Přihlásit se Registrace
Smlouvy Dotace Platy Úřady Zakázky Sponzoři & firmy PastVina 
❤ Podpořte nás Přihlásit se Registrace
Hledat v Hlídači státu
Nápověda jak vyhledávat Snadné hledání
  1. Hlídač Státu
  2. Hlídač Webů
  3. Detailní analýza HTTPs pro Využití rádiového spektra

Hlídač Využití rádiového spektra Detailní analýza HTTPs pro Využití rádiového spektra

Využití rádiového spektra
http://spektrum.ctu.cz/

Český telekomunikační úřad Efektivní přístup k informacím o rádiovém spektru a o podmínkách při využívání rádiového spektra.

Zabezpečení komunikace

T
Certifikát expiroval před 50 dny.

Výsledek analýzy HTTPS na spektrum.ctu.cz ze dne 30.06.2026

Služba je chráněna certifikátem od certifikační autority, kterou hlavní prohlížeče neznají nebo jí nedůvěřují. V českých podmínkách to znamená nejspíše certifikáty vydané našimi vnitrostátními autoritami (ICA, PostSignum a eIdentity), které sice stát zákonem prohlásil za důvěryhodné, ale které nesplňují mezinárodní podmínky nutné proto, aby je za důvěryhodné pokládali i autoři prohlížečů.

Detailní analýza

Detailní report z HTTPs analýzy pomocí nástroje testssl.sh

server spektrum.ctu.cz/185.178.175.78
pre_128cipher INFO { 
No 128 cipher limit bug
}
SSLv2 OK { 
not offered
}
SSLv3 OK { 
not offered
}
TLS1 INFO { 
not offered
}
TLS1_1 INFO { 
not offered
}
TLS1_2 OK { 
offered
}
TLS1_3 OK { 
offered with final
}
NPN INFO { 
not offered
}
ALPN_HTTP2 OK { 
h2
}
ALPN INFO { 
http/1.1
}
cipherlist_NULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_aNULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_EXPORT
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_LOW
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_3DES_IDEA
zranitelnosti: CWE-310
INFO { 
not offered
}
cipherlist_AVERAGE
zranitelnosti: CWE-310
INFO { 
not offered
}
cipherlist_GOOD INFO { 
not offered
}
cipherlist_STRONG OK { 
offered
}
cipher_order OK { 
server
}
protocol_negotiated OK { 
Default protocol TLS1.3
}
cipher_negotiated OK { 
TLS_AES_256_GCM_SHA384, 253 bit ECDH (X25519)
}
cipher-tls1_2_xc030 OK { 
TLSv1.2   xc030   ECDHE-RSA-AES256-GCM-SHA384       ECDH 253   AESGCM      256      TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_xcca8 OK { 
TLSv1.2   xcca8   ECDHE-RSA-CHACHA20-POLY1305       ECDH 253   ChaCha20    256      TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
}
cipher-tls1_2_xc061 OK { 
TLSv1.2   xc061   ECDHE-ARIA256-GCM-SHA384          ECDH 253   ARIAGCM     256      TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384
}
cipher-tls1_2_xc02f OK { 
TLSv1.2   xc02f   ECDHE-RSA-AES128-GCM-SHA256       ECDH 253   AESGCM      128      TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_xc060 OK { 
TLSv1.2   xc060   ECDHE-ARIA128-GCM-SHA256          ECDH 253   ARIAGCM     128      TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256
}
cipherorder_TLSv1_2 INFO { 
ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-CHACHA20-POLY1305 ECDHE-ARIA256-GCM-SHA384 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-ARIA128-GCM-SHA256
}
prioritize_chacha_TLSv1_2 INFO { 
false
}
cipher-tls1_3_x1302 OK { 
TLSv1.3   x1302   TLS_AES_256_GCM_SHA384            ECDH 253   AESGCM      256      TLS_AES_256_GCM_SHA384
}
cipher-tls1_3_x1303 OK { 
TLSv1.3   x1303   TLS_CHACHA20_POLY1305_SHA256      ECDH 253   ChaCha20    256      TLS_CHACHA20_POLY1305_SHA256
}
cipher-tls1_3_x1301 OK { 
TLSv1.3   x1301   TLS_AES_128_GCM_SHA256            ECDH 253   AESGCM      128      TLS_AES_128_GCM_SHA256
}
cipherorder_TLSv1_3 INFO { 
TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 TLS_AES_128_GCM_SHA256
}
prioritize_chacha_TLSv1_3 INFO { 
false
}
FS OK { 
offered
}
FS_ciphers INFO { 
TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-CHACHA20-POLY1305 ECDHE-ARIA256-GCM-SHA384 TLS_AES_128_GCM_SHA256 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-ARIA128-GCM-SHA256
}
FS_ECDHE_curves OK { 
prime256v1 secp384r1 secp521r1 X25519 X448
}
TLS_extensions INFO { 
'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'session ticket/#35' 'supported versions/#43' 'key share/#51' 'supported_groups/#10' 'max fragment length/#1' 'application layer protocol negotiation/#16' 'extended master secret/#23'
}
TLS_session_ticket INFO { 
valid for 300 seconds only (<daily)
}
SSL_sessionID_support INFO { 
yes
}
sessionresumption_ticket INFO { 
supported
}
sessionresumption_ID INFO { 
supported
}
TLS_timestamp INFO { 
random
}
certificate_compression INFO { 
none
}
clientAuth INFO { 
none
}
cert_numbers INFO { 
1
}
cert_signatureAlgorithm OK { 
SHA256 with RSA
}
cert_keySize INFO { 
RSA 2048 bits (exponent is 65537)
}
cert_keyUsage INFO { 
Digital Signature, Key Encipherment
}
cert_extKeyUsage INFO { 
TLS Web Server Authentication, TLS Web Client Authentication
}
cert_serialNumber INFO { 
069B9B2699CF9D7487EA428A5984A0AE3AC9
}
cert_serialNumberLen INFO { 
18
}
cert_fingerprintSHA1 INFO { 
4EA2A1C0596C1C35A1697DE5EA96F2D02CC02E71
}
cert_fingerprintSHA256 INFO { 
3AC9F404E82F34FB21853F9B066B57B2E711E52FEA4D30F3BE14EFD40CA3D448
}
cert INFO { 
-----BEGIN CERTIFICATE----- MIIE+zCCA+OgAwIBAgISBpubJpnPnXSH6kKKWYSgrjrJMA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTIwHhcNMjYwMjEwMjMzOTM4WhcNMjYwNTExMjMzOTM3WjAaMRgwFgYDVQQD Ew9zcGVrdHJ1bS5jdHUuY3owggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3102Oaz3bz3G63IhS5ETTfebNsA7/P/hf6FiAz6HU+aXyUZGsr/GkS3Wmw9eW eQ0FSYBybh+JsQnKIDPVv0VdANdCslx3AQsQJVGSh65pPHCj7Ah8lIIel2enSs6p qA7saScRGqvpLaPNbuVyI03o5g8bfJ++PK8clEjOn+qiWYO4JkD08i0JNBjD/p18 JZYM+RgAa2/JREo7EWh9dSKc5m2kIB35w97cAX281ZfEbdA8kv20TusyrPyW0qoT GfDfSwS8VTTaTslEDmoJkKn7HVz1buEgNcuW/+fu+WptVtVzXNtcYnWZIcR/8I9u 3p0qmaphyDE3d02at4n6aMi9AgMBAAGjggIgMIICHDAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFNQne5nynK3aRPok837h/s5On7ZPMB8GA1UdIwQYMBaAFAC1KfItjm8x 6JtMrXg++tzpDNHSMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEFBQcwAoYXaHR0cDov L3IxMi5pLmxlbmNyLm9yZy8wGgYDVR0RBBMwEYIPc3Bla3RydW0uY3R1LmN6MBMG A1UdIAQMMAowCAYGZ4EMAQIBMC4GA1UdHwQnMCUwI6AhoB+GHWh0dHA6Ly9yMTIu Yy5sZW5jci5vcmcvNzQuY3JsMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcADleU vPOuqT4zGyyZB7P3kN+bwj1xMiXdIaklrGHFTiEAAAGcSiJRGQAABAMASDBGAiEA kdGj7jxvBkQcTJWcrxT5y0/OcohqEmh5cHrR4HEWkq8CIQCk3lmjlYRFVHOHBNGs e3OB3ZBnpJ3oIGr7Nk8lpXYJMgB2ANFuqaVoB35mNaA/N6XdvAOlPEESFNSIGPXp MbMjy5UEAAABnEoiUdMAAAQDAEcwRQIgTdAToxUx4qJ8Uxp9Y0yazW0gqKqmn7x0 JgwvLf0aZNQCIQCyqTj5y4ISxiB0oCwU9tGBAbX0Ko/kxlbUgudXKd/ITTANBgkq hkiG9w0BAQsFAAOCAQEAcVQ/tjtkfHg8eDhcTy3hSAZadwzK/wgPtuLMVrFWyJky oh/xfwzgPZ4bXGszcl97A5McKfNqHxujLnFIl0pNzYt9C3rkJ7n1pniRmr5BsFy9 IwPj+bFnkMq/Q4le54KMbYUj44FYU6i6712/L4HmmsUTKXZEXX7IEvlUQvGs35IU OZ6TbTvsesH1QpKinRyboc64e3nCNAxHL3eIggEzb0feUJ92Opkq8zsZRbuiGKo/ 930co67dTtJWhFibM6vyK/B6nrC4EBBy44i8/13IXi9x+yPCVJMrzZbqcJkM/eDT ryob78XpnjGGBJLPSUkHfl57IlRv6SXQZ53dP0cjbA== -----END CERTIFICATE-----
}
cert_commonName OK { 
spektrum.ctu.cz
}
cert_commonName_wo_SNI INFO { 
new-voatt-spektrum
}
cert_subjectAltName INFO { 
spektrum.ctu.cz
}
cert_trust OK { 
Ok via SAN and CN (SNI mandatory)
}
cert_chain_of_trust CRITICAL { 
failed (expired).
}
cert_certificatePolicies_EV INFO { 
no
}
cert_expirationStatus CRITICAL { 
expired
}
cert_notBefore INFO { 
2026-02-10 23:39
}
cert_notAfter CRITICAL { 
2026-05-11 23:39
}
cert_extlifeSpan OK { 
certificate has no extended life time according to browser forum
}
cert_eTLS INFO { 
not present
}
cert_crlDistributionPoints INFO { 
http://r12.c.lencr.org/74.crl
}
cert_ocspURL INFO { 
--
}
OCSP_stapling INFO { 
not offered
}
cert_mustStapleExtension INFO { 
--
}
DNS_CAArecord LOW { 
--
}
certificate_transparency OK { 
yes (certificate extension)
}
certs_countServer INFO { 
3
}
certs_list_ordering_problem LOW { 
yes
}
cert_caIssuers INFO { 
R12 (Let's Encrypt from US)
}
intermediate_cert <#1> INFO { 
-----BEGIN CERTIFICATE----- MIIE+zCCA+OgAwIBAgISBpubJpnPnXSH6kKKWYSgrjrJMA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTIwHhcNMjYwMjEwMjMzOTM4WhcNMjYwNTExMjMzOTM3WjAaMRgwFgYDVQQD Ew9zcGVrdHJ1bS5jdHUuY3owggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3102Oaz3bz3G63IhS5ETTfebNsA7/P/hf6FiAz6HU+aXyUZGsr/GkS3Wmw9eW eQ0FSYBybh+JsQnKIDPVv0VdANdCslx3AQsQJVGSh65pPHCj7Ah8lIIel2enSs6p qA7saScRGqvpLaPNbuVyI03o5g8bfJ++PK8clEjOn+qiWYO4JkD08i0JNBjD/p18 JZYM+RgAa2/JREo7EWh9dSKc5m2kIB35w97cAX281ZfEbdA8kv20TusyrPyW0qoT GfDfSwS8VTTaTslEDmoJkKn7HVz1buEgNcuW/+fu+WptVtVzXNtcYnWZIcR/8I9u 3p0qmaphyDE3d02at4n6aMi9AgMBAAGjggIgMIICHDAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFNQne5nynK3aRPok837h/s5On7ZPMB8GA1UdIwQYMBaAFAC1KfItjm8x 6JtMrXg++tzpDNHSMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEFBQcwAoYXaHR0cDov L3IxMi5pLmxlbmNyLm9yZy8wGgYDVR0RBBMwEYIPc3Bla3RydW0uY3R1LmN6MBMG A1UdIAQMMAowCAYGZ4EMAQIBMC4GA1UdHwQnMCUwI6AhoB+GHWh0dHA6Ly9yMTIu Yy5sZW5jci5vcmcvNzQuY3JsMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcADleU vPOuqT4zGyyZB7P3kN+bwj1xMiXdIaklrGHFTiEAAAGcSiJRGQAABAMASDBGAiEA kdGj7jxvBkQcTJWcrxT5y0/OcohqEmh5cHrR4HEWkq8CIQCk3lmjlYRFVHOHBNGs e3OB3ZBnpJ3oIGr7Nk8lpXYJMgB2ANFuqaVoB35mNaA/N6XdvAOlPEESFNSIGPXp MbMjy5UEAAABnEoiUdMAAAQDAEcwRQIgTdAToxUx4qJ8Uxp9Y0yazW0gqKqmn7x0 JgwvLf0aZNQCIQCyqTj5y4ISxiB0oCwU9tGBAbX0Ko/kxlbUgudXKd/ITTANBgkq hkiG9w0BAQsFAAOCAQEAcVQ/tjtkfHg8eDhcTy3hSAZadwzK/wgPtuLMVrFWyJky oh/xfwzgPZ4bXGszcl97A5McKfNqHxujLnFIl0pNzYt9C3rkJ7n1pniRmr5BsFy9 IwPj+bFnkMq/Q4le54KMbYUj44FYU6i6712/L4HmmsUTKXZEXX7IEvlUQvGs35IU OZ6TbTvsesH1QpKinRyboc64e3nCNAxHL3eIggEzb0feUJ92Opkq8zsZRbuiGKo/ 930co67dTtJWhFibM6vyK/B6nrC4EBBy44i8/13IXi9x+yPCVJMrzZbqcJkM/eDT ryob78XpnjGGBJLPSUkHfl57IlRv6SXQZ53dP0cjbA== -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#1> INFO { 
3AC9F404E82F34FB21853F9B066B57B2E711E52FEA4D30F3BE14EFD40CA3D448
}
intermediate_cert_notBefore <#1> INFO { 
2026-02-10 23:39
}
intermediate_cert_notAfter <#1> CRITICAL { 
2026-05-11 23:39
}
intermediate_cert_expiration <#1> CRITICAL { 
expired!
}
intermediate_cert_chain <#1> INFO { 
spektrum.ctu.cz <-- R12
}
intermediate_cert <#2> INFO { 
-----BEGIN CERTIFICATE----- MIIFBjCCAu6gAwIBAgIRAMISMktwqbSRcdxA9+KFJjwwDQYJKoZIhvcNAQELBQAw TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMjQwMzEzMDAwMDAw WhcNMjcwMzEyMjM1OTU5WjAzMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNTGV0J3Mg RW5jcnlwdDEMMAoGA1UEAxMDUjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA2pgodK2+lP474B7i5Ut1qywSf+2nAzJ+Npfs6DGPpRONC5kuHs0BUT1M 5ShuCVUxqqUiXXL0LQfCTUA83wEjuXg39RplMjTmhnGdBO+ECFu9AhqZ66YBAJpz kG2Pogeg0JfT2kVhgTU9FPnEwF9q3AuWGrCf4yrqvSrWmMebcas7dA8827JgvlpL Thjp2ypzXIlhZZ7+7Tymy05v5J75AEaz/xlNKmOzjmbGGIVwx1Blbzt05UiDDwhY XS0jnV6j/ujbAKHS9OMZTfLuevYnnuXNnC2i8n+cF63vEzc50bTILEHWhsDp7CH4 WRt/uTp8n1wBnWIEwii9Cq08yhDsGwIDAQABo4H4MIH1MA4GA1UdDwEB/wQEAwIB hjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwEgYDVR0TAQH/BAgwBgEB /wIBADAdBgNVHQ4EFgQUALUp8i2ObzHom0yteD763OkM0dIwHwYDVR0jBBgwFoAU ebRZ5nu25eQBc4AIiMgaWPbpm24wMgYIKwYBBQUHAQEEJjAkMCIGCCsGAQUFBzAC hhZodHRwOi8veDEuaS5sZW5jci5vcmcvMBMGA1UdIAQMMAowCAYGZ4EMAQIBMCcG A1UdHwQgMB4wHKAaoBiGFmh0dHA6Ly94MS5jLmxlbmNyLm9yZy8wDQYJKoZIhvcN AQELBQADggIBAI910AnPanZIZTKS3rVEyIV29BWEjAK/duuz8eL5boSoVpHhkkv3 4eoAeEiPdZLj5EZ7G2ArIK+gzhTlRQ1q4FKGpPPaFBSpqV/xbUb5UlAXQOnkHn3m FVj+qYv87/WeY+Bm4sN3Ox8BhyaU7UAQ3LeZ7N1X01xxQe4wIAAE3JVLUCiHmZL+ qoCUtgYIFPgcg350QMUIWgxPXNGEncT921ne7nluI02V8pLUmClqXOsCwULw+PVO ZCB7qOMxxMBoCUeL2Ll4oMpOSr5pJCpLN3tRA2s6P1KLs9TSrVhOk+7LX28NMUlI usQ/nxLJID0RhAeFtPjyOCOscQBA53+NRjSCak7P4A5jX7ppmkcJECL+S0i3kXVU y5Me5BbrU8973jZNv/ax6+ZK6TM8jWmimL6of6OrX7ZU6E2WqazzsFrLG3o2kySb zlhSgJ81Cl4tv3SbYiYXnJExKQvzf83DYotox3f0fwv7xln1A2ZLplCb0O+l/AK0 YE0DS2FPxSAHi0iwMfW2nNHJrXcY3LLHD77gRgje4Eveubi2xxa+Nmk/hmhLdIET iVDFanoCrMVIpQ59XWHkzdFmoHXHBV7oibVjGSO7ULSQ7MJ1Nz51phuDJSgAIU7A 0zrLnOrAj/dfrlEWRhCvAgbuwLZX1A2sjNjXoPOHbsPiy+lO1KF8/XY7 -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#2> INFO { 
131FCE7784016899A5A00203A9EFC80F18EBBD75580717EDC1553580930836EC
}
intermediate_cert_notBefore <#2> INFO { 
2024-03-13 00:00
}
intermediate_cert_notAfter <#2> OK { 
2027-03-12 23:59
}
intermediate_cert_expiration <#2> OK { 
ok > 40 days
}
intermediate_cert_chain <#2> INFO { 
R12 <-- ISRG Root X1
}
intermediate_cert_badOCSP OK { 
intermediate certificate(s) is/are ok
}
HTTP_status_code INFO { 
301 Moved Permanently ('/')
}
HTTP_clock_skew INFO { 
0 seconds from localtime
}
HTTP_headerTime INFO { 
1782849747
}
HSTS LOW { 
not offered
}
HPKP INFO { 
No support for HTTP Public Key Pinning
}
banner_server INFO { 
Apache
}
banner_application INFO { 
No application banner found
}
cookie_count INFO { 
0 at '/' (30x detected, better try target URL of 30x)
}
security_headers MEDIUM { 
--
}
banner_reverseproxy
zranitelnosti: CWE-200
INFO { 
--
}
heartbleed
zranitelnosti: CVE-2014-0160 CWE-119
OK { 
not vulnerable, no heartbeat extension
}
CCS
zranitelnosti: CVE-2014-0224 CWE-310
OK { 
not vulnerable
}
ticketbleed
zranitelnosti: CVE-2016-9244 CWE-200
OK { 
not vulnerable
}
ROBOT
zranitelnosti: CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168 CWE-203
OK { 
not vulnerable, no RSA key transport cipher
}
secure_renego
zranitelnosti: CWE-310
OK { 
supported
}
secure_client_renego
zranitelnosti: CVE-2011-1473 CWE-310
OK { 
not vulnerable
}
CRIME_TLS
zranitelnosti: CVE-2012-4929 CWE-310
OK { 
not vulnerable
}
BREACH
zranitelnosti: CVE-2013-3587 CWE-310
OK { 
not vulnerable, no gzip/deflate/compress/br HTTP compression  - only supplied '/' tested
}
POODLE_SSL
zranitelnosti: CVE-2014-3566 CWE-310
OK { 
not vulnerable, no SSLv3
}
fallback_SCSV OK { 
no protocol below TLS 1.2 offered
}
SWEET32
zranitelnosti: CVE-2016-2183 CVE-2016-6329 CWE-327
OK { 
not vulnerable
}
FREAK
zranitelnosti: CVE-2015-0204 CWE-310
OK { 
not vulnerable
}
DROWN
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
OK { 
not vulnerable on this host and port
}
DROWN_hint
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
INFO { 
Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=3AC9F404E82F34FB21853F9B066B57B2E711E52FEA4D30F3BE14EFD40CA3D448
}
LOGJAM
zranitelnosti: CVE-2015-4000 CWE-310
OK { 
not vulnerable, no DH EXPORT ciphers,
}
LOGJAM-common_primes
zranitelnosti: CVE-2015-4000 CWE-310
OK { 
no DH key with <= TLS 1.2
}
BEAST
zranitelnosti: CVE-2011-3389 CWE-20
OK { 
not vulnerable, no SSL3 or TLS1
}
LUCKY13
zranitelnosti: CVE-2013-0169 CWE-310
OK { 
not vulnerable
}
winshock
zranitelnosti: CVE-2014-6321 CWE-94
OK { 
not vulnerable
}
RC4
zranitelnosti: CVE-2013-2566 CVE-2015-2808 CWE-310
OK { 
not vulnerable
}
clientsimulation-android_442 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-android_500 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-android_60 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-android_70 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-android_81 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-android_90 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-android_X INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-chrome_74_win10 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-chrome_79_win10 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-firefox_66_win81 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-firefox_71_win10 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-ie_6_xp INFO { 
No connection
}
clientsimulation-ie_8_win7 INFO { 
No connection
}
clientsimulation-ie_8_xp INFO { 
No connection
}
clientsimulation-ie_11_win7 INFO { 
No connection
}
clientsimulation-ie_11_win81 INFO { 
No connection
}
clientsimulation-ie_11_winphone81 INFO { 
No connection
}
clientsimulation-ie_11_win10 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-edge_15_win10 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-edge_17_win10 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-opera_66_win10 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-safari_9_ios9 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-safari_9_osx1011 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-safari_10_osx1012 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-safari_121_ios_122 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-safari_130_osx_10146 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-apple_ats_9_ios9 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-java_6u45 INFO { 
No connection
}
clientsimulation-java_7u25 INFO { 
No connection
}
clientsimulation-java_8u161 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-java1102 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-java1201 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-openssl_102e INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-openssl_110l INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-openssl_111d INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-thunderbird_68_3_1 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
rating_spec INFO { 
SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)
}
rating_doc INFO { 
https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide
}
protocol_support_score INFO { 
0
}
protocol_support_score_weighted INFO { 
0
}
key_exchange_score INFO { 
0
}
key_exchange_score_weighted INFO { 
0
}
cipher_strength_score INFO { 
0
}
cipher_strength_score_weighted INFO { 
0
}
final_score INFO { 
0
}
overall_grade CRITICAL { 
T
}
grade_cap_reason_1 INFO { 
Grade capped to T. Issues with the chain of trust (expired)
}
grade_cap_reason_2 INFO { 
Grade capped to T. Certificate expired
}
grade_cap_reason_3 INFO { 
Grade capped to A. HSTS is not offered
}
scanTime INFO { 
80
}