Přihlásit se Registrace
Smlouvy Dotace Platy Úřady Zakázky Sponzoři & firmy Komunální a senátní volby 2026
❤ Podpořte nás Přihlásit se Registrace
Hledat v Hlídači státu
Nápověda jak vyhledávat Snadné hledání
  1. Hlídač Státu
  2. Hlídač Webů
  3. Detailní analýza HTTPs pro Portál pro podnikání

Hlídač Portál pro podnikání Detailní analýza HTTPs pro Portál pro podnikání

Portál pro podnikání
http://www.businessinfo.cz

CzechBusiness Zpřístupnuje pro občany a firmy EU chtějící podnikat v ČR na jednom místě veškeré postupy a podnikatelské formuláře s možností cizojazyčného vyplnění i přesto, že český řád umožňuje podat data pouze v českém jazyku.

Zabezpečení komunikace

A+

Výsledek analýzy HTTPS na www.businessinfo.cz ze dne 21.09.2026

Všechno je v nejlepším pořádku a web se drží doporučených postupů.

Detailní analýza

Detailní report z HTTPs analýzy pomocí nástroje testssl.sh

server www.businessinfo.cz/172.66.148.148
pre_128cipher INFO { 
No 128 cipher limit bug
}
SSLv2 OK { 
not offered
}
SSLv3 OK { 
not offered
}
TLS1 INFO { 
not offered
}
TLS1_1 INFO { 
not offered
}
TLS1_2 OK { 
offered
}
TLS1_3 OK { 
offered with final
}
NPN INFO { 
offered with h2, http/1.1 (advertised)
}
ALPN_HTTP2 OK { 
h2
}
ALPN INFO { 
http/1.1
}
cipherlist_NULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_aNULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_EXPORT
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_LOW
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_3DES_IDEA
zranitelnosti: CWE-310
INFO { 
not offered
}
cipherlist_AVERAGE
zranitelnosti: CWE-310
LOW { 
offered
}
cipherlist_GOOD OK { 
offered
}
cipherlist_STRONG OK { 
offered
}
cipher_order OK { 
server -- TLS 1.3 client determined
}
protocol_negotiated OK { 
Default protocol TLS1.3
}
cipher_negotiated OK { 
TLS_AES_256_GCM_SHA384, 253 bit ECDH (X25519)
}
cipher-tls1_2_xc02b OK { 
TLSv1.2   xc02b   ECDHE-ECDSA-AES128-GCM-SHA256     ECDH 253   AESGCM      128      TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_xcca9 OK { 
TLSv1.2   xcca9   ECDHE-ECDSA-CHACHA20-POLY1305     ECDH 253   ChaCha20    256      TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
}
cipher-tls1_2_xc009 LOW { 
TLSv1.2   xc009   ECDHE-ECDSA-AES128-SHA            ECDH 253   AES         128      TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_2_xc02c OK { 
TLSv1.2   xc02c   ECDHE-ECDSA-AES256-GCM-SHA384     ECDH 253   AESGCM      256      TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_xc00a LOW { 
TLSv1.2   xc00a   ECDHE-ECDSA-AES256-SHA            ECDH 253   AES         256      TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_2_xc023 LOW { 
TLSv1.2   xc023   ECDHE-ECDSA-AES128-SHA256         ECDH 253   AES         128      TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
}
cipher-tls1_2_xc024 LOW { 
TLSv1.2   xc024   ECDHE-ECDSA-AES256-SHA384         ECDH 253   AES         256      TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
}
cipher-tls1_2_xc02f OK { 
TLSv1.2   xc02f   ECDHE-RSA-AES128-GCM-SHA256       ECDH 253   AESGCM      128      TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_xcca8 OK { 
TLSv1.2   xcca8   ECDHE-RSA-CHACHA20-POLY1305       ECDH 253   ChaCha20    256      TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
}
cipher-tls1_2_xc013 LOW { 
TLSv1.2   xc013   ECDHE-RSA-AES128-SHA              ECDH 253   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_2_x9c OK { 
TLSv1.2   x9c     AES128-GCM-SHA256                 RSA        AESGCM      128      TLS_RSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_x2f LOW { 
TLSv1.2   x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_2_xc030 OK { 
TLSv1.2   xc030   ECDHE-RSA-AES256-GCM-SHA384       ECDH 253   AESGCM      256      TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_xc014 LOW { 
TLSv1.2   xc014   ECDHE-RSA-AES256-SHA              ECDH 253   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_2_x9d OK { 
TLSv1.2   x9d     AES256-GCM-SHA384                 RSA        AESGCM      256      TLS_RSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_x35 LOW { 
TLSv1.2   x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_2_xc027 LOW { 
TLSv1.2   xc027   ECDHE-RSA-AES128-SHA256           ECDH 253   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
}
cipher-tls1_2_x3c LOW { 
TLSv1.2   x3c     AES128-SHA256                     RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA256
}
cipher-tls1_2_xc028 LOW { 
TLSv1.2   xc028   ECDHE-RSA-AES256-SHA384           ECDH 253   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
}
cipher-tls1_2_x3d LOW { 
TLSv1.2   x3d     AES256-SHA256                     RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA256
}
cipherorder_TLSv1_2 INFO { 
ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-CHACHA20-POLY1305 ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES256-SHA384 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-CHACHA20-POLY1305 ECDHE-RSA-AES128-SHA AES128-GCM-SHA256 AES128-SHA ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA AES256-GCM-SHA384 AES256-SHA ECDHE-RSA-AES128-SHA256 AES128-SHA256 ECDHE-RSA-AES256-SHA384 AES256-SHA256
}
prioritize_chacha_TLSv1_2 INFO { 
true
}
cipher-tls1_3_x1302 OK { 
TLSv1.3   x1302   TLS_AES_256_GCM_SHA384            ECDH 253   AESGCM      256      TLS_AES_256_GCM_SHA384
}
cipher-tls1_3_x1303 OK { 
TLSv1.3   x1303   TLS_CHACHA20_POLY1305_SHA256      ECDH 253   ChaCha20    256      TLS_CHACHA20_POLY1305_SHA256
}
cipher-tls1_3_x1301 OK { 
TLSv1.3   x1301   TLS_AES_128_GCM_SHA256            ECDH 253   AESGCM      128      TLS_AES_128_GCM_SHA256
}
supportedciphers_TLSv1_3 INFO { 
TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 TLS_AES_128_GCM_SHA256
}
FS OK { 
offered
}
FS_ciphers INFO { 
TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-ECDSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-CHACHA20-POLY1305 ECDHE-RSA-CHACHA20-POLY1305 TLS_AES_128_GCM_SHA256 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-ECDSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-ECDSA-AES128-SHA
}
FS_ECDHE_curves OK { 
prime256v1 secp384r1 secp521r1 X25519
}
TLS_extensions INFO { 
'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'next protocol/#13172' 'key share/#51' 'supported versions/#43' 'extended master secret/#23' 'application layer protocol negotiation/#16' 'compress_certificate/#27'
}
TLS_session_ticket INFO { 
valid for 64800 seconds only (<daily)
}
SSL_sessionID_support INFO { 
yes
}
sessionresumption_ticket INFO { 
supported
}
sessionresumption_ID INFO { 
not supported
}
TLS_timestamp INFO { 
off by -5 seconds from your localtime
}
certificate_compression INFO { 
0002/Brotli
}
clientAuth INFO { 
none
}
cert_numbers INFO { 
2
}
cert_signatureAlgorithm <hostCert#1> OK { 
SHA256 with RSA
}
cert_keySize <hostCert#1> INFO { 
RSA 2048 bits (exponent is 65537)
}
cert_keyUsage <hostCert#1> INFO { 
Digital Signature, Key Encipherment
}
cert_extKeyUsage <hostCert#1> INFO { 
TLS Web Server Authentication
}
cert_serialNumber <hostCert#1> INFO { 
EF9580BF3D238F760EC105619226A01B
}
cert_serialNumberLen <hostCert#1> INFO { 
16
}
cert_fingerprintSHA1 <hostCert#1> INFO { 
A6AE7D3C12583F3F786D6F3DD71A5E1904A74396
}
cert_fingerprintSHA256 <hostCert#1> INFO { 
E5C0913FEFD880081C6B77AF76A9AC4914CAF6B57ED71BD675B8A72CF736A5FA
}
cert <hostCert#1> INFO { 
-----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIRAO+VgL89I492DsEFYZImoBswDQYJKoZIhvcNAQELBQAw OzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczEM MAoGA1UEAxMDV1IxMB4XDTI2MDgwMjA0MTYxMFoXDTI2MTAzMTA1MTM1MVowGjEY MBYGA1UEAxMPYnVzaW5lc3NpbmZvLmN6MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAxn3hIf8W4vbKN67OVd2WIIshCSF1Q2NPnITPxkr9kqfUcvd4gXuC hgt6aS/9rYK1CkaM/ZgwmQxj0eOkbUyaT2egWUMu3cowRT93ji614BAa2Q3lAiit 8aHZFdsq0Brhxj4VZ1Nt3tHU7qfnCg04sDwjdWVT9VNuDJKVy2qw6XoxxIkypr0T 3lAdsdj20Z6z8Dr8IkaPSfRxny4c6zo3qk8WTNRYyrUu6Z15Xkg7H9J3B5P8FFAC dFtK9eP+SBZAVxq88r/AesMV8CydnMvT0djG9hBEJeD/EntqHy0IJnbNqIzjFyNJ FWRPsv62XMehQsY3g+fF4Yr7pQ99zrVtHwIDAQABo4ICMTCCAi0wDgYDVR0PAQH/ BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFKvfDF3qrGJ2xhyDYguYZIHi1WHoMB8GA1UdIwQYMBaAFGZpSdTeKpyRA8+J DiS4DjADboguMDUGCCsGAQUFBwEBBCkwJzAlBggrBgEFBQcwAoYZaHR0cDovL2ku cGtpLmdvb2cvd3IxLmNydDAtBgNVHREEJjAkgg9idXNpbmVzc2luZm8uY3qCESou YnVzaW5lc3NpbmZvLmN6MBMGA1UdIAQMMAowCAYGZ4EMAQIBMDYGA1UdHwQvMC0w K6ApoCeGJWh0dHA6Ly9jLnBraS5nb29nL3dyMS9QT0Zxdk1lZjRFWS5jcmwwggED BgorBgEEAdZ5AgQCBIH0BIHxAO8AdgDCMX5XRRmjRe5/ON6ykEHrx8IhWiK/f9W1 rXaa2Q5SzQAAAZ/A5qxxAAAEAwBHMEUCIQCT/A0/RSP5xp3htPiLjcjsasrMVBQ8 6eQMz0s/XDkzYgIgUyU30heu2ywOsyeG7y05U0bGH3vZo1bH5ZCKgE3o6rkAdQDY CVU7lE96/8gWGW+UT4WrsPj8XodVJg8V0S5yu0VLFAAAAZ/A5qyTAAAEAwBGMEQC IA02omKHdvaspNqimANxCY5EizFKA0IE2GWUunY30JuyAiAWA7j3IuISFx7mFqxQ UQNwp+UTGmm9+9DhgV2sS1Y1dzANBgkqhkiG9w0BAQsFAAOCAQEALoFsWmbXDz81 feMrGgmyImave2Cr348fLZ3bBCij1KP2KN6jPaixgqwLPS1Xl0gz7QfB8d6Xuii/ DiLmdQT6ejTEo3jlACui6XP98a2jLhHue8XnNLnbeDPlNBhj4C76FcpYossjQTX0 K3vXz5JEy2LS4Gwbi490JmnL3DE8Bo1uOZ2At4LynFpjq5FO4udM098+oEQdn1Qp WBn2GS++C39kyWIc6cwYBS81NFcr+evJjz4Q/9Zs6sZIc+xfWyvpaIwybWyn7AqD r1eycLWFlZHPq0zKsFPNr3ZQs1nrDfxz7Mf/ih67WrkTxPUqx+nO6QeSyolFRKOR 5Q3S05BPMA== -----END CERTIFICATE-----
}
cert_commonName <hostCert#1> OK { 
businessinfo.cz
}
cert_commonName_wo_SNI <hostCert#1> INFO { 
request w/o SNI didn't succeed
}
cert_subjectAltName <hostCert#1> INFO { 
businessinfo.cz *.businessinfo.cz
}
cert_trust <hostCert#1> OK { 
Ok via SAN wildcard (SNI mandatory)
}
cert_chain_of_trust <hostCert#1> OK { 
passed.
}
cert_certificatePolicies_EV <hostCert#1> INFO { 
no
}
cert_expirationStatus <hostCert#1> MEDIUM { 
expires < 60 days (39)
}
cert_notBefore <hostCert#1> INFO { 
2026-08-02 04:16
}
cert_notAfter <hostCert#1> MEDIUM { 
2026-10-31 05:13
}
cert_extlifeSpan <hostCert#1> OK { 
certificate has no extended life time according to browser forum
}
cert_eTLS <hostCert#1> INFO { 
not present
}
cert_crlDistributionPoints <hostCert#1> INFO { 
http://c.pki.goog/wr1/POFqvMef4EY.crl
}
cert_ocspURL <hostCert#1> INFO { 
--
}
OCSP_stapling <hostCert#1> INFO { 
not offered
}
cert_mustStapleExtension <hostCert#1> INFO { 
--
}
DNS_CAArecord <hostCert#1> OK { 
issue=comodoca.com, issue=digicert.com;, issue=letsencrypt.org, issue=pki.goog;, issue=ssl.com, issuewild=comodoca.com, issuewild=digicert.com;, issuewild=letsencrypt.org, issuewild=pki.goog;, issuewild=ssl.com
}
certificate_transparency <hostCert#1> OK { 
yes (certificate extension)
}
certs_countServer <hostCert#1> INFO { 
3
}
certs_list_ordering_problem <hostCert#1> INFO { 
no
}
cert_caIssuers <hostCert#1> INFO { 
WR1 (Google Trust Services from US)
}
intermediate_cert <#1> <hostCert#1> INFO { 
-----BEGIN CERTIFICATE----- MIIFCzCCAvOgAwIBAgIQf9niwtIEigR0tieibQhopzANBgkqhkiG9w0BAQsFADBH MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzEUMBIGA1UEAxMLR1RTIFJvb3QgUjEwHhcNMjMxMjEzMDkwMDAwWhcNMjkwMjIw MTQwMDAwWjA7MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNl cnZpY2VzMQwwCgYDVQQDEwNXUjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDPbjYWircr7kaYAx1TcA937qNLoHK+jyMtwkfGj1yN+T3mGo7uMyINyRFI uLBizvRpDXICfd7VJg/DbpvPfg7XIM/GkDujggbaOp3/bFa/3OlhlEXkabxPD8kT wK1hRHIggdAPK55oamJqj4oiV3lpK+IkM352YyxdvFFpfiMHsf92gfHuuFi1azUV 76HmSCg5lzHZBx+Vp56uz5i8no2KA+Gwl01Qb5NMSh/4233xkJkVf+OW7e4xgepy PVId3yVkpQtwqp7oqLlHyKdaECVgb0Lh1z/njwzwwoNGMyDmS3cEdqFop10VGO/Y KHc1rQ6tRuRibuKq+MzvN34PJrMHAgMBAAGjgf4wgfswDgYDVR0PAQH/BAQDAgGG MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAGAQH/ AgEAMB0GA1UdDgQWBBRmaUnU3iqckQPPiQ4kuA4wA26ILjAfBgNVHSMEGDAWgBTk rysmcRorSCeFL1JmLO/wiRNxPjA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAKG GGh0dHA6Ly9pLnBraS5nb29nL3IxLmNydDArBgNVHR8EJDAiMCCgHqAchhpodHRw Oi8vYy5wa2kuZ29vZy9yL3IxLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATANBgkq hkiG9w0BAQsFAAOCAgEATuazCBEgkWAn+VGQTQIY7rjBidUihJfm1t/mTjo7KQR+ 3iDx4o2L06oeF0Q3wpKYpQgI/TeMqUlYMWQmZbWPE0PX8pfsVAE5E5tVOjh34bNA JwDPVnsZVJwzN3nw5BGQ7sxRspFzIcM/qbbTpNeXf9II4Wsk2+Tv6FSVFZUL3/0u HradbruDWjRQ4IZ7mYqKiEqk08dpOZ+TmBzwykEGy1/IXberb6Ap1SSnn2+RI7t6 N/fqPCrwwFjp8kg1G6etRATGBaPYCx+GjJMFPX+k97Alvoj3/98SvqdegLPYEPjv xUclHpiKLD63NMmVarVQddIL6kOvTe5k0pnxRnR+mndGHIQc77TLbcZFeja56Pyn lSqmer578c7CBrPqo1BVmPyWUK+v6sGuzs7Mq7QQaxVs4710cI/MpPp1ovxMVt17 ENKxLk34LpEKAKVmqwnzbHHRjhXNeCC984XDOwLEp0K4MzHl8ZOWJQAakCdVlFC+ PyA3GP2JX/QLoqWNHGuN9c9vLObDhHVs/L+65De+OdnnjpFGI9xxtsNyRsyaHdFA f5z7ulOoXDXkHCCej/Ehs5docReNt16W2xbH/EBuirJrOzFE2rtALxksl1TdEjOf IKXOJfUqQeVI5+hA7V+n1+A/n7Npg0S+5ODytWh5XW54ccN1drJnMK54ttozh0c= -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#1> <hostCert#1> INFO { 
B10B6F00E609509E8700F6D34687A2BFCE38EA05A8FDF1CDC40C3A2A0D0D0E45
}
intermediate_cert_notBefore <#1> <hostCert#1> INFO { 
2023-12-13 09:00
}
intermediate_cert_notAfter <#1> <hostCert#1> OK { 
2029-02-20 14:00
}
intermediate_cert_expiration <#1> <hostCert#1> OK { 
ok > 40 days
}
intermediate_cert_chain <#1> <hostCert#1> INFO { 
WR1 <-- GTS Root R1
}
intermediate_cert <#2> <hostCert#1> INFO { 
-----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgIQd70NbNs2+RrqIQ/E8FjTDTANBgkqhkiG9w0BAQsFADBX MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEQMA4GA1UE CxMHUm9vdCBDQTEbMBkGA1UEAxMSR2xvYmFsU2lnbiBSb290IENBMB4XDTIwMDYx OTAwMDA0MloXDTI4MDEyODAwMDA0MlowRzELMAkGA1UEBhMCVVMxIjAgBgNVBAoT GUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBMTEMxFDASBgNVBAMTC0dUUyBSb290IFIx MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAthECix7joXebO9y/lD63 ladAPKH9gvl9MgaCcfb2jH/76Nu8ai6Xl6OMS/kr9rH5zoQdsfnFl97vufKj6bwS iV6nqlKr+CMny6SxnGPb15l+8Ape62im9MZaRw1NEDPjTrETo8gYbEvs/AmQ351k KSUjB6G00j0uYODP0gmHu81I8E3CwnqIiru6z1kZ1q+PsAewnjHxgsHA3y6mbWwZ DrXYfiYaRQM9sHmklCitD38m5agI/pboPGiUU+6DOogrFZYJsuB6jC511pzrp1Zk j5ZPaK49l8KEj8C8QMALXL32h7M1bKwYUH+E4EzNktMg6TO8UpmvMrUpsyUqtEj5 cuHKZPfmghCN6J3Cioj6OGaK/GP5Afl4/Xtcd/p2h/rs37EOeZVXtL0m79YB0esW CruOC7XFxYpVq9Os6pFLKcwZpDIlTirxZUTQAs6qzkm06p98g7BAe+dDq6dso499 iYH6TKX/1Y7DzkvgtdizjkXPdsDtQCv9Uw+wp9U7DbGKogPeMa3Md+pvez7W35Ei Eua++tgy/BBjFFFy3l3WFpO9KWgz7zpm7AeKJt8T11dleCfeXkkUAKIAf5qoIbap sZWwpbkNFhHax2xIPEDgfg1azVY80ZcFuctL7TlLnMQ/0lUTbiSw1nH69MG6zO0b 9f6BQdgAmD06yK56mDcYBZUCAwEAAaOCATgwggE0MA4GA1UdDwEB/wQEAwIBhjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTkrysmcRorSCeFL1JmLO/wiRNxPjAf BgNVHSMEGDAWgBRge2YaRQ2XyolQL30EzTSo//z9SzBgBggrBgEFBQcBAQRUMFIw JQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnBraS5nb29nL2dzcjEwKQYIKwYBBQUH MAKGHWh0dHA6Ly9wa2kuZ29vZy9nc3IxL2dzcjEuY3J0MDIGA1UdHwQrMCkwJ6Al oCOGIWh0dHA6Ly9jcmwucGtpLmdvb2cvZ3NyMS9nc3IxLmNybDA7BgNVHSAENDAy MAgGBmeBDAECATAIBgZngQwBAgIwDQYLKwYBBAHWeQIFAwIwDQYLKwYBBAHWeQIF AwMwDQYJKoZIhvcNAQELBQADggEBADSkHrEoo9C0dhemMXoh6dFSPsjbdBZBiLg9 NR3t5P+T4Vxfq7vqfM/b5A3Ri1fyJm9bvhdGaJQ3b2t6yMAYN/olUazsaL+yyEn9 WprKASOshIArAoyZl+tJaox118fessmXn1hIVw41oeQa1v1vg4Fv74zPl6/AhSrw 9U5pCZEt4Wi4wStz6dTZ/CLANx8LZh1J7QJVj2fhMtfTJr9w4z30Z209fOU0iOMy +qduBmpvvYuR7hZL6Dupszfnw0Skfths18dG9ZKb59UhvmaSGZRVbNQpsg3BZlvi d0lIKO2d1xozclOzgjXPYovJJIultzkMu34qQb9Sz/yilrbCgj8= -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#2> <hostCert#1> INFO { 
3EE0278DF71FA3C125C4CD487F01D774694E6FC57E0CD94C24EFD769133918E5
}
intermediate_cert_notBefore <#2> <hostCert#1> INFO { 
2020-06-19 00:00
}
intermediate_cert_notAfter <#2> <hostCert#1> OK { 
2028-01-28 00:00
}
intermediate_cert_expiration <#2> <hostCert#1> OK { 
ok > 40 days
}
intermediate_cert_chain <#2> <hostCert#1> INFO { 
GTS Root R1 <-- GlobalSign Root CA
}
intermediate_cert_badOCSP <hostCert#1> OK { 
intermediate certificate(s) is/are ok
}
cert_signatureAlgorithm <hostCert#2> OK { 
ECDSA with SHA256
}
cert_keySize <hostCert#2> OK { 
EC 256 bits (curve P-256)
}
cert_keyUsage <hostCert#2> INFO { 
Digital Signature
}
cert_extKeyUsage <hostCert#2> INFO { 
TLS Web Server Authentication
}
cert_serialNumber <hostCert#2> INFO { 
30C0E85194CAD627135F1E703F104052
}
cert_serialNumberLen <hostCert#2> INFO { 
16
}
cert_fingerprintSHA1 <hostCert#2> INFO { 
1CF23A82EBD749075A9A6729125628CA3AADF9D6
}
cert_fingerprintSHA256 <hostCert#2> INFO { 
4FCD73953CEBF7BF2C1E78E724575EE3542B7691784221C4C56DF47F4CB695C4
}
cert <hostCert#2> INFO { 
-----BEGIN CERTIFICATE----- MIIDiDCCAy6gAwIBAgIQMMDoUZTK1icTXx5wPxBAUjAKBggqhkjOPQQDAjA7MQsw CQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZpY2VzMQwwCgYD VQQDEwNXRTEwHhcNMjYwODAyMDQxNjIxWhcNMjYxMDMxMDUxNjE2WjAaMRgwFgYD VQQDEw9idXNpbmVzc2luZm8uY3owWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQ/ 9FIa6c3l3v5Y4aI/OIwqeBlXZ1SScYk+OAtyFrE9lSvL3RZM92Lv0G35USYAOTWO LCXwSRyKEAHUX1b1FpP8o4ICMzCCAi8wDgYDVR0PAQH/BAQDAgeAMBMGA1UdJQQM MAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGExymyx5glWTeqd ql0whIkd6+uPMB8GA1UdIwQYMBaAFJB3kjVnxP+ozKnme9mAeXvMk/k4MDUGCCsG AQUFBwEBBCkwJzAlBggrBgEFBQcwAoYZaHR0cDovL2kucGtpLmdvb2cvd2UxLmNy dDAtBgNVHREEJjAkgg9idXNpbmVzc2luZm8uY3qCESouYnVzaW5lc3NpbmZvLmN6 MBMGA1UdIAQMMAowCAYGZ4EMAQIBMDYGA1UdHwQvMC0wK6ApoCeGJWh0dHA6Ly9j LnBraS5nb29nL3dlMS8zcjFLRjllSjZpUS5jcmwwggEFBgorBgEEAdZ5AgQCBIH2 BIHzAPEAdgDLOPcViXyEoURfW8Hd+8lu8ppZzUcKaQWFsMsUwxRY5wAAAZ/A5tjU AAAEAwBHMEUCIFhVgVH37RoF3MWsFDe+rQhFZBzGwDurx3u7cTvX1RV4AiEApsfS dHoXoNULPIX8IcON1uBCH1yw85RRMEiYx9pnBRIAdwDYCVU7lE96/8gWGW+UT4Wr sPj8XodVJg8V0S5yu0VLFAAAAZ/A5tjeAAAEAwBIMEYCIQC+LR/rVQhgoOKfHbSs YicRWVaJduA901s5fEcRAXuLuAIhAIHG3DMdcMmwKIXXr0Gtn+EBH5Ou6FFrVdAe +giZGqcNMAoGCCqGSM49BAMCA0gAMEUCIQDs0QFlABnK3rEyCGp+4ReCZm7B4jAB sVf4X3hyRubfzgIgdxvJ+eq7QGQyxVm6s9JEvxbCuda4wiBCwjgpK+biwX4= -----END CERTIFICATE-----
}
cert_commonName <hostCert#2> OK { 
businessinfo.cz
}
cert_commonName_wo_SNI <hostCert#2> INFO { 
request w/o SNI didn't succeed, usual for EC certificates
}
cert_subjectAltName <hostCert#2> INFO { 
businessinfo.cz *.businessinfo.cz
}
cert_trust <hostCert#2> OK { 
Ok via SAN wildcard (SNI mandatory)
}
cert_chain_of_trust <hostCert#2> OK { 
passed.
}
cert_certificatePolicies_EV <hostCert#2> INFO { 
no
}
cert_expirationStatus <hostCert#2> MEDIUM { 
expires < 60 days (39)
}
cert_notBefore <hostCert#2> INFO { 
2026-08-02 04:16
}
cert_notAfter <hostCert#2> MEDIUM { 
2026-10-31 05:16
}
cert_extlifeSpan <hostCert#2> OK { 
certificate has no extended life time according to browser forum
}
cert_eTLS <hostCert#2> INFO { 
not present
}
cert_crlDistributionPoints <hostCert#2> INFO { 
http://c.pki.goog/we1/3r1KF9eJ6iQ.crl
}
cert_ocspURL <hostCert#2> INFO { 
--
}
OCSP_stapling <hostCert#2> INFO { 
not offered
}
cert_mustStapleExtension <hostCert#2> INFO { 
--
}
DNS_CAArecord <hostCert#2> OK { 
issue=comodoca.com, issue=digicert.com;, issue=letsencrypt.org, issue=pki.goog;, issue=ssl.com, issuewild=comodoca.com, issuewild=digicert.com;, issuewild=letsencrypt.org, issuewild=pki.goog;, issuewild=ssl.com
}
certificate_transparency <hostCert#2> OK { 
yes (certificate extension)
}
certs_countServer <hostCert#2> INFO { 
3
}
certs_list_ordering_problem <hostCert#2> INFO { 
no
}
cert_caIssuers <hostCert#2> INFO { 
WE1 (Google Trust Services from US)
}
intermediate_cert <#1> <hostCert#2> INFO { 
-----BEGIN CERTIFICATE----- MIICnzCCAiWgAwIBAgIQf/MZd5csIkp2FV0TttaF4zAKBggqhkjOPQQDAzBHMQsw CQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEU MBIGA1UEAxMLR1RTIFJvb3QgUjQwHhcNMjMxMjEzMDkwMDAwWhcNMjkwMjIwMTQw MDAwWjA7MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZp Y2VzMQwwCgYDVQQDEwNXRTEwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAARvzTr+ Z1dHTCEDhUDCR127WEcPQMFcF4XGGTfn1XzthkubgdnXGhOlCgP4mMTG6J7/EFmP LCaY9eYmJbsPAvpWo4H+MIH7MA4GA1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwEgYDVR0TAQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQU kHeSNWfE/6jMqeZ72YB5e8yT+TgwHwYDVR0jBBgwFoAUgEzW63T/STaj1dj8tT7F avCUHYwwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzAChhhodHRwOi8vaS5wa2ku Z29vZy9yNC5jcnQwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2MucGtpLmdvb2cv ci9yNC5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwCgYIKoZIzj0EAwMDaAAwZQIx AOcCq1HW90OVznX+0RGU1cxAQXomvtgM8zItPZCuFQ8jSBJSjz5keROv9aYsAm5V sQIwJonMaAFi54mrfhfoFNZEfuNMSQ6/bIBiNLiyoX46FohQvKeIoJ99cx7sUkFN 7uJW -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#1> <hostCert#2> INFO { 
1DFC1605FBAD358D8BC844F76D15203FAC9CA5C1A79FD4857FFAF2864FBEBF96
}
intermediate_cert_notBefore <#1> <hostCert#2> INFO { 
2023-12-13 09:00
}
intermediate_cert_notAfter <#1> <hostCert#2> OK { 
2029-02-20 14:00
}
intermediate_cert_expiration <#1> <hostCert#2> OK { 
ok > 40 days
}
intermediate_cert_chain <#1> <hostCert#2> INFO { 
WE1 <-- GTS Root R4
}
intermediate_cert <#2> <hostCert#2> INFO { 
-----BEGIN CERTIFICATE----- MIIDejCCAmKgAwIBAgIQf+UwvzMTQ77dghYQST2KGzANBgkqhkiG9w0BAQsFADBX MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEQMA4GA1UE CxMHUm9vdCBDQTEbMBkGA1UEAxMSR2xvYmFsU2lnbiBSb290IENBMB4XDTIzMTEx NTAzNDMyMVoXDTI4MDEyODAwMDA0MlowRzELMAkGA1UEBhMCVVMxIjAgBgNVBAoT GUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBMTEMxFDASBgNVBAMTC0dUUyBSb290IFI0 MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAE83Rzp2iLYK5DuDXFgTB7S0md+8Fhzube Rr1r1WEYNa5A3XP3iZEwWus87oV8okB2O6nGuEfYKueSkWpz6bFyOZ8pn6KY019e WIZlD6GEZQbR3IvJx3PIjGov5cSr0R2Ko4H/MIH8MA4GA1UdDwEB/wQEAwIBhjAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDwYDVR0TAQH/BAUwAwEB/zAd BgNVHQ4EFgQUgEzW63T/STaj1dj8tT7FavCUHYwwHwYDVR0jBBgwFoAUYHtmGkUN l8qJUC99BM00qP/8/UswNgYIKwYBBQUHAQEEKjAoMCYGCCsGAQUFBzAChhpodHRw Oi8vaS5wa2kuZ29vZy9nc3IxLmNydDAtBgNVHR8EJjAkMCKgIKAehhxodHRwOi8v Yy5wa2kuZ29vZy9yL2dzcjEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA0GCSqG SIb3DQEBCwUAA4IBAQAYQrsPBtYDh5bjP2OBDwmkoWhIDDkic574y04tfzHpn+cJ odI2D4SseesQ6bDrarZ7C30ddLibZatoKiws3UL9xnELz4ct92vID24FfVbiI1hY +SW6FoVHkNeWIP0GCbaM4C6uVdF5dTUsMVs/ZbzNnIdCp5Gxmx5ejvEau8otR/Cs kGN+hr/W5GvT1tMBjgWKZ1i4//emhA1JG1BbPzoLJQvyEotc03lXjTaCzv8mEbep 8RqZ7a2CPsgRbuvTPBwcOMBBmuFeU88+FSBX6+7iP0il8b4Z0QFqIwwMHfs/L6K1 vepuoxtGzi4CZ68zJpiq1UvSqTbFJjtbD4seiMHl -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#2> <hostCert#2> INFO { 
76B27B80A58027DC3CF1DA68DAC17010ED93997D0B603E2FADBE85012493B5A7
}
intermediate_cert_notBefore <#2> <hostCert#2> INFO { 
2023-11-15 03:43
}
intermediate_cert_notAfter <#2> <hostCert#2> OK { 
2028-01-28 00:00
}
intermediate_cert_expiration <#2> <hostCert#2> OK { 
ok > 40 days
}
intermediate_cert_chain <#2> <hostCert#2> INFO { 
GTS Root R4 <-- GlobalSign Root CA
}
intermediate_cert_badOCSP <hostCert#2> OK { 
intermediate certificate(s) is/are ok
}
HTTP_status_code INFO { 
200 OK ('/')
}
HTTP_clock_skew INFO { 
+3341 seconds from localtime
}
HTTP_headerTime INFO { 
1790020983
}
HTTP_headerAge INFO { 
3341 seconds
}
HSTS_time OK { 
365 days (=31536000 seconds) > 15552000 seconds
}
HSTS_subdomains OK { 
includes subdomains
}
HSTS_preload INFO { 
domain is NOT marked for preloading
}
HPKP INFO { 
No support for HTTP Public Key Pinning
}
banner_server INFO { 
cloudflare
}
banner_application INFO { 
x-powered-by: BusinessInfo.cz
}
cookie_count INFO { 
0 at '/'
}
X-Frame-Options OK { 
SAMEORIGIN
}
X-Content-Type-Options OK { 
nosniff
}
Content-Security-Policy OK { 
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://code.jquery.com https://kit.fontawesome.com https://www.google.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://analytics.businessinfo.cz https://matomo.businessinfo.cz; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com http://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://ka-p.fontawesome.com; img-src 'self' data: https: blob:; font-src 'self' https://fonts.gstatic.com https://ka-p.fontawesome.com data:; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com https://www.google.com https://api.mapy.com https://ka-p.fontawesome.com https://mx.businessinfo.cz https://analytics.businessinfo.cz https://matomo.businessinfo.cz https://projekt-bi.geetix.com https://projekt.businessinfo.cz https://projekt-staging.businessinfo.cz https://my.yoast.com https://cdn.jsdelivr.net; frame-src 'self' blob: https://www.googletagmanager.com https://www.google.com https://maps.google.com https://www.youtube.com https://player.vimeo.com https://embed.spotify.com https://embed.podcasts.apple.com https://w.soundcloud.com https://player.captivate.fm https://mx.businessinfo.cz https://wp.freemius.com https://api.freemius.com; manifest-src 'self' https://businessinfo.cloudflareaccess.com; worker-src 'self' blob:; base-uri 'self'; form-action 'self'
}
Permissions-Policy OK { 
accelerometer=*, autoplay=*, encrypted-media=*, fullscreen=*, geolocation=*, gyroscope=*, magnetometer=*, microphone=*, payment=*, sync-xhr=*
}
Referrer-Policy INFO { 
strict-origin-when-cross-origin
}
Cache-Control INFO { 
max-age=14400, must-revalidate
}
Pragma INFO { 
no-cache
}
banner_reverseproxy
zranitelnosti: CWE-200
INFO { 
--
}
heartbleed
zranitelnosti: CVE-2014-0160 CWE-119
OK { 
not vulnerable, no heartbeat extension
}
CCS
zranitelnosti: CVE-2014-0224 CWE-310
OK { 
not vulnerable
}
ticketbleed
zranitelnosti: CVE-2016-9244 CWE-200
OK { 
not vulnerable
}
ROBOT
zranitelnosti: CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168 CWE-203
OK { 
not vulnerable
}
secure_renego
zranitelnosti: CWE-310
WARN { 
OpenSSL handshake didn't succeed
}
secure_client_renego
zranitelnosti: CVE-2011-1473 CWE-310
OK { 
not vulnerable
}
CRIME_TLS
zranitelnosti: CVE-2012-4929 CWE-310
OK { 
not vulnerable
}
BREACH
zranitelnosti: CVE-2013-3587 CWE-310
MEDIUM { 
potentially VULNERABLE, gzip br HTTP compression detected  - only supplied '/' tested
}
POODLE_SSL
zranitelnosti: CVE-2014-3566 CWE-310
OK { 
not vulnerable, no SSLv3
}
fallback_SCSV OK { 
no protocol below TLS 1.2 offered
}
SWEET32
zranitelnosti: CVE-2016-2183 CVE-2016-6329 CWE-327
OK { 
not vulnerable
}
FREAK
zranitelnosti: CVE-2015-0204 CWE-310
OK { 
not vulnerable
}
DROWN
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
OK { 
not vulnerable on this host and port
}
DROWN_hint
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
INFO { 
Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=E5C0913FEFD880081C6B77AF76A9AC4914CAF6B57ED71BD675B8A72CF736A5FA
}
LOGJAM
zranitelnosti: CVE-2015-4000 CWE-310
OK { 
not vulnerable, no DH EXPORT ciphers,
}
LOGJAM-common_primes
zranitelnosti: CVE-2015-4000 CWE-310
OK { 
no DH key with <= TLS 1.2
}
BEAST
zranitelnosti: CVE-2011-3389 CWE-20
OK { 
not vulnerable, no SSL3 or TLS1
}
LUCKY13
zranitelnosti: CVE-2013-0169 CWE-310
LOW { 
potentially vulnerable, uses TLS CBC ciphers
}
winshock
zranitelnosti: CVE-2014-6321 CWE-94
OK { 
not vulnerable
}
RC4
zranitelnosti: CVE-2013-2566 CVE-2015-2808 CWE-310
OK { 
not vulnerable
}
clientsimulation-android_442 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_500 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_60 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_70 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_81 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_90 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-android_X INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-chrome_74_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-chrome_79_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-firefox_66_win81 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-firefox_71_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-ie_6_xp INFO { 
No connection
}
clientsimulation-ie_8_win7 INFO { 
No connection
}
clientsimulation-ie_8_xp INFO { 
No connection
}
clientsimulation-ie_11_win7 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-ie_11_win81 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-ie_11_winphone81 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-ie_11_win10 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-edge_15_win10 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-edge_17_win10 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-opera_66_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-safari_9_ios9 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-safari_9_osx1011 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-safari_10_osx1012 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-safari_121_ios_122 INFO { 
TLSv1.3 TLS_CHACHA20_POLY1305_SHA256
}
clientsimulation-safari_130_osx_10146 INFO { 
TLSv1.3 TLS_CHACHA20_POLY1305_SHA256
}
clientsimulation-apple_ats_9_ios9 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-java_6u45 INFO { 
No connection
}
clientsimulation-java_7u25 INFO { 
No connection
}
clientsimulation-java_8u161 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-java1102 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-java1201 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-openssl_102e INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-openssl_110l INFO { 
TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305
}
clientsimulation-openssl_111d INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-thunderbird_68_3_1 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
rating_spec INFO { 
SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)
}
rating_doc INFO { 
https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide
}
protocol_support_score INFO { 
100
}
protocol_support_score_weighted INFO { 
30
}
key_exchange_score INFO { 
90
}
key_exchange_score_weighted INFO { 
27
}
cipher_strength_score INFO { 
90
}
cipher_strength_score_weighted INFO { 
36
}
final_score INFO { 
93
}
overall_grade OK { 
A+
}
server www.businessinfo.cz/104.20.47.63
pre_128cipher INFO { 
No 128 cipher limit bug
}
SSLv2 OK { 
not offered
}
SSLv3 OK { 
not offered
}
TLS1 INFO { 
not offered
}
TLS1_1 INFO { 
not offered
}
TLS1_2 OK { 
offered
}
TLS1_3 OK { 
offered with final
}
NPN INFO { 
offered with h2, http/1.1 (advertised)
}
ALPN_HTTP2 OK { 
h2
}
ALPN INFO { 
http/1.1
}
cipherlist_NULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_aNULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_EXPORT
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_LOW
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_3DES_IDEA
zranitelnosti: CWE-310
INFO { 
not offered
}
cipherlist_AVERAGE
zranitelnosti: CWE-310
LOW { 
offered
}
cipherlist_GOOD OK { 
offered
}
cipherlist_STRONG OK { 
offered
}
cipher_order OK { 
server -- TLS 1.3 client determined
}
protocol_negotiated OK { 
Default protocol TLS1.3
}
cipher_negotiated OK { 
TLS_AES_256_GCM_SHA384, 253 bit ECDH (X25519)
}
cipher-tls1_2_xc02b OK { 
TLSv1.2   xc02b   ECDHE-ECDSA-AES128-GCM-SHA256     ECDH 253   AESGCM      128      TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_xcca9 OK { 
TLSv1.2   xcca9   ECDHE-ECDSA-CHACHA20-POLY1305     ECDH 253   ChaCha20    256      TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
}
cipher-tls1_2_xc009 LOW { 
TLSv1.2   xc009   ECDHE-ECDSA-AES128-SHA            ECDH 253   AES         128      TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_2_xc02c OK { 
TLSv1.2   xc02c   ECDHE-ECDSA-AES256-GCM-SHA384     ECDH 253   AESGCM      256      TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_xc00a LOW { 
TLSv1.2   xc00a   ECDHE-ECDSA-AES256-SHA            ECDH 253   AES         256      TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_2_xc023 LOW { 
TLSv1.2   xc023   ECDHE-ECDSA-AES128-SHA256         ECDH 253   AES         128      TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
}
cipher-tls1_2_xc024 LOW { 
TLSv1.2   xc024   ECDHE-ECDSA-AES256-SHA384         ECDH 253   AES         256      TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
}
cipher-tls1_2_xc02f OK { 
TLSv1.2   xc02f   ECDHE-RSA-AES128-GCM-SHA256       ECDH 253   AESGCM      128      TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_xcca8 OK { 
TLSv1.2   xcca8   ECDHE-RSA-CHACHA20-POLY1305       ECDH 253   ChaCha20    256      TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
}
cipher-tls1_2_xc013 LOW { 
TLSv1.2   xc013   ECDHE-RSA-AES128-SHA              ECDH 253   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_2_x9c OK { 
TLSv1.2   x9c     AES128-GCM-SHA256                 RSA        AESGCM      128      TLS_RSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_x2f LOW { 
TLSv1.2   x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_2_xc030 OK { 
TLSv1.2   xc030   ECDHE-RSA-AES256-GCM-SHA384       ECDH 253   AESGCM      256      TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_xc014 LOW { 
TLSv1.2   xc014   ECDHE-RSA-AES256-SHA              ECDH 253   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_2_x9d OK { 
TLSv1.2   x9d     AES256-GCM-SHA384                 RSA        AESGCM      256      TLS_RSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_x35 LOW { 
TLSv1.2   x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_2_xc027 LOW { 
TLSv1.2   xc027   ECDHE-RSA-AES128-SHA256           ECDH 253   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
}
cipher-tls1_2_x3c LOW { 
TLSv1.2   x3c     AES128-SHA256                     RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA256
}
cipher-tls1_2_xc028 LOW { 
TLSv1.2   xc028   ECDHE-RSA-AES256-SHA384           ECDH 253   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
}
cipher-tls1_2_x3d LOW { 
TLSv1.2   x3d     AES256-SHA256                     RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA256
}
cipherorder_TLSv1_2 INFO { 
ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-CHACHA20-POLY1305 ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES256-SHA384 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-CHACHA20-POLY1305 ECDHE-RSA-AES128-SHA AES128-GCM-SHA256 AES128-SHA ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA AES256-GCM-SHA384 AES256-SHA ECDHE-RSA-AES128-SHA256 AES128-SHA256 ECDHE-RSA-AES256-SHA384 AES256-SHA256
}
prioritize_chacha_TLSv1_2 INFO { 
true
}
cipher-tls1_3_x1302 OK { 
TLSv1.3   x1302   TLS_AES_256_GCM_SHA384            ECDH 253   AESGCM      256      TLS_AES_256_GCM_SHA384
}
cipher-tls1_3_x1303 OK { 
TLSv1.3   x1303   TLS_CHACHA20_POLY1305_SHA256      ECDH 253   ChaCha20    256      TLS_CHACHA20_POLY1305_SHA256
}
cipher-tls1_3_x1301 OK { 
TLSv1.3   x1301   TLS_AES_128_GCM_SHA256            ECDH 253   AESGCM      128      TLS_AES_128_GCM_SHA256
}
supportedciphers_TLSv1_3 INFO { 
TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 TLS_AES_128_GCM_SHA256
}
FS OK { 
offered
}
FS_ciphers INFO { 
TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-ECDSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-CHACHA20-POLY1305 ECDHE-RSA-CHACHA20-POLY1305 TLS_AES_128_GCM_SHA256 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-ECDSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-ECDSA-AES128-SHA
}
FS_ECDHE_curves OK { 
prime256v1 secp384r1 secp521r1 X25519
}
TLS_extensions INFO { 
'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'next protocol/#13172' 'key share/#51' 'supported versions/#43' 'extended master secret/#23' 'application layer protocol negotiation/#16' 'compress_certificate/#27'
}
TLS_session_ticket INFO { 
valid for 64800 seconds only (<daily)
}
SSL_sessionID_support INFO { 
yes
}
sessionresumption_ticket INFO { 
supported
}
sessionresumption_ID INFO { 
supported
}
TLS_timestamp INFO { 
off by -5 seconds from your localtime
}
certificate_compression INFO { 
0002/Brotli
}
clientAuth INFO { 
none
}
cert_numbers INFO { 
2
}
cert_signatureAlgorithm <hostCert#1> OK { 
SHA256 with RSA
}
cert_keySize <hostCert#1> INFO { 
RSA 2048 bits (exponent is 65537)
}
cert_keyUsage <hostCert#1> INFO { 
Digital Signature, Key Encipherment
}
cert_extKeyUsage <hostCert#1> INFO { 
TLS Web Server Authentication
}
cert_serialNumber <hostCert#1> INFO { 
EF9580BF3D238F760EC105619226A01B
}
cert_serialNumberLen <hostCert#1> INFO { 
16
}
cert_fingerprintSHA1 <hostCert#1> INFO { 
A6AE7D3C12583F3F786D6F3DD71A5E1904A74396
}
cert_fingerprintSHA256 <hostCert#1> INFO { 
E5C0913FEFD880081C6B77AF76A9AC4914CAF6B57ED71BD675B8A72CF736A5FA
}
cert <hostCert#1> INFO { 
-----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIRAO+VgL89I492DsEFYZImoBswDQYJKoZIhvcNAQELBQAw OzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczEM MAoGA1UEAxMDV1IxMB4XDTI2MDgwMjA0MTYxMFoXDTI2MTAzMTA1MTM1MVowGjEY MBYGA1UEAxMPYnVzaW5lc3NpbmZvLmN6MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAxn3hIf8W4vbKN67OVd2WIIshCSF1Q2NPnITPxkr9kqfUcvd4gXuC hgt6aS/9rYK1CkaM/ZgwmQxj0eOkbUyaT2egWUMu3cowRT93ji614BAa2Q3lAiit 8aHZFdsq0Brhxj4VZ1Nt3tHU7qfnCg04sDwjdWVT9VNuDJKVy2qw6XoxxIkypr0T 3lAdsdj20Z6z8Dr8IkaPSfRxny4c6zo3qk8WTNRYyrUu6Z15Xkg7H9J3B5P8FFAC dFtK9eP+SBZAVxq88r/AesMV8CydnMvT0djG9hBEJeD/EntqHy0IJnbNqIzjFyNJ FWRPsv62XMehQsY3g+fF4Yr7pQ99zrVtHwIDAQABo4ICMTCCAi0wDgYDVR0PAQH/ BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFKvfDF3qrGJ2xhyDYguYZIHi1WHoMB8GA1UdIwQYMBaAFGZpSdTeKpyRA8+J DiS4DjADboguMDUGCCsGAQUFBwEBBCkwJzAlBggrBgEFBQcwAoYZaHR0cDovL2ku cGtpLmdvb2cvd3IxLmNydDAtBgNVHREEJjAkgg9idXNpbmVzc2luZm8uY3qCESou YnVzaW5lc3NpbmZvLmN6MBMGA1UdIAQMMAowCAYGZ4EMAQIBMDYGA1UdHwQvMC0w K6ApoCeGJWh0dHA6Ly9jLnBraS5nb29nL3dyMS9QT0Zxdk1lZjRFWS5jcmwwggED BgorBgEEAdZ5AgQCBIH0BIHxAO8AdgDCMX5XRRmjRe5/ON6ykEHrx8IhWiK/f9W1 rXaa2Q5SzQAAAZ/A5qxxAAAEAwBHMEUCIQCT/A0/RSP5xp3htPiLjcjsasrMVBQ8 6eQMz0s/XDkzYgIgUyU30heu2ywOsyeG7y05U0bGH3vZo1bH5ZCKgE3o6rkAdQDY CVU7lE96/8gWGW+UT4WrsPj8XodVJg8V0S5yu0VLFAAAAZ/A5qyTAAAEAwBGMEQC IA02omKHdvaspNqimANxCY5EizFKA0IE2GWUunY30JuyAiAWA7j3IuISFx7mFqxQ UQNwp+UTGmm9+9DhgV2sS1Y1dzANBgkqhkiG9w0BAQsFAAOCAQEALoFsWmbXDz81 feMrGgmyImave2Cr348fLZ3bBCij1KP2KN6jPaixgqwLPS1Xl0gz7QfB8d6Xuii/ DiLmdQT6ejTEo3jlACui6XP98a2jLhHue8XnNLnbeDPlNBhj4C76FcpYossjQTX0 K3vXz5JEy2LS4Gwbi490JmnL3DE8Bo1uOZ2At4LynFpjq5FO4udM098+oEQdn1Qp WBn2GS++C39kyWIc6cwYBS81NFcr+evJjz4Q/9Zs6sZIc+xfWyvpaIwybWyn7AqD r1eycLWFlZHPq0zKsFPNr3ZQs1nrDfxz7Mf/ih67WrkTxPUqx+nO6QeSyolFRKOR 5Q3S05BPMA== -----END CERTIFICATE-----
}
cert_commonName <hostCert#1> OK { 
businessinfo.cz
}
cert_commonName_wo_SNI <hostCert#1> INFO { 
request w/o SNI didn't succeed
}
cert_subjectAltName <hostCert#1> INFO { 
businessinfo.cz *.businessinfo.cz
}
cert_trust <hostCert#1> OK { 
Ok via SAN wildcard (SNI mandatory)
}
cert_chain_of_trust <hostCert#1> OK { 
passed.
}
cert_certificatePolicies_EV <hostCert#1> INFO { 
no
}
cert_expirationStatus <hostCert#1> MEDIUM { 
expires < 60 days (39)
}
cert_notBefore <hostCert#1> INFO { 
2026-08-02 04:16
}
cert_notAfter <hostCert#1> MEDIUM { 
2026-10-31 05:13
}
cert_extlifeSpan <hostCert#1> OK { 
certificate has no extended life time according to browser forum
}
cert_eTLS <hostCert#1> INFO { 
not present
}
cert_crlDistributionPoints <hostCert#1> INFO { 
http://c.pki.goog/wr1/POFqvMef4EY.crl
}
cert_ocspURL <hostCert#1> INFO { 
--
}
OCSP_stapling <hostCert#1> INFO { 
not offered
}
cert_mustStapleExtension <hostCert#1> INFO { 
--
}
DNS_CAArecord <hostCert#1> OK { 
issue=comodoca.com, issue=digicert.com;, issue=letsencrypt.org, issue=pki.goog;, issue=ssl.com, issuewild=comodoca.com, issuewild=digicert.com;, issuewild=letsencrypt.org, issuewild=pki.goog;, issuewild=ssl.com
}
certificate_transparency <hostCert#1> OK { 
yes (certificate extension)
}
certs_countServer <hostCert#1> INFO { 
3
}
certs_list_ordering_problem <hostCert#1> INFO { 
no
}
cert_caIssuers <hostCert#1> INFO { 
WR1 (Google Trust Services from US)
}
intermediate_cert <#1> <hostCert#1> INFO { 
-----BEGIN CERTIFICATE----- MIIFCzCCAvOgAwIBAgIQf9niwtIEigR0tieibQhopzANBgkqhkiG9w0BAQsFADBH MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzEUMBIGA1UEAxMLR1RTIFJvb3QgUjEwHhcNMjMxMjEzMDkwMDAwWhcNMjkwMjIw MTQwMDAwWjA7MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNl cnZpY2VzMQwwCgYDVQQDEwNXUjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDPbjYWircr7kaYAx1TcA937qNLoHK+jyMtwkfGj1yN+T3mGo7uMyINyRFI uLBizvRpDXICfd7VJg/DbpvPfg7XIM/GkDujggbaOp3/bFa/3OlhlEXkabxPD8kT wK1hRHIggdAPK55oamJqj4oiV3lpK+IkM352YyxdvFFpfiMHsf92gfHuuFi1azUV 76HmSCg5lzHZBx+Vp56uz5i8no2KA+Gwl01Qb5NMSh/4233xkJkVf+OW7e4xgepy PVId3yVkpQtwqp7oqLlHyKdaECVgb0Lh1z/njwzwwoNGMyDmS3cEdqFop10VGO/Y KHc1rQ6tRuRibuKq+MzvN34PJrMHAgMBAAGjgf4wgfswDgYDVR0PAQH/BAQDAgGG MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAGAQH/ AgEAMB0GA1UdDgQWBBRmaUnU3iqckQPPiQ4kuA4wA26ILjAfBgNVHSMEGDAWgBTk rysmcRorSCeFL1JmLO/wiRNxPjA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAKG GGh0dHA6Ly9pLnBraS5nb29nL3IxLmNydDArBgNVHR8EJDAiMCCgHqAchhpodHRw Oi8vYy5wa2kuZ29vZy9yL3IxLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATANBgkq hkiG9w0BAQsFAAOCAgEATuazCBEgkWAn+VGQTQIY7rjBidUihJfm1t/mTjo7KQR+ 3iDx4o2L06oeF0Q3wpKYpQgI/TeMqUlYMWQmZbWPE0PX8pfsVAE5E5tVOjh34bNA JwDPVnsZVJwzN3nw5BGQ7sxRspFzIcM/qbbTpNeXf9II4Wsk2+Tv6FSVFZUL3/0u HradbruDWjRQ4IZ7mYqKiEqk08dpOZ+TmBzwykEGy1/IXberb6Ap1SSnn2+RI7t6 N/fqPCrwwFjp8kg1G6etRATGBaPYCx+GjJMFPX+k97Alvoj3/98SvqdegLPYEPjv xUclHpiKLD63NMmVarVQddIL6kOvTe5k0pnxRnR+mndGHIQc77TLbcZFeja56Pyn lSqmer578c7CBrPqo1BVmPyWUK+v6sGuzs7Mq7QQaxVs4710cI/MpPp1ovxMVt17 ENKxLk34LpEKAKVmqwnzbHHRjhXNeCC984XDOwLEp0K4MzHl8ZOWJQAakCdVlFC+ PyA3GP2JX/QLoqWNHGuN9c9vLObDhHVs/L+65De+OdnnjpFGI9xxtsNyRsyaHdFA f5z7ulOoXDXkHCCej/Ehs5docReNt16W2xbH/EBuirJrOzFE2rtALxksl1TdEjOf IKXOJfUqQeVI5+hA7V+n1+A/n7Npg0S+5ODytWh5XW54ccN1drJnMK54ttozh0c= -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#1> <hostCert#1> INFO { 
B10B6F00E609509E8700F6D34687A2BFCE38EA05A8FDF1CDC40C3A2A0D0D0E45
}
intermediate_cert_notBefore <#1> <hostCert#1> INFO { 
2023-12-13 09:00
}
intermediate_cert_notAfter <#1> <hostCert#1> OK { 
2029-02-20 14:00
}
intermediate_cert_expiration <#1> <hostCert#1> OK { 
ok > 40 days
}
intermediate_cert_chain <#1> <hostCert#1> INFO { 
WR1 <-- GTS Root R1
}
intermediate_cert <#2> <hostCert#1> INFO { 
-----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgIQd70NbNs2+RrqIQ/E8FjTDTANBgkqhkiG9w0BAQsFADBX MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEQMA4GA1UE CxMHUm9vdCBDQTEbMBkGA1UEAxMSR2xvYmFsU2lnbiBSb290IENBMB4XDTIwMDYx OTAwMDA0MloXDTI4MDEyODAwMDA0MlowRzELMAkGA1UEBhMCVVMxIjAgBgNVBAoT GUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBMTEMxFDASBgNVBAMTC0dUUyBSb290IFIx MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAthECix7joXebO9y/lD63 ladAPKH9gvl9MgaCcfb2jH/76Nu8ai6Xl6OMS/kr9rH5zoQdsfnFl97vufKj6bwS iV6nqlKr+CMny6SxnGPb15l+8Ape62im9MZaRw1NEDPjTrETo8gYbEvs/AmQ351k KSUjB6G00j0uYODP0gmHu81I8E3CwnqIiru6z1kZ1q+PsAewnjHxgsHA3y6mbWwZ DrXYfiYaRQM9sHmklCitD38m5agI/pboPGiUU+6DOogrFZYJsuB6jC511pzrp1Zk j5ZPaK49l8KEj8C8QMALXL32h7M1bKwYUH+E4EzNktMg6TO8UpmvMrUpsyUqtEj5 cuHKZPfmghCN6J3Cioj6OGaK/GP5Afl4/Xtcd/p2h/rs37EOeZVXtL0m79YB0esW CruOC7XFxYpVq9Os6pFLKcwZpDIlTirxZUTQAs6qzkm06p98g7BAe+dDq6dso499 iYH6TKX/1Y7DzkvgtdizjkXPdsDtQCv9Uw+wp9U7DbGKogPeMa3Md+pvez7W35Ei Eua++tgy/BBjFFFy3l3WFpO9KWgz7zpm7AeKJt8T11dleCfeXkkUAKIAf5qoIbap sZWwpbkNFhHax2xIPEDgfg1azVY80ZcFuctL7TlLnMQ/0lUTbiSw1nH69MG6zO0b 9f6BQdgAmD06yK56mDcYBZUCAwEAAaOCATgwggE0MA4GA1UdDwEB/wQEAwIBhjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTkrysmcRorSCeFL1JmLO/wiRNxPjAf BgNVHSMEGDAWgBRge2YaRQ2XyolQL30EzTSo//z9SzBgBggrBgEFBQcBAQRUMFIw JQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnBraS5nb29nL2dzcjEwKQYIKwYBBQUH MAKGHWh0dHA6Ly9wa2kuZ29vZy9nc3IxL2dzcjEuY3J0MDIGA1UdHwQrMCkwJ6Al oCOGIWh0dHA6Ly9jcmwucGtpLmdvb2cvZ3NyMS9nc3IxLmNybDA7BgNVHSAENDAy MAgGBmeBDAECATAIBgZngQwBAgIwDQYLKwYBBAHWeQIFAwIwDQYLKwYBBAHWeQIF AwMwDQYJKoZIhvcNAQELBQADggEBADSkHrEoo9C0dhemMXoh6dFSPsjbdBZBiLg9 NR3t5P+T4Vxfq7vqfM/b5A3Ri1fyJm9bvhdGaJQ3b2t6yMAYN/olUazsaL+yyEn9 WprKASOshIArAoyZl+tJaox118fessmXn1hIVw41oeQa1v1vg4Fv74zPl6/AhSrw 9U5pCZEt4Wi4wStz6dTZ/CLANx8LZh1J7QJVj2fhMtfTJr9w4z30Z209fOU0iOMy +qduBmpvvYuR7hZL6Dupszfnw0Skfths18dG9ZKb59UhvmaSGZRVbNQpsg3BZlvi d0lIKO2d1xozclOzgjXPYovJJIultzkMu34qQb9Sz/yilrbCgj8= -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#2> <hostCert#1> INFO { 
3EE0278DF71FA3C125C4CD487F01D774694E6FC57E0CD94C24EFD769133918E5
}
intermediate_cert_notBefore <#2> <hostCert#1> INFO { 
2020-06-19 00:00
}
intermediate_cert_notAfter <#2> <hostCert#1> OK { 
2028-01-28 00:00
}
intermediate_cert_expiration <#2> <hostCert#1> OK { 
ok > 40 days
}
intermediate_cert_chain <#2> <hostCert#1> INFO { 
GTS Root R1 <-- GlobalSign Root CA
}
intermediate_cert_badOCSP <hostCert#1> OK { 
intermediate certificate(s) is/are ok
}
cert_signatureAlgorithm <hostCert#2> OK { 
ECDSA with SHA256
}
cert_keySize <hostCert#2> OK { 
EC 256 bits (curve P-256)
}
cert_keyUsage <hostCert#2> INFO { 
Digital Signature
}
cert_extKeyUsage <hostCert#2> INFO { 
TLS Web Server Authentication
}
cert_serialNumber <hostCert#2> INFO { 
30C0E85194CAD627135F1E703F104052
}
cert_serialNumberLen <hostCert#2> INFO { 
16
}
cert_fingerprintSHA1 <hostCert#2> INFO { 
1CF23A82EBD749075A9A6729125628CA3AADF9D6
}
cert_fingerprintSHA256 <hostCert#2> INFO { 
4FCD73953CEBF7BF2C1E78E724575EE3542B7691784221C4C56DF47F4CB695C4
}
cert <hostCert#2> INFO { 
-----BEGIN CERTIFICATE----- MIIDiDCCAy6gAwIBAgIQMMDoUZTK1icTXx5wPxBAUjAKBggqhkjOPQQDAjA7MQsw CQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZpY2VzMQwwCgYD VQQDEwNXRTEwHhcNMjYwODAyMDQxNjIxWhcNMjYxMDMxMDUxNjE2WjAaMRgwFgYD VQQDEw9idXNpbmVzc2luZm8uY3owWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQ/ 9FIa6c3l3v5Y4aI/OIwqeBlXZ1SScYk+OAtyFrE9lSvL3RZM92Lv0G35USYAOTWO LCXwSRyKEAHUX1b1FpP8o4ICMzCCAi8wDgYDVR0PAQH/BAQDAgeAMBMGA1UdJQQM MAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGExymyx5glWTeqd ql0whIkd6+uPMB8GA1UdIwQYMBaAFJB3kjVnxP+ozKnme9mAeXvMk/k4MDUGCCsG AQUFBwEBBCkwJzAlBggrBgEFBQcwAoYZaHR0cDovL2kucGtpLmdvb2cvd2UxLmNy dDAtBgNVHREEJjAkgg9idXNpbmVzc2luZm8uY3qCESouYnVzaW5lc3NpbmZvLmN6 MBMGA1UdIAQMMAowCAYGZ4EMAQIBMDYGA1UdHwQvMC0wK6ApoCeGJWh0dHA6Ly9j LnBraS5nb29nL3dlMS8zcjFLRjllSjZpUS5jcmwwggEFBgorBgEEAdZ5AgQCBIH2 BIHzAPEAdgDLOPcViXyEoURfW8Hd+8lu8ppZzUcKaQWFsMsUwxRY5wAAAZ/A5tjU AAAEAwBHMEUCIFhVgVH37RoF3MWsFDe+rQhFZBzGwDurx3u7cTvX1RV4AiEApsfS dHoXoNULPIX8IcON1uBCH1yw85RRMEiYx9pnBRIAdwDYCVU7lE96/8gWGW+UT4Wr sPj8XodVJg8V0S5yu0VLFAAAAZ/A5tjeAAAEAwBIMEYCIQC+LR/rVQhgoOKfHbSs YicRWVaJduA901s5fEcRAXuLuAIhAIHG3DMdcMmwKIXXr0Gtn+EBH5Ou6FFrVdAe +giZGqcNMAoGCCqGSM49BAMCA0gAMEUCIQDs0QFlABnK3rEyCGp+4ReCZm7B4jAB sVf4X3hyRubfzgIgdxvJ+eq7QGQyxVm6s9JEvxbCuda4wiBCwjgpK+biwX4= -----END CERTIFICATE-----
}
cert_commonName <hostCert#2> OK { 
businessinfo.cz
}
cert_commonName_wo_SNI <hostCert#2> INFO { 
request w/o SNI didn't succeed, usual for EC certificates
}
cert_subjectAltName <hostCert#2> INFO { 
businessinfo.cz *.businessinfo.cz
}
cert_trust <hostCert#2> OK { 
Ok via SAN wildcard (SNI mandatory)
}
cert_chain_of_trust <hostCert#2> OK { 
passed.
}
cert_certificatePolicies_EV <hostCert#2> INFO { 
no
}
cert_expirationStatus <hostCert#2> MEDIUM { 
expires < 60 days (39)
}
cert_notBefore <hostCert#2> INFO { 
2026-08-02 04:16
}
cert_notAfter <hostCert#2> MEDIUM { 
2026-10-31 05:16
}
cert_extlifeSpan <hostCert#2> OK { 
certificate has no extended life time according to browser forum
}
cert_eTLS <hostCert#2> INFO { 
not present
}
cert_crlDistributionPoints <hostCert#2> INFO { 
http://c.pki.goog/we1/3r1KF9eJ6iQ.crl
}
cert_ocspURL <hostCert#2> INFO { 
--
}
OCSP_stapling <hostCert#2> INFO { 
not offered
}
cert_mustStapleExtension <hostCert#2> INFO { 
--
}
DNS_CAArecord <hostCert#2> OK { 
issue=comodoca.com, issue=digicert.com;, issue=letsencrypt.org, issue=pki.goog;, issue=ssl.com, issuewild=comodoca.com, issuewild=digicert.com;, issuewild=letsencrypt.org, issuewild=pki.goog;, issuewild=ssl.com
}
certificate_transparency <hostCert#2> OK { 
yes (certificate extension)
}
certs_countServer <hostCert#2> INFO { 
3
}
certs_list_ordering_problem <hostCert#2> INFO { 
no
}
cert_caIssuers <hostCert#2> INFO { 
WE1 (Google Trust Services from US)
}
intermediate_cert <#1> <hostCert#2> INFO { 
-----BEGIN CERTIFICATE----- MIICnzCCAiWgAwIBAgIQf/MZd5csIkp2FV0TttaF4zAKBggqhkjOPQQDAzBHMQsw CQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEU MBIGA1UEAxMLR1RTIFJvb3QgUjQwHhcNMjMxMjEzMDkwMDAwWhcNMjkwMjIwMTQw MDAwWjA7MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZp Y2VzMQwwCgYDVQQDEwNXRTEwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAARvzTr+ Z1dHTCEDhUDCR127WEcPQMFcF4XGGTfn1XzthkubgdnXGhOlCgP4mMTG6J7/EFmP LCaY9eYmJbsPAvpWo4H+MIH7MA4GA1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwEgYDVR0TAQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQU kHeSNWfE/6jMqeZ72YB5e8yT+TgwHwYDVR0jBBgwFoAUgEzW63T/STaj1dj8tT7F avCUHYwwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzAChhhodHRwOi8vaS5wa2ku Z29vZy9yNC5jcnQwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2MucGtpLmdvb2cv ci9yNC5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwCgYIKoZIzj0EAwMDaAAwZQIx AOcCq1HW90OVznX+0RGU1cxAQXomvtgM8zItPZCuFQ8jSBJSjz5keROv9aYsAm5V sQIwJonMaAFi54mrfhfoFNZEfuNMSQ6/bIBiNLiyoX46FohQvKeIoJ99cx7sUkFN 7uJW -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#1> <hostCert#2> INFO { 
1DFC1605FBAD358D8BC844F76D15203FAC9CA5C1A79FD4857FFAF2864FBEBF96
}
intermediate_cert_notBefore <#1> <hostCert#2> INFO { 
2023-12-13 09:00
}
intermediate_cert_notAfter <#1> <hostCert#2> OK { 
2029-02-20 14:00
}
intermediate_cert_expiration <#1> <hostCert#2> OK { 
ok > 40 days
}
intermediate_cert_chain <#1> <hostCert#2> INFO { 
WE1 <-- GTS Root R4
}
intermediate_cert <#2> <hostCert#2> INFO { 
-----BEGIN CERTIFICATE----- MIIDejCCAmKgAwIBAgIQf+UwvzMTQ77dghYQST2KGzANBgkqhkiG9w0BAQsFADBX MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEQMA4GA1UE CxMHUm9vdCBDQTEbMBkGA1UEAxMSR2xvYmFsU2lnbiBSb290IENBMB4XDTIzMTEx NTAzNDMyMVoXDTI4MDEyODAwMDA0MlowRzELMAkGA1UEBhMCVVMxIjAgBgNVBAoT GUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBMTEMxFDASBgNVBAMTC0dUUyBSb290IFI0 MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAE83Rzp2iLYK5DuDXFgTB7S0md+8Fhzube Rr1r1WEYNa5A3XP3iZEwWus87oV8okB2O6nGuEfYKueSkWpz6bFyOZ8pn6KY019e WIZlD6GEZQbR3IvJx3PIjGov5cSr0R2Ko4H/MIH8MA4GA1UdDwEB/wQEAwIBhjAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDwYDVR0TAQH/BAUwAwEB/zAd BgNVHQ4EFgQUgEzW63T/STaj1dj8tT7FavCUHYwwHwYDVR0jBBgwFoAUYHtmGkUN l8qJUC99BM00qP/8/UswNgYIKwYBBQUHAQEEKjAoMCYGCCsGAQUFBzAChhpodHRw Oi8vaS5wa2kuZ29vZy9nc3IxLmNydDAtBgNVHR8EJjAkMCKgIKAehhxodHRwOi8v Yy5wa2kuZ29vZy9yL2dzcjEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA0GCSqG SIb3DQEBCwUAA4IBAQAYQrsPBtYDh5bjP2OBDwmkoWhIDDkic574y04tfzHpn+cJ odI2D4SseesQ6bDrarZ7C30ddLibZatoKiws3UL9xnELz4ct92vID24FfVbiI1hY +SW6FoVHkNeWIP0GCbaM4C6uVdF5dTUsMVs/ZbzNnIdCp5Gxmx5ejvEau8otR/Cs kGN+hr/W5GvT1tMBjgWKZ1i4//emhA1JG1BbPzoLJQvyEotc03lXjTaCzv8mEbep 8RqZ7a2CPsgRbuvTPBwcOMBBmuFeU88+FSBX6+7iP0il8b4Z0QFqIwwMHfs/L6K1 vepuoxtGzi4CZ68zJpiq1UvSqTbFJjtbD4seiMHl -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#2> <hostCert#2> INFO { 
76B27B80A58027DC3CF1DA68DAC17010ED93997D0B603E2FADBE85012493B5A7
}
intermediate_cert_notBefore <#2> <hostCert#2> INFO { 
2023-11-15 03:43
}
intermediate_cert_notAfter <#2> <hostCert#2> OK { 
2028-01-28 00:00
}
intermediate_cert_expiration <#2> <hostCert#2> OK { 
ok > 40 days
}
intermediate_cert_chain <#2> <hostCert#2> INFO { 
GTS Root R4 <-- GlobalSign Root CA
}
intermediate_cert_badOCSP <hostCert#2> OK { 
intermediate certificate(s) is/are ok
}
HTTP_status_code INFO { 
200 OK ('/')
}
HTTP_clock_skew INFO { 
+3473 seconds from localtime
}
HTTP_headerTime INFO { 
1790021116
}
HTTP_headerAge INFO { 
3473 seconds
}
HSTS_time OK { 
365 days (=31536000 seconds) > 15552000 seconds
}
HSTS_subdomains OK { 
includes subdomains
}
HSTS_preload INFO { 
domain is NOT marked for preloading
}
HPKP INFO { 
No support for HTTP Public Key Pinning
}
banner_server INFO { 
cloudflare
}
banner_application INFO { 
x-powered-by: BusinessInfo.cz
}
cookie_count INFO { 
0 at '/'
}
X-Frame-Options OK { 
SAMEORIGIN
}
X-Content-Type-Options OK { 
nosniff
}
Content-Security-Policy OK { 
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://code.jquery.com https://kit.fontawesome.com https://www.google.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://analytics.businessinfo.cz https://matomo.businessinfo.cz; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com http://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://ka-p.fontawesome.com; img-src 'self' data: https: blob:; font-src 'self' https://fonts.gstatic.com https://ka-p.fontawesome.com data:; connect-src 'self' https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com https://www.google.com https://api.mapy.com https://ka-p.fontawesome.com https://mx.businessinfo.cz https://analytics.businessinfo.cz https://matomo.businessinfo.cz https://projekt-bi.geetix.com https://projekt.businessinfo.cz https://projekt-staging.businessinfo.cz https://my.yoast.com https://cdn.jsdelivr.net; frame-src 'self' blob: https://www.googletagmanager.com https://www.google.com https://maps.google.com https://www.youtube.com https://player.vimeo.com https://embed.spotify.com https://embed.podcasts.apple.com https://w.soundcloud.com https://player.captivate.fm https://mx.businessinfo.cz https://wp.freemius.com https://api.freemius.com; manifest-src 'self' https://businessinfo.cloudflareaccess.com; worker-src 'self' blob:; base-uri 'self'; form-action 'self'
}
Permissions-Policy OK { 
accelerometer=*, autoplay=*, encrypted-media=*, fullscreen=*, geolocation=*, gyroscope=*, magnetometer=*, microphone=*, payment=*, sync-xhr=*
}
Referrer-Policy INFO { 
strict-origin-when-cross-origin
}
Cache-Control INFO { 
max-age=14400, must-revalidate
}
Pragma INFO { 
no-cache
}
banner_reverseproxy
zranitelnosti: CWE-200
INFO { 
--
}
heartbleed
zranitelnosti: CVE-2014-0160 CWE-119
OK { 
not vulnerable, no heartbeat extension
}
CCS
zranitelnosti: CVE-2014-0224 CWE-310
OK { 
not vulnerable
}
ticketbleed
zranitelnosti: CVE-2016-9244 CWE-200
OK { 
not vulnerable
}
ROBOT
zranitelnosti: CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168 CWE-203
OK { 
not vulnerable
}
secure_renego
zranitelnosti: CWE-310
WARN { 
OpenSSL handshake didn't succeed
}
secure_client_renego
zranitelnosti: CVE-2011-1473 CWE-310
OK { 
not vulnerable
}
CRIME_TLS
zranitelnosti: CVE-2012-4929 CWE-310
OK { 
not vulnerable
}
BREACH
zranitelnosti: CVE-2013-3587 CWE-310
MEDIUM { 
potentially VULNERABLE, gzip br HTTP compression detected  - only supplied '/' tested
}
POODLE_SSL
zranitelnosti: CVE-2014-3566 CWE-310
OK { 
not vulnerable, no SSLv3
}
fallback_SCSV OK { 
no protocol below TLS 1.2 offered
}
SWEET32
zranitelnosti: CVE-2016-2183 CVE-2016-6329 CWE-327
OK { 
not vulnerable
}
FREAK
zranitelnosti: CVE-2015-0204 CWE-310
OK { 
not vulnerable
}
DROWN
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
OK { 
not vulnerable on this host and port
}
DROWN_hint
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
INFO { 
Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=E5C0913FEFD880081C6B77AF76A9AC4914CAF6B57ED71BD675B8A72CF736A5FA
}
LOGJAM
zranitelnosti: CVE-2015-4000 CWE-310
OK { 
not vulnerable, no DH EXPORT ciphers,
}
LOGJAM-common_primes
zranitelnosti: CVE-2015-4000 CWE-310
OK { 
no DH key with <= TLS 1.2
}
BEAST
zranitelnosti: CVE-2011-3389 CWE-20
OK { 
not vulnerable, no SSL3 or TLS1
}
LUCKY13
zranitelnosti: CVE-2013-0169 CWE-310
LOW { 
potentially vulnerable, uses TLS CBC ciphers
}
winshock
zranitelnosti: CVE-2014-6321 CWE-94
OK { 
not vulnerable
}
RC4
zranitelnosti: CVE-2013-2566 CVE-2015-2808 CWE-310
OK { 
not vulnerable
}
clientsimulation-android_442 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_500 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_60 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_70 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_81 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_90 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-android_X INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-chrome_74_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-chrome_79_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-firefox_66_win81 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-firefox_71_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-ie_6_xp INFO { 
No connection
}
clientsimulation-ie_8_win7 INFO { 
No connection
}
clientsimulation-ie_8_xp INFO { 
No connection
}
clientsimulation-ie_11_win7 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-ie_11_win81 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-ie_11_winphone81 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-ie_11_win10 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-edge_15_win10 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-edge_17_win10 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-opera_66_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-safari_9_ios9 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-safari_9_osx1011 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-safari_10_osx1012 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-safari_121_ios_122 INFO { 
TLSv1.3 TLS_CHACHA20_POLY1305_SHA256
}
clientsimulation-safari_130_osx_10146 INFO { 
TLSv1.3 TLS_CHACHA20_POLY1305_SHA256
}
clientsimulation-apple_ats_9_ios9 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-java_6u45 INFO { 
No connection
}
clientsimulation-java_7u25 INFO { 
No connection
}
clientsimulation-java_8u161 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-java1102 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-java1201 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-openssl_102e INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-openssl_110l INFO { 
TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305
}
clientsimulation-openssl_111d INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-thunderbird_68_3_1 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
rating_spec INFO { 
SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)
}
rating_doc INFO { 
https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide
}
protocol_support_score INFO { 
100
}
protocol_support_score_weighted INFO { 
30
}
key_exchange_score INFO { 
90
}
key_exchange_score_weighted INFO { 
27
}
cipher_strength_score INFO { 
90
}
cipher_strength_score_weighted INFO { 
36
}
final_score INFO { 
93
}
overall_grade OK { 
A+
}
scanTime INFO { 
266
}