(256) | Mac=SHA1 |
| SRP-DSS-AES-256-CBC-SHA | SSLv3 | Kx=SRP | Au=DSS | Enc=AES(256) | Mac=SHA1 |
| SRP-RSA-AES-256-CBC-SHA | SSLv3 | Kx=SRP | Au=RSA | Enc=AES(256) | Mac=SHA1 |
| SRP-AES-256-CBC-SHA | SSLv3 | Kx=SRP | Au=SRP | Enc=AES(256) | Mac=SHA1 |
| RSA-PSK-AES256-CBC-SHA384 | TLSv1 | Kx=RSAPSK | Au=RSA | Enc=AES(256) | Mac=SHA384 |
| DHE-PSK-AES256-CBC-SHA384 | TLSv1 | Kx=DHEPSK | Au=PSK | Enc=AES(256) | Mac=SHA384 |
| RSA-PSK-AES256-CBC-SHA | SSLv3 | Kx=RSAPSK | Au=RSA | Enc=AES(256) | Mac=SHA1 |
| DHE-PSK-AES256-CBC-SHA | SSLv3 | Kx=DHEPSK | Au=PSK | Enc=AES(256) | Mac=SHA1 |
| ECDHE-PSK-CAMELLIA256-SHA384 | TLSv1 | Kx=ECDHEPSK | Au=PSK | Enc=Camellia(256) | Mac=SHA384 |
| RSA-PSK-CAMELLIA256-SHA384 | TLSv1 | Kx=RSAPSK | Au=RSA | Enc=Camellia(256) | Mac=SHA384 |
| DHE-PSK-CAMELLIA256-SHA384 | TLSv1 | Kx=DHEPSK | Au=PSK | Enc=Camellia(256) | Mac=SHA384 |
| AES256-SHA | SSLv3 | Kx=RSA | Au=RSA | Enc=AES(256) | Mac=SHA1 |
| CAMELLIA256-SHA | SSLv3 | Kx=RSA | Au=RSA | Enc=Camellia(256) | Mac=SHA1 |
| PSK-AES256-CBC-SHA384 | TLSv1 | Kx=PSK | Au=PSK | Enc=AES(256) | Mac=SHA384 |
| PSK-AES256-CBC-SHA | SSLv3 | Kx=PSK | Au=PSK | Enc=AES(256) | Mac=SHA1 |
| PSK-CAMELLIA256-SHA384 | TLSv1 | Kx=PSK | Au=PSK | Enc=Camellia(256) | Mac=SHA384 |
| ECDHE-ECDSA-AES128-GCM-SHA256 | TLSv1.2 | Kx=ECDH | Au=ECDSA | Enc=AESGCM(128) | Mac=AEAD |
| ECDHE-RSA-AES128-GCM-SHA256 | TLSv1.2 | Kx=ECDH | Au=RSA | Enc=AESGCM(128) | Mac=AEAD |
| DHE-DSS-AES128-GCM-SHA256 | TLSv1.2 | Kx=DH | Au=DSS | Enc=AESGCM(128) | Mac=AEAD |
| DHE-RSA-AES128-GCM-SHA256 | TLSv1.2 | Kx=DH | Au=RSA | Enc=AESGCM(128) | Mac=AEAD |
| ECDHE-ECDSA-AES128-CCM | TLSv1.2 | Kx=ECDH | Au=ECDSA | Enc=AESCCM(128) | Mac=AEAD |
| DHE-RSA-AES128-CCM | TLSv1.2 | Kx=DH | Au=RSA | Enc=AESCCM(128) | Mac=AEAD |
| ECDHE-ECDSA-ARIA128-GCM-SHA256 | TLSv1.2 | Kx=ECDH | Au=ECDSA | Enc=ARIAGCM(128) | Mac=AEAD |
| ECDHE-ARIA128-GCM-SHA256 | TLSv1.2 | Kx=ECDH | Au=RSA | Enc=ARIAGCM(128) | Mac=AEAD |
| DHE-DSS-ARIA128-GCM-SHA256 | TLSv1.2 | Kx=DH | Au=DSS | Enc=ARIAGCM(128) | Mac=AEAD |
| DHE-RSA-ARIA128-GCM-SHA256 | TLSv1.2 | Kx=DH | Au=RSA | Enc=ARIAGCM(128) | Mac=AEAD |
| ADH-AES128-GCM-SHA256 | TLSv1.2 | Kx=DH | Au=None | Enc=AESGCM(128) | Mac=AEAD |
| ECDHE-ECDSA-AES128-SHA256 | TLSv1.2 | Kx=ECDH | Au=ECDSA | Enc=AES(128) | Mac=SHA256 |
| ECDHE-RSA-AES128-SHA256 | TLSv1.2 | Kx=ECDH | Au=RSA | Enc=AES(128) | Mac=SHA256 |
| DHE-RSA-AES128-SHA256 | TLSv1.2 | Kx=DH | Au=RSA | Enc=AES(128) | Mac=SHA256 |
| DHE-DSS-AES128-SHA256 | TLSv1.2 | Kx=DH | Au=DSS | Enc=AES(128) | Mac=SHA256 |
| ECDHE-ECDSA-CAMELLIA128-SHA256 | TLSv1.2 | Kx=ECDH | Au=ECDSA | Enc=Camellia(128) | Mac=SHA256 |
| ECDHE-RSA-CAMELLIA128-SHA256 | TLSv1.2 | Kx=ECDH | Au=RSA | Enc=Camellia(128) | Mac=SHA256 |
| DHE-RSA-CAMELLIA128-SHA256 | TLSv1.2 | Kx=DH | Au=RSA | Enc=Camellia(128) | Mac=SHA256 |
| DHE-DSS-CAMELLIA128-SHA256 | TLSv1.2 | Kx=DH | Au=DSS | Enc=Camellia(128) | Mac=SHA256 |
| ADH-AES128-SHA256 | TLSv1.2 | Kx=DH | Au=None | Enc=AES(128) | Mac=SHA256 |
| ADH-CAMELLIA128-SHA256 | TLSv1.2 | Kx=DH | Au=None | Enc=Camellia(128) | Mac=SHA256 |
| ECDHE-ECDSA-AES128-SHA | TLSv1 | Kx=ECDH | Au=ECDSA | Enc=AES(128) | Mac=SHA1 |
| ECDHE-RSA-AES128-SHA | TLSv1 | Kx=ECDH | Au=RSA | Enc=AES(128) | Mac=SHA1 |
| DHE-RSA-AES128-SHA | SSLv3 | Kx=DH | Au=RSA | Enc=AES(128) | Mac=SHA1 |
| DHE-DSS-AES128-SHA | SSLv3 | Kx=DH | Au=DSS | Enc=AES(128) | Mac=SHA1 |
| DHE-RSA-CAMELLIA128-SHA | SSLv3 | Kx=DH | Au=RSA | Enc=Camellia(128) | Mac=SHA1 |
| DHE-DSS-CAMELLIA128-SHA | SSLv3 | Kx=DH | Au=DSS | Enc=Camellia(128) | Mac=SHA1 |
| AECDH-AES128-SHA | TLSv1 | Kx=ECDH | Au=None | Enc=AES(128) | Mac=SHA1 |
| ADH-AES128-SHA | SSLv3 | Kx=DH | Au=None | Enc=AES(128) | Mac=SHA1 |
| ADH-CAMELLIA128-SHA | SSLv3 | Kx=DH | Au=None | Enc=Camellia(128) | Mac=SHA1 |
| RSA-PSK-AES128-GCM-SHA256 | TLSv1.2 | Kx=RSAPSK | Au=RSA | Enc=AESGCM(128) | Mac=AEAD |
| DHE-PSK-AES128-GCM-SHA256 | TLSv1.2 | Kx=DHEPSK | Au=PSK | Enc=AESGCM(128) | Mac=AEAD |
| DHE-PSK-AES128-CCM | TLSv1.2 | Kx=DHEPSK | Au=PSK | Enc=AESCCM(128) | Mac=AEAD |
| RSA-PSK-ARIA128-GCM-SHA256 | TLSv1.2 | Kx=RSAPSK | Au=RSA | Enc=ARIAGCM(128) | Mac=AEAD |
| DHE-PSK-ARIA128-GCM-SHA256 | TLSv1.2 | Kx=DHEPSK | Au=PSK | Enc=ARIAGCM(128) | Mac=AEAD |
| AES128-GCM-SHA256 | TLSv1.2 | Kx=RSA | Au=RSA | Enc=AESGCM(128) | Mac=AEAD |
| AES128-CCM | TLSv1.2 | Kx=RSA | Au=RSA | Enc=AESCCM(128) | Mac=AEAD |
| ARIA128-GCM-SHA256 | TLSv1.2 | Kx=RSA | Au=RSA | Enc=ARIAGCM(128) | Mac=AEAD |
| PSK-AES128-GCM-SHA256 | TLSv1.2 | Kx=PSK | Au=PSK | Enc=AESGCM(128) | Mac=AEAD |
| PSK-AES128-CCM | TLSv1.2 | Kx=PSK | Au=PSK | Enc=AESCCM(128) | Mac=AEAD |
| PSK-ARIA128-GCM-SHA256 | TLSv1.2 | Kx=PSK | Au=PSK | Enc=ARIAGCM(128) | Mac=AEAD |
| AES128-SHA256 | TLSv1.2 | Kx=RSA | Au=RSA | Enc=AES(128) | Mac=SHA256 |
| CAMELLIA128-SHA256 | TLSv1.2 | Kx=RSA | Au=RSA | Enc=Camellia(128) | Mac=SHA256 |
| ECDHE-PSK-AES128-CBC-SHA256 | TLSv1 | Kx=ECDHEPSK | Au=PSK | Enc=AES(128) | Mac=SHA256 |
| ECDHE-PSK-AES128-CBC-SHA | TLSv1 | Kx=ECDHEPSK | Au=PSK | Enc=AES(128) | Mac=SHA1 |
| SRP-DSS-AES-128-CBC-SHA | SSLv3 | Kx=SRP | Au=DSS | Enc=AES(128) | Mac=SHA1 |
| SRP-RSA-AES-128-CBC-SHA | SSLv3 | Kx=SRP | Au=RSA | Enc=AES(128) | Mac=SHA1 |
| SRP-AES-128-CBC-SHA | SSLv3 | Kx=SRP | Au=SRP | Enc=AES(128) | Mac=SHA1 |
| RSA-PSK-AES128-CBC-SHA256 | TLSv1 | Kx=RSAPSK | Au=RSA | Enc=AES(128) | Mac=SHA256 |
| DHE-PSK-AES128-CBC-SHA256 | TLSv1 | Kx=DHEPSK | Au=PSK | Enc=AES(128) | Mac=SHA256 |
| RSA-PSK-AES128-CBC-SHA | SSLv3 | Kx=RSAPSK | Au=RSA | Enc=AES(128) | Mac=SHA1 |
| DHE-PSK-AES128-CBC-SHA | SSLv3 | Kx=DHEPSK | Au=PSK | Enc=AES(128) | Mac=SHA1 |
| ECDHE-PSK-CAMELLIA128-SHA256 | TLSv1 | Kx=ECDHEPSK | Au=PSK | Enc=Camellia(128) | Mac=SHA256 |
| RSA-PSK-CAMELLIA128-SHA256 | TLSv1 | Kx=RSAPSK | Au=RSA | Enc=Camellia(128) | Mac=SHA256 |
| DHE-PSK-CAMELLIA128-SHA256 | TLSv1 | Kx=DHEPSK | Au=PSK | Enc=Camellia(128) | Mac=SHA256 |
| AES128-SHA | SSLv3 | Kx=RSA | Au=RSA | Enc=AES(128) | Mac=SHA1 |
| CAMELLIA128-SHA | SSLv3 | Kx=RSA | Au=RSA | Enc=Camellia(128) | Mac=SHA1 |
| PSK-AES128-CBC-SHA256 | TLSv1 | Kx=PSK | Au=PSK | Enc=AES(128) | Mac=SHA256 |
| PSK-AES128-CBC-SHA | SSLv3 | Kx=PSK | Au=PSK | Enc=AES(128) | Mac=SHA1 |
| PSK-CAMELLIA128-SHA256 | TLSv1 | Kx=PSK | Au=PSK | Enc=Camellia(128) | Mac=SHA256 |
| ECDHE-ECDSA-AES256-CCM8 | TLSv1.2 | Kx=ECDH | Au=ECDSA | Enc=AESCCM8(256) | Mac=AEAD |
| ECDHE-ECDSA-AES128-CCM8 | TLSv1.2 | Kx=ECDH | Au=ECDSA | Enc=AESCCM8(128) | Mac=AEAD |
| DHE-RSA-AES256-CCM8 | TLSv1.2 | Kx=DH | Au=RSA | Enc=AESCCM8(256) | Mac=AEAD |
| DHE-RSA-AES128-CCM8 | TLSv1.2 | Kx=DH | Au=RSA | Enc=AESCCM8(128) | Mac=AEAD |
| DHE-PSK-AES256-CCM8 | TLSv1.2 | Kx=DHEPSK | Au=PSK | Enc=AESCCM8(256) | Mac=AEAD |
| DHE-PSK-AES128-CCM8 | TLSv1.2 | Kx=DHEPSK | Au=PSK | Enc=AESCCM8(128) | Mac=AEAD |
| AES256-CCM8 | TLSv1.2 | Kx=RSA | Au=RSA | Enc=AESCCM8(256) | Mac=AEAD |
| AES128-CCM8 | TLSv1.2 | Kx=RSA | Au=RSA | Enc=AESCCM8(128) | Mac=AEAD |
| PSK-AES256-CCM8 | TLSv1.2 | Kx=PSK | Au=PSK | Enc=AESCCM8(256) | Mac=AEAD |
| PSK-AES128-CCM8 | TLSv1.2 | Kx=PSK | Au=PSK | Enc=AESCCM8(128) | Mac=AEAD |