Looks pretty good. Their configuration could use a larger DHE parameters (2048), replace RC4 with 3DES and enable OCSP Stapling. But it's already in the top 1% for TLS quality!

    $ ./cipherscan pinterest.com
    ................
    Target: pinterest.com:443
    
    prio  ciphersuite                  protocols              pfs_keysize
    1     ECDHE-RSA-AES128-GCM-SHA256  TLSv1.2                ECDH,P-256,256bits
    2     ECDHE-RSA-AES128-SHA256      TLSv1.2                ECDH,P-256,256bits
    3     ECDHE-RSA-AES128-SHA         TLSv1,TLSv1.1,TLSv1.2  ECDH,P-256,256bits
    4     DHE-RSA-AES128-SHA           TLSv1,TLSv1.1,TLSv1.2  DH,1024bits
    5     ECDHE-RSA-AES256-GCM-SHA384  TLSv1.2                ECDH,P-256,256bits
    6     ECDHE-RSA-AES256-SHA384      TLSv1.2                ECDH,P-256,256bits
    7     ECDHE-RSA-AES256-SHA         TLSv1,TLSv1.1,TLSv1.2  ECDH,P-256,256bits
    8     AES128-GCM-SHA256            TLSv1.2
    9     AES128-SHA256                TLSv1.2
    10    AES128-SHA                   TLSv1,TLSv1.1,TLSv1.2
    11    AES256-GCM-SHA384            TLSv1.2
    12    AES256-SHA256                TLSv1.2
    13    AES256-SHA                   TLSv1,TLSv1.1,TLSv1.2
    14    ECDHE-RSA-RC4-SHA            TLSv1,TLSv1.1,TLSv1.2  ECDH,P-256,256bits
    15    RC4-SHA                      TLSv1,TLSv1.1,TLSv1.2
    
    Certificate: trusted, 2048 bit, sha256WithRSAEncryption signature
    TLS ticket lifetime hint: 300
    OCSP stapling: not supported
    Server side cipher ordering