Přihlásit se Registrace
Smlouvy Dotace Platy Úřady Zakázky Sponzoři & firmy Kauzy, analýzy
❤ Podpořte nás Přihlásit se Registrace
Hledat v Hlídači státu
Nápověda jak vyhledávat Snadné hledání
  1. Hlídač Státu
  2. Hlídač Webů
  3. Detailní analýza HTTPs pro Portál pro podnikání

Hlídač Portál pro podnikání Detailní analýza HTTPs pro Portál pro podnikání

Portál pro podnikání
http://www.businessinfo.cz

CzechBusiness Zpřístupnuje pro občany a firmy EU chtějící podnikat v ČR na jednom místě veškeré postupy a podnikatelské formuláře s možností cizojazyčného vyplnění i přesto, že český řád umožňuje podat data pouze v českém jazyku.

Zabezpečení komunikace

A+

Výsledek analýzy HTTPS na www.businessinfo.cz ze dne 13.11.2026

Všechno je v nejlepším pořádku a web se drží doporučených postupů.

Detailní analýza

Detailní report z HTTPs analýzy pomocí nástroje testssl.sh

server www.businessinfo.cz/104.20.47.63
pre_128cipher INFO { 
No 128 cipher limit bug
}
SSLv2 OK { 
not offered
}
SSLv3 OK { 
not offered
}
TLS1 INFO { 
not offered
}
TLS1_1 INFO { 
not offered
}
TLS1_2 OK { 
offered
}
TLS1_3 OK { 
offered with final
}
NPN INFO { 
offered with h2, http/1.1 (advertised)
}
ALPN_HTTP2 OK { 
h2
}
ALPN INFO { 
http/1.1
}
cipherlist_NULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_aNULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_EXPORT
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_LOW
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_3DES_IDEA
zranitelnosti: CWE-310
INFO { 
not offered
}
cipherlist_AVERAGE
zranitelnosti: CWE-310
LOW { 
offered
}
cipherlist_GOOD OK { 
offered
}
cipherlist_STRONG OK { 
offered
}
cipher_order OK { 
server -- TLS 1.3 client determined
}
protocol_negotiated OK { 
Default protocol TLS1.3
}
cipher_negotiated OK { 
TLS_AES_256_GCM_SHA384, 253 bit ECDH (X25519)
}
cipher-tls1_2_xc02b OK { 
TLSv1.2   xc02b   ECDHE-ECDSA-AES128-GCM-SHA256     ECDH 253   AESGCM      128      TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_xcca9 OK { 
TLSv1.2   xcca9   ECDHE-ECDSA-CHACHA20-POLY1305     ECDH 253   ChaCha20    256      TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
}
cipher-tls1_2_xc009 LOW { 
TLSv1.2   xc009   ECDHE-ECDSA-AES128-SHA            ECDH 253   AES         128      TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_2_xc02c OK { 
TLSv1.2   xc02c   ECDHE-ECDSA-AES256-GCM-SHA384     ECDH 253   AESGCM      256      TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_xc00a LOW { 
TLSv1.2   xc00a   ECDHE-ECDSA-AES256-SHA            ECDH 253   AES         256      TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_2_xc023 LOW { 
TLSv1.2   xc023   ECDHE-ECDSA-AES128-SHA256         ECDH 253   AES         128      TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
}
cipher-tls1_2_xc024 LOW { 
TLSv1.2   xc024   ECDHE-ECDSA-AES256-SHA384         ECDH 253   AES         256      TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
}
cipher-tls1_2_xc02f OK { 
TLSv1.2   xc02f   ECDHE-RSA-AES128-GCM-SHA256       ECDH 253   AESGCM      128      TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_xcca8 OK { 
TLSv1.2   xcca8   ECDHE-RSA-CHACHA20-POLY1305       ECDH 253   ChaCha20    256      TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
}
cipher-tls1_2_xc013 LOW { 
TLSv1.2   xc013   ECDHE-RSA-AES128-SHA              ECDH 253   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_2_x9c OK { 
TLSv1.2   x9c     AES128-GCM-SHA256                 RSA        AESGCM      128      TLS_RSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_x2f LOW { 
TLSv1.2   x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_2_xc030 OK { 
TLSv1.2   xc030   ECDHE-RSA-AES256-GCM-SHA384       ECDH 253   AESGCM      256      TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_xc014 LOW { 
TLSv1.2   xc014   ECDHE-RSA-AES256-SHA              ECDH 253   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_2_x9d OK { 
TLSv1.2   x9d     AES256-GCM-SHA384                 RSA        AESGCM      256      TLS_RSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_x35 LOW { 
TLSv1.2   x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_2_xc027 LOW { 
TLSv1.2   xc027   ECDHE-RSA-AES128-SHA256           ECDH 253   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
}
cipher-tls1_2_x3c LOW { 
TLSv1.2   x3c     AES128-SHA256                     RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA256
}
cipher-tls1_2_xc028 LOW { 
TLSv1.2   xc028   ECDHE-RSA-AES256-SHA384           ECDH 253   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
}
cipher-tls1_2_x3d LOW { 
TLSv1.2   x3d     AES256-SHA256                     RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA256
}
cipherorder_TLSv1_2 INFO { 
ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-CHACHA20-POLY1305 ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES256-SHA384 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-CHACHA20-POLY1305 ECDHE-RSA-AES128-SHA AES128-GCM-SHA256 AES128-SHA ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA AES256-GCM-SHA384 AES256-SHA ECDHE-RSA-AES128-SHA256 AES128-SHA256 ECDHE-RSA-AES256-SHA384 AES256-SHA256
}
prioritize_chacha_TLSv1_2 INFO { 
true
}
cipher-tls1_3_x1302 OK { 
TLSv1.3   x1302   TLS_AES_256_GCM_SHA384            ECDH 253   AESGCM      256      TLS_AES_256_GCM_SHA384
}
cipher-tls1_3_x1303 OK { 
TLSv1.3   x1303   TLS_CHACHA20_POLY1305_SHA256      ECDH 253   ChaCha20    256      TLS_CHACHA20_POLY1305_SHA256
}
cipher-tls1_3_x1301 OK { 
TLSv1.3   x1301   TLS_AES_128_GCM_SHA256            ECDH 253   AESGCM      128      TLS_AES_128_GCM_SHA256
}
supportedciphers_TLSv1_3 INFO { 
TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 TLS_AES_128_GCM_SHA256
}
FS OK { 
offered
}
FS_ciphers INFO { 
TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-ECDSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-CHACHA20-POLY1305 ECDHE-RSA-CHACHA20-POLY1305 TLS_AES_128_GCM_SHA256 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-ECDSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-ECDSA-AES128-SHA
}
FS_ECDHE_curves OK { 
prime256v1 secp384r1 secp521r1 X25519
}
TLS_extensions INFO { 
'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'next protocol/#13172' 'key share/#51' 'supported versions/#43' 'extended master secret/#23' 'application layer protocol negotiation/#16' 'compress_certificate/#27'
}
TLS_session_ticket INFO { 
valid for 64800 seconds only (<daily)
}
SSL_sessionID_support INFO { 
yes
}
sessionresumption_ticket INFO { 
supported
}
sessionresumption_ID INFO { 
supported
}
TLS_timestamp INFO { 
off by -6 seconds from your localtime
}
certificate_compression INFO { 
0002/Brotli
}
clientAuth INFO { 
none
}
cert_numbers INFO { 
2
}
cert_signatureAlgorithm <hostCert#1> OK { 
SHA256 with RSA
}
cert_keySize <hostCert#1> INFO { 
RSA 2048 bits (exponent is 65537)
}
cert_keyUsage <hostCert#1> INFO { 
Digital Signature, Key Encipherment
}
cert_extKeyUsage <hostCert#1> INFO { 
TLS Web Server Authentication
}
cert_serialNumber <hostCert#1> INFO { 
F6E7182F46BE952C13A68B3260AD1A4A
}
cert_serialNumberLen <hostCert#1> INFO { 
16
}
cert_fingerprintSHA1 <hostCert#1> INFO { 
B6A36E704358B40FA1FF61BB54C9E13C40DB7FA7
}
cert_fingerprintSHA256 <hostCert#1> INFO { 
D687086D2B30261C506B227C3F8A09F699AD8313517B624E81DD27113054FDE1
}
cert <hostCert#1> INFO { 
-----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIRAPbnGC9GvpUsE6aLMmCtGkowDQYJKoZIhvcNAQELBQAw OzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczEM MAoGA1UEAxMDV1IxMB4XDTI2MDkzMDA2MzYxMloXDTI2MTIyOTA3MzIyN1owGjEY MBYGA1UEAxMPYnVzaW5lc3NpbmZvLmN6MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAxNtUP5uDn2wTQSa9UyBLOHF75bZzrHkVwyd62HsNMmsV4yx6OLAC VFz9wa/rsjtywGxbGDu10lYgW7WUikaUXzocSMXXCBoDus6dLaL5b4HxcKFyO9cc hhVi4y+op+TadnaeIeoVOV83sK/ZyALt7sXwNKBP84jlCA6/fS7Cqt+ELgasUOP/ yGjoLV1TYEDZBlW0iIff2LEwb3gOI/K7ZtOdr8XWhmT60s8/48mR31C9/L4sdFKD YYPHhPZSHK1PZguc6jlRpNJthegx6W0bwbm5R9Cb5yYsloKX/XxVV8x7AEd4k2Ex sboFJ3Xx/VtsRnM8Pbkz6waa/fojP0VNiQIDAQABo4ICMTCCAi0wDgYDVR0PAQH/ BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFDOhkUGSPk2WKTHJJ1xLn0R7XE+fMB8GA1UdIwQYMBaAFGZpSdTeKpyRA8+J DiS4DjADboguMDUGCCsGAQUFBwEBBCkwJzAlBggrBgEFBQcwAoYZaHR0cDovL2ku cGtpLmdvb2cvd3IxLmNydDAtBgNVHREEJjAkgg9idXNpbmVzc2luZm8uY3qCESou YnVzaW5lc3NpbmZvLmN6MBMGA1UdIAQMMAowCAYGZ4EMAQIBMDYGA1UdHwQvMC0w K6ApoCeGJWh0dHA6Ly9jLnBraS5nb29nL3dyMS9ISE9malJnZmpUUS5jcmwwggED BgorBgEEAdZ5AgQCBIH0BIHxAO8AdgDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMB cxfAyMVpdwAAAaDxPhYOAAAEAwBHMEUCIQC1RyKcaGZ7XzF7/cbNN6pbR3sxMvC0 3p0EZ20eLuT4WQIgY4zK6cdzO0jsp6m0vNgEJI1TSTFaNBisL5Z7+a2IRb8AdQCv Z4g7V7BO3Y+m2X72LqjrgQrHcWDwJF5V1gwv54WHOgAAAaDxPhYnAAAEAwBGMEQC IE4g387YLGLCAUr6hvSeaEG8NR/3BDvGmTRD+gPmHcjjAiBD9YSNAP8kptE1Dv28 9bYo3WJTLdAkQ2qEB0WtmHGSNjANBgkqhkiG9w0BAQsFAAOCAQEAok4hbBlY30iR 7dCUrWQg8KpreMPiWW9nIWJ4SFg1L9vioIVhbcFGG/hSeBpkD5Oh1tXBbvPgbq99 V0T95GT5gvUEDLbfSvxfqxR4KHpK+ndORT6iYLoyPcg80WWjV27Hha8q4bI/y144 w8JCP+RrSp96cokFMsBgELIQnbIvIbubGz0N1wahWYFalxSQitjF66MrN5g6bid4 lIWtyrfL/yUZwYoieDsL9HazLwZPF3WY+xiX4Eh0PRHq4/Ab4lbgWSp0m+GyIF2K I7EpfMnrJpU0B8p8QAJ2Nb+YVV9LH7chklM81M9ms0Cp63BiONqtoiH0hRzM+t4y u+lHZDrdrA== -----END CERTIFICATE-----
}
cert_commonName <hostCert#1> OK { 
businessinfo.cz
}
cert_commonName_wo_SNI <hostCert#1> INFO { 
request w/o SNI didn't succeed
}
cert_subjectAltName <hostCert#1> INFO { 
businessinfo.cz *.businessinfo.cz
}
cert_trust <hostCert#1> OK { 
Ok via SAN wildcard (SNI mandatory)
}
cert_chain_of_trust <hostCert#1> OK { 
passed.
}
cert_certificatePolicies_EV <hostCert#1> INFO { 
no
}
cert_expirationStatus <hostCert#1> MEDIUM { 
expires < 60 days (45)
}
cert_notBefore <hostCert#1> INFO { 
2026-09-30 06:36
}
cert_notAfter <hostCert#1> MEDIUM { 
2026-12-29 07:32
}
cert_extlifeSpan <hostCert#1> OK { 
certificate has no extended life time according to browser forum
}
cert_eTLS <hostCert#1> INFO { 
not present
}
cert_crlDistributionPoints <hostCert#1> INFO { 
http://c.pki.goog/wr1/HHOfjRgfjTQ.crl
}
cert_ocspURL <hostCert#1> INFO { 
--
}
OCSP_stapling <hostCert#1> INFO { 
not offered
}
cert_mustStapleExtension <hostCert#1> INFO { 
--
}
DNS_CAArecord <hostCert#1> OK { 
issue=comodoca.com, issue=digicert.com;, issue=letsencrypt.org, issue=pki.goog;, issue=ssl.com, issuewild=comodoca.com, issuewild=digicert.com;, issuewild=letsencrypt.org, issuewild=pki.goog;, issuewild=ssl.com
}
certificate_transparency <hostCert#1> OK { 
yes (certificate extension)
}
certs_countServer <hostCert#1> INFO { 
3
}
certs_list_ordering_problem <hostCert#1> INFO { 
no
}
cert_caIssuers <hostCert#1> INFO { 
WR1 (Google Trust Services from US)
}
intermediate_cert <#1> <hostCert#1> INFO { 
-----BEGIN CERTIFICATE----- MIIFCzCCAvOgAwIBAgIQf9niwtIEigR0tieibQhopzANBgkqhkiG9w0BAQsFADBH MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzEUMBIGA1UEAxMLR1RTIFJvb3QgUjEwHhcNMjMxMjEzMDkwMDAwWhcNMjkwMjIw MTQwMDAwWjA7MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNl cnZpY2VzMQwwCgYDVQQDEwNXUjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDPbjYWircr7kaYAx1TcA937qNLoHK+jyMtwkfGj1yN+T3mGo7uMyINyRFI uLBizvRpDXICfd7VJg/DbpvPfg7XIM/GkDujggbaOp3/bFa/3OlhlEXkabxPD8kT wK1hRHIggdAPK55oamJqj4oiV3lpK+IkM352YyxdvFFpfiMHsf92gfHuuFi1azUV 76HmSCg5lzHZBx+Vp56uz5i8no2KA+Gwl01Qb5NMSh/4233xkJkVf+OW7e4xgepy PVId3yVkpQtwqp7oqLlHyKdaECVgb0Lh1z/njwzwwoNGMyDmS3cEdqFop10VGO/Y KHc1rQ6tRuRibuKq+MzvN34PJrMHAgMBAAGjgf4wgfswDgYDVR0PAQH/BAQDAgGG MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAGAQH/ AgEAMB0GA1UdDgQWBBRmaUnU3iqckQPPiQ4kuA4wA26ILjAfBgNVHSMEGDAWgBTk rysmcRorSCeFL1JmLO/wiRNxPjA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAKG GGh0dHA6Ly9pLnBraS5nb29nL3IxLmNydDArBgNVHR8EJDAiMCCgHqAchhpodHRw Oi8vYy5wa2kuZ29vZy9yL3IxLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATANBgkq hkiG9w0BAQsFAAOCAgEATuazCBEgkWAn+VGQTQIY7rjBidUihJfm1t/mTjo7KQR+ 3iDx4o2L06oeF0Q3wpKYpQgI/TeMqUlYMWQmZbWPE0PX8pfsVAE5E5tVOjh34bNA JwDPVnsZVJwzN3nw5BGQ7sxRspFzIcM/qbbTpNeXf9II4Wsk2+Tv6FSVFZUL3/0u HradbruDWjRQ4IZ7mYqKiEqk08dpOZ+TmBzwykEGy1/IXberb6Ap1SSnn2+RI7t6 N/fqPCrwwFjp8kg1G6etRATGBaPYCx+GjJMFPX+k97Alvoj3/98SvqdegLPYEPjv xUclHpiKLD63NMmVarVQddIL6kOvTe5k0pnxRnR+mndGHIQc77TLbcZFeja56Pyn lSqmer578c7CBrPqo1BVmPyWUK+v6sGuzs7Mq7QQaxVs4710cI/MpPp1ovxMVt17 ENKxLk34LpEKAKVmqwnzbHHRjhXNeCC984XDOwLEp0K4MzHl8ZOWJQAakCdVlFC+ PyA3GP2JX/QLoqWNHGuN9c9vLObDhHVs/L+65De+OdnnjpFGI9xxtsNyRsyaHdFA f5z7ulOoXDXkHCCej/Ehs5docReNt16W2xbH/EBuirJrOzFE2rtALxksl1TdEjOf IKXOJfUqQeVI5+hA7V+n1+A/n7Npg0S+5ODytWh5XW54ccN1drJnMK54ttozh0c= -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#1> <hostCert#1> INFO { 
B10B6F00E609509E8700F6D34687A2BFCE38EA05A8FDF1CDC40C3A2A0D0D0E45
}
intermediate_cert_notBefore <#1> <hostCert#1> INFO { 
2023-12-13 09:00
}
intermediate_cert_notAfter <#1> <hostCert#1> OK { 
2029-02-20 14:00
}
intermediate_cert_expiration <#1> <hostCert#1> OK { 
ok > 40 days
}
intermediate_cert_chain <#1> <hostCert#1> INFO { 
WR1 <-- GTS Root R1
}
intermediate_cert <#2> <hostCert#1> INFO { 
-----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgIQd70NbNs2+RrqIQ/E8FjTDTANBgkqhkiG9w0BAQsFADBX MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEQMA4GA1UE CxMHUm9vdCBDQTEbMBkGA1UEAxMSR2xvYmFsU2lnbiBSb290IENBMB4XDTIwMDYx OTAwMDA0MloXDTI4MDEyODAwMDA0MlowRzELMAkGA1UEBhMCVVMxIjAgBgNVBAoT GUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBMTEMxFDASBgNVBAMTC0dUUyBSb290IFIx MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAthECix7joXebO9y/lD63 ladAPKH9gvl9MgaCcfb2jH/76Nu8ai6Xl6OMS/kr9rH5zoQdsfnFl97vufKj6bwS iV6nqlKr+CMny6SxnGPb15l+8Ape62im9MZaRw1NEDPjTrETo8gYbEvs/AmQ351k KSUjB6G00j0uYODP0gmHu81I8E3CwnqIiru6z1kZ1q+PsAewnjHxgsHA3y6mbWwZ DrXYfiYaRQM9sHmklCitD38m5agI/pboPGiUU+6DOogrFZYJsuB6jC511pzrp1Zk j5ZPaK49l8KEj8C8QMALXL32h7M1bKwYUH+E4EzNktMg6TO8UpmvMrUpsyUqtEj5 cuHKZPfmghCN6J3Cioj6OGaK/GP5Afl4/Xtcd/p2h/rs37EOeZVXtL0m79YB0esW CruOC7XFxYpVq9Os6pFLKcwZpDIlTirxZUTQAs6qzkm06p98g7BAe+dDq6dso499 iYH6TKX/1Y7DzkvgtdizjkXPdsDtQCv9Uw+wp9U7DbGKogPeMa3Md+pvez7W35Ei Eua++tgy/BBjFFFy3l3WFpO9KWgz7zpm7AeKJt8T11dleCfeXkkUAKIAf5qoIbap sZWwpbkNFhHax2xIPEDgfg1azVY80ZcFuctL7TlLnMQ/0lUTbiSw1nH69MG6zO0b 9f6BQdgAmD06yK56mDcYBZUCAwEAAaOCATgwggE0MA4GA1UdDwEB/wQEAwIBhjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTkrysmcRorSCeFL1JmLO/wiRNxPjAf BgNVHSMEGDAWgBRge2YaRQ2XyolQL30EzTSo//z9SzBgBggrBgEFBQcBAQRUMFIw JQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnBraS5nb29nL2dzcjEwKQYIKwYBBQUH MAKGHWh0dHA6Ly9wa2kuZ29vZy9nc3IxL2dzcjEuY3J0MDIGA1UdHwQrMCkwJ6Al oCOGIWh0dHA6Ly9jcmwucGtpLmdvb2cvZ3NyMS9nc3IxLmNybDA7BgNVHSAENDAy MAgGBmeBDAECATAIBgZngQwBAgIwDQYLKwYBBAHWeQIFAwIwDQYLKwYBBAHWeQIF AwMwDQYJKoZIhvcNAQELBQADggEBADSkHrEoo9C0dhemMXoh6dFSPsjbdBZBiLg9 NR3t5P+T4Vxfq7vqfM/b5A3Ri1fyJm9bvhdGaJQ3b2t6yMAYN/olUazsaL+yyEn9 WprKASOshIArAoyZl+tJaox118fessmXn1hIVw41oeQa1v1vg4Fv74zPl6/AhSrw 9U5pCZEt4Wi4wStz6dTZ/CLANx8LZh1J7QJVj2fhMtfTJr9w4z30Z209fOU0iOMy +qduBmpvvYuR7hZL6Dupszfnw0Skfths18dG9ZKb59UhvmaSGZRVbNQpsg3BZlvi d0lIKO2d1xozclOzgjXPYovJJIultzkMu34qQb9Sz/yilrbCgj8= -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#2> <hostCert#1> INFO { 
3EE0278DF71FA3C125C4CD487F01D774694E6FC57E0CD94C24EFD769133918E5
}
intermediate_cert_notBefore <#2> <hostCert#1> INFO { 
2020-06-19 00:00
}
intermediate_cert_notAfter <#2> <hostCert#1> OK { 
2028-01-28 00:00
}
intermediate_cert_expiration <#2> <hostCert#1> OK { 
ok > 40 days
}
intermediate_cert_chain <#2> <hostCert#1> INFO { 
GTS Root R1 <-- GlobalSign Root CA
}
intermediate_cert_badOCSP <hostCert#1> OK { 
intermediate certificate(s) is/are ok
}
cert_signatureAlgorithm <hostCert#2> OK { 
ECDSA with SHA256
}
cert_keySize <hostCert#2> OK { 
EC 256 bits (curve P-256)
}
cert_keyUsage <hostCert#2> INFO { 
Digital Signature
}
cert_extKeyUsage <hostCert#2> INFO { 
TLS Web Server Authentication
}
cert_serialNumber <hostCert#2> INFO { 
F09367AEC3164D01137CD555AAE84772
}
cert_serialNumberLen <hostCert#2> INFO { 
16
}
cert_fingerprintSHA1 <hostCert#2> INFO { 
6E0B4A041AD6AFE2775F5FBC31FF62491ABEABF4
}
cert_fingerprintSHA256 <hostCert#2> INFO { 
CF10C5332612412C96C8959F0282F2FBFDA8EAC8490EAAA7DB18143895384A86
}
cert <hostCert#2> INFO { 
-----BEGIN CERTIFICATE----- MIIDiDCCAy6gAwIBAgIRAPCTZ67DFk0BE3zVVaroR3IwCgYIKoZIzj0EAwIwOzEL MAkGA1UEBhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczEMMAoG A1UEAxMDV0UxMB4XDTI2MDkzMDA2MzYzNVoXDTI2MTIyOTA3MzYxOFowGjEYMBYG A1UEAxMPYnVzaW5lc3NpbmZvLmN6MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE Ya/pXFoBUl6hhQlw84CKa68enWDDxrzsyvHIo3JkLptB5RIKxNUk/lVdPAf/Q9Hb +1T0dZKmp/GXBYCy08nrWqOCAjIwggIuMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUE DDAKBggrBgEFBQcDATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBR1MKg9jQZPqaGv 9xph8QKODAdj9DAfBgNVHSMEGDAWgBSQd5I1Z8T/qMyp5nvZgHl7zJP5ODA1Bggr BgEFBQcBAQQpMCcwJQYIKwYBBQUHMAKGGWh0dHA6Ly9pLnBraS5nb29nL3dlMS5j cnQwLQYDVR0RBCYwJIIPYnVzaW5lc3NpbmZvLmN6ghEqLmJ1c2luZXNzaW5mby5j ejATBgNVHSAEDDAKMAgGBmeBDAECATA2BgNVHR8ELzAtMCugKaAnhiVodHRwOi8v Yy5wa2kuZ29vZy93ZTEvb3RQQmlCckZxWDAuY3JsMIIBBAYKKwYBBAHWeQIEAgSB 9QSB8gDwAHYA2AlVO5RPev/IFhlvlE+Fq7D4/F6HVSYPFdEucrtFSxQAAAGg8T5v dQAABAMARzBFAiBnHUyisOmyuexMb+5mSZjDx7CsFsKyOQWrHeSuKFbv2AIhALLJ g8TRzqm7s0cScX/7q5xRejl3cag8vSQ5HaGuFV7WAHYAyzj3FYl8hKFEX1vB3fvJ bvKaWc1HCmkFhbDLFMMUWOcAAAGg8T5vbwAABAMARzBFAiEA2IZKCH3DcSfsw3lh Q9DegnuIy7aswnlgkzYlpNggbEgCIE2rzp80Lhh4gEhaJztJsjcDq8hkafTiz34Z rrFuNla8MAoGCCqGSM49BAMCA0gAMEUCIQD7S+HkUDRfX9F9BV1gH7tSmA/UuWE4 8qzwTjc1nDH/OQIgTn4BRZ/emxlrwD4jS/vcT5nG6oGwnMd8alrSD7LraaI= -----END CERTIFICATE-----
}
cert_commonName <hostCert#2> OK { 
businessinfo.cz
}
cert_commonName_wo_SNI <hostCert#2> INFO { 
request w/o SNI didn't succeed, usual for EC certificates
}
cert_subjectAltName <hostCert#2> INFO { 
businessinfo.cz *.businessinfo.cz
}
cert_trust <hostCert#2> OK { 
Ok via SAN wildcard (SNI mandatory)
}
cert_chain_of_trust <hostCert#2> OK { 
passed.
}
cert_certificatePolicies_EV <hostCert#2> INFO { 
no
}
cert_expirationStatus <hostCert#2> MEDIUM { 
expires < 60 days (45)
}
cert_notBefore <hostCert#2> INFO { 
2026-09-30 06:36
}
cert_notAfter <hostCert#2> MEDIUM { 
2026-12-29 07:36
}
cert_extlifeSpan <hostCert#2> OK { 
certificate has no extended life time according to browser forum
}
cert_eTLS <hostCert#2> INFO { 
not present
}
cert_crlDistributionPoints <hostCert#2> INFO { 
http://c.pki.goog/we1/otPBiBrFqX0.crl
}
cert_ocspURL <hostCert#2> INFO { 
--
}
OCSP_stapling <hostCert#2> INFO { 
not offered
}
cert_mustStapleExtension <hostCert#2> INFO { 
--
}
DNS_CAArecord <hostCert#2> OK { 
issue=comodoca.com, issue=digicert.com;, issue=letsencrypt.org, issue=pki.goog;, issue=ssl.com, issuewild=comodoca.com, issuewild=digicert.com;, issuewild=letsencrypt.org, issuewild=pki.goog;, issuewild=ssl.com
}
certificate_transparency <hostCert#2> OK { 
yes (certificate extension)
}
certs_countServer <hostCert#2> INFO { 
3
}
certs_list_ordering_problem <hostCert#2> INFO { 
no
}
cert_caIssuers <hostCert#2> INFO { 
WE1 (Google Trust Services from US)
}
intermediate_cert <#1> <hostCert#2> INFO { 
-----BEGIN CERTIFICATE----- MIICnzCCAiWgAwIBAgIQf/MZd5csIkp2FV0TttaF4zAKBggqhkjOPQQDAzBHMQsw CQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEU MBIGA1UEAxMLR1RTIFJvb3QgUjQwHhcNMjMxMjEzMDkwMDAwWhcNMjkwMjIwMTQw MDAwWjA7MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZp Y2VzMQwwCgYDVQQDEwNXRTEwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAARvzTr+ Z1dHTCEDhUDCR127WEcPQMFcF4XGGTfn1XzthkubgdnXGhOlCgP4mMTG6J7/EFmP LCaY9eYmJbsPAvpWo4H+MIH7MA4GA1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwEgYDVR0TAQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQU kHeSNWfE/6jMqeZ72YB5e8yT+TgwHwYDVR0jBBgwFoAUgEzW63T/STaj1dj8tT7F avCUHYwwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzAChhhodHRwOi8vaS5wa2ku Z29vZy9yNC5jcnQwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2MucGtpLmdvb2cv ci9yNC5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwCgYIKoZIzj0EAwMDaAAwZQIx AOcCq1HW90OVznX+0RGU1cxAQXomvtgM8zItPZCuFQ8jSBJSjz5keROv9aYsAm5V sQIwJonMaAFi54mrfhfoFNZEfuNMSQ6/bIBiNLiyoX46FohQvKeIoJ99cx7sUkFN 7uJW -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#1> <hostCert#2> INFO { 
1DFC1605FBAD358D8BC844F76D15203FAC9CA5C1A79FD4857FFAF2864FBEBF96
}
intermediate_cert_notBefore <#1> <hostCert#2> INFO { 
2023-12-13 09:00
}
intermediate_cert_notAfter <#1> <hostCert#2> OK { 
2029-02-20 14:00
}
intermediate_cert_expiration <#1> <hostCert#2> OK { 
ok > 40 days
}
intermediate_cert_chain <#1> <hostCert#2> INFO { 
WE1 <-- GTS Root R4
}
intermediate_cert <#2> <hostCert#2> INFO { 
-----BEGIN CERTIFICATE----- MIIDejCCAmKgAwIBAgIQf+UwvzMTQ77dghYQST2KGzANBgkqhkiG9w0BAQsFADBX MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEQMA4GA1UE CxMHUm9vdCBDQTEbMBkGA1UEAxMSR2xvYmFsU2lnbiBSb290IENBMB4XDTIzMTEx NTAzNDMyMVoXDTI4MDEyODAwMDA0MlowRzELMAkGA1UEBhMCVVMxIjAgBgNVBAoT GUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBMTEMxFDASBgNVBAMTC0dUUyBSb290IFI0 MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAE83Rzp2iLYK5DuDXFgTB7S0md+8Fhzube Rr1r1WEYNa5A3XP3iZEwWus87oV8okB2O6nGuEfYKueSkWpz6bFyOZ8pn6KY019e WIZlD6GEZQbR3IvJx3PIjGov5cSr0R2Ko4H/MIH8MA4GA1UdDwEB/wQEAwIBhjAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDwYDVR0TAQH/BAUwAwEB/zAd BgNVHQ4EFgQUgEzW63T/STaj1dj8tT7FavCUHYwwHwYDVR0jBBgwFoAUYHtmGkUN l8qJUC99BM00qP/8/UswNgYIKwYBBQUHAQEEKjAoMCYGCCsGAQUFBzAChhpodHRw Oi8vaS5wa2kuZ29vZy9nc3IxLmNydDAtBgNVHR8EJjAkMCKgIKAehhxodHRwOi8v Yy5wa2kuZ29vZy9yL2dzcjEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA0GCSqG SIb3DQEBCwUAA4IBAQAYQrsPBtYDh5bjP2OBDwmkoWhIDDkic574y04tfzHpn+cJ odI2D4SseesQ6bDrarZ7C30ddLibZatoKiws3UL9xnELz4ct92vID24FfVbiI1hY +SW6FoVHkNeWIP0GCbaM4C6uVdF5dTUsMVs/ZbzNnIdCp5Gxmx5ejvEau8otR/Cs kGN+hr/W5GvT1tMBjgWKZ1i4//emhA1JG1BbPzoLJQvyEotc03lXjTaCzv8mEbep 8RqZ7a2CPsgRbuvTPBwcOMBBmuFeU88+FSBX6+7iP0il8b4Z0QFqIwwMHfs/L6K1 vepuoxtGzi4CZ68zJpiq1UvSqTbFJjtbD4seiMHl -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#2> <hostCert#2> INFO { 
76B27B80A58027DC3CF1DA68DAC17010ED93997D0B603E2FADBE85012493B5A7
}
intermediate_cert_notBefore <#2> <hostCert#2> INFO { 
2023-11-15 03:43
}
intermediate_cert_notAfter <#2> <hostCert#2> OK { 
2028-01-28 00:00
}
intermediate_cert_expiration <#2> <hostCert#2> OK { 
ok > 40 days
}
intermediate_cert_chain <#2> <hostCert#2> INFO { 
GTS Root R4 <-- GlobalSign Root CA
}
intermediate_cert_badOCSP <hostCert#2> OK { 
intermediate certificate(s) is/are ok
}
HTTP_status_code INFO { 
200 OK ('/')
}
HTTP_clock_skew INFO { 
+279 seconds from localtime
}
HTTP_headerTime INFO { 
1794603768
}
HTTP_headerAge INFO { 
279 seconds
}
HSTS_time OK { 
365 days (=31536000 seconds) > 15552000 seconds
}
HSTS_subdomains OK { 
includes subdomains
}
HSTS_preload INFO { 
domain is NOT marked for preloading
}
HPKP INFO { 
No support for HTTP Public Key Pinning
}
banner_server INFO { 
cloudflare
}
banner_application INFO { 
x-powered-by: BusinessInfo.cz
}
cookie_count INFO { 
0 at '/'
}
X-Frame-Options OK { 
SAMEORIGIN
}
X-Content-Type-Options OK { 
nosniff
}
Content-Security-Policy OK { 
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://code.jquery.com https://kit.fontawesome.com https://www.google.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://analytics.businessinfo.cz https://matomo.businessinfo.cz; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com http://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://ka-p.fontawesome.com; img-src 'self' data: https: blob:; font-src 'self' https://fonts.gstatic.com https://ka-p.fontawesome.com data:; connect-src 'self' blob: https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com https://www.google.com https://api.mapy.com https://ka-p.fontawesome.com https://mx.businessinfo.cz https://analytics.businessinfo.cz https://matomo.businessinfo.cz https://projekt-bi.geetix.com https://projekt.businessinfo.cz https://projekt-staging.businessinfo.cz https://my.yoast.com https://cdn.jsdelivr.net; frame-src 'self' blob: https://www.googletagmanager.com https://www.google.com https://maps.google.com https://www.youtube.com https://player.vimeo.com https://embed.spotify.com https://embed.podcasts.apple.com https://w.soundcloud.com https://player.captivate.fm https://mx.businessinfo.cz https://wp.freemius.com https://api.freemius.com; manifest-src 'self' https://businessinfo.cloudflareaccess.com; worker-src 'self' blob:; base-uri 'self'; form-action 'self'
}
Permissions-Policy OK { 
accelerometer=*, autoplay=*, encrypted-media=*, fullscreen=*, geolocation=*, gyroscope=*, magnetometer=*, microphone=*, payment=*, sync-xhr=*
}
Referrer-Policy INFO { 
strict-origin-when-cross-origin
}
Cache-Control INFO { 
max-age=14400, must-revalidate
}
Pragma INFO { 
no-cache
}
banner_reverseproxy
zranitelnosti: CWE-200
INFO { 
--
}
heartbleed
zranitelnosti: CVE-2014-0160 CWE-119
OK { 
not vulnerable, no heartbeat extension
}
CCS
zranitelnosti: CVE-2014-0224 CWE-310
OK { 
not vulnerable
}
ticketbleed
zranitelnosti: CVE-2016-9244 CWE-200
OK { 
not vulnerable
}
ROBOT
zranitelnosti: CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168 CWE-203
OK { 
not vulnerable
}
secure_renego
zranitelnosti: CWE-310
WARN { 
OpenSSL handshake didn't succeed
}
secure_client_renego
zranitelnosti: CVE-2011-1473 CWE-310
OK { 
not vulnerable
}
CRIME_TLS
zranitelnosti: CVE-2012-4929 CWE-310
OK { 
not vulnerable
}
BREACH
zranitelnosti: CVE-2013-3587 CWE-310
MEDIUM { 
potentially VULNERABLE, gzip br HTTP compression detected  - only supplied '/' tested
}
POODLE_SSL
zranitelnosti: CVE-2014-3566 CWE-310
OK { 
not vulnerable, no SSLv3
}
fallback_SCSV OK { 
no protocol below TLS 1.2 offered
}
SWEET32
zranitelnosti: CVE-2016-2183 CVE-2016-6329 CWE-327
OK { 
not vulnerable
}
FREAK
zranitelnosti: CVE-2015-0204 CWE-310
OK { 
not vulnerable
}
DROWN
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
OK { 
not vulnerable on this host and port
}
DROWN_hint
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
INFO { 
Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=D687086D2B30261C506B227C3F8A09F699AD8313517B624E81DD27113054FDE1
}
LOGJAM
zranitelnosti: CVE-2015-4000 CWE-310
OK { 
not vulnerable, no DH EXPORT ciphers,
}
LOGJAM-common_primes
zranitelnosti: CVE-2015-4000 CWE-310
OK { 
no DH key with <= TLS 1.2
}
BEAST
zranitelnosti: CVE-2011-3389 CWE-20
OK { 
not vulnerable, no SSL3 or TLS1
}
LUCKY13
zranitelnosti: CVE-2013-0169 CWE-310
LOW { 
potentially vulnerable, uses TLS CBC ciphers
}
winshock
zranitelnosti: CVE-2014-6321 CWE-94
OK { 
not vulnerable
}
RC4
zranitelnosti: CVE-2013-2566 CVE-2015-2808 CWE-310
OK { 
not vulnerable
}
clientsimulation-android_442 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_500 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_60 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_70 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_81 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_90 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-android_X INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-chrome_74_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-chrome_79_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-firefox_66_win81 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-firefox_71_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-ie_6_xp INFO { 
No connection
}
clientsimulation-ie_8_win7 INFO { 
No connection
}
clientsimulation-ie_8_xp INFO { 
No connection
}
clientsimulation-ie_11_win7 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-ie_11_win81 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-ie_11_winphone81 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-ie_11_win10 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-edge_15_win10 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-edge_17_win10 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-opera_66_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-safari_9_ios9 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-safari_9_osx1011 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-safari_10_osx1012 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-safari_121_ios_122 INFO { 
TLSv1.3 TLS_CHACHA20_POLY1305_SHA256
}
clientsimulation-safari_130_osx_10146 INFO { 
TLSv1.3 TLS_CHACHA20_POLY1305_SHA256
}
clientsimulation-apple_ats_9_ios9 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-java_6u45 INFO { 
No connection
}
clientsimulation-java_7u25 INFO { 
No connection
}
clientsimulation-java_8u161 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-java1102 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-java1201 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-openssl_102e INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-openssl_110l INFO { 
TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305
}
clientsimulation-openssl_111d INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-thunderbird_68_3_1 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
rating_spec INFO { 
SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)
}
rating_doc INFO { 
https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide
}
protocol_support_score INFO { 
100
}
protocol_support_score_weighted INFO { 
30
}
key_exchange_score INFO { 
90
}
key_exchange_score_weighted INFO { 
27
}
cipher_strength_score INFO { 
90
}
cipher_strength_score_weighted INFO { 
36
}
final_score INFO { 
93
}
overall_grade OK { 
A+
}
server www.businessinfo.cz/172.66.148.148
pre_128cipher INFO { 
No 128 cipher limit bug
}
SSLv2 OK { 
not offered
}
SSLv3 OK { 
not offered
}
TLS1 INFO { 
not offered
}
TLS1_1 INFO { 
not offered
}
TLS1_2 OK { 
offered
}
TLS1_3 OK { 
offered with final
}
NPN INFO { 
offered with h2, http/1.1 (advertised)
}
ALPN_HTTP2 OK { 
h2
}
ALPN INFO { 
http/1.1
}
cipherlist_NULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_aNULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_EXPORT
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_LOW
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_3DES_IDEA
zranitelnosti: CWE-310
INFO { 
not offered
}
cipherlist_AVERAGE
zranitelnosti: CWE-310
LOW { 
offered
}
cipherlist_GOOD OK { 
offered
}
cipherlist_STRONG OK { 
offered
}
cipher_order OK { 
server -- TLS 1.3 client determined
}
protocol_negotiated OK { 
Default protocol TLS1.3
}
cipher_negotiated OK { 
TLS_AES_256_GCM_SHA384, 253 bit ECDH (X25519)
}
cipher-tls1_2_xc02b OK { 
TLSv1.2   xc02b   ECDHE-ECDSA-AES128-GCM-SHA256     ECDH 253   AESGCM      128      TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_xcca9 OK { 
TLSv1.2   xcca9   ECDHE-ECDSA-CHACHA20-POLY1305     ECDH 253   ChaCha20    256      TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
}
cipher-tls1_2_xc009 LOW { 
TLSv1.2   xc009   ECDHE-ECDSA-AES128-SHA            ECDH 253   AES         128      TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_2_xc02c OK { 
TLSv1.2   xc02c   ECDHE-ECDSA-AES256-GCM-SHA384     ECDH 253   AESGCM      256      TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_xc00a LOW { 
TLSv1.2   xc00a   ECDHE-ECDSA-AES256-SHA            ECDH 253   AES         256      TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_2_xc023 LOW { 
TLSv1.2   xc023   ECDHE-ECDSA-AES128-SHA256         ECDH 253   AES         128      TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
}
cipher-tls1_2_xc024 LOW { 
TLSv1.2   xc024   ECDHE-ECDSA-AES256-SHA384         ECDH 253   AES         256      TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
}
cipher-tls1_2_xc02f OK { 
TLSv1.2   xc02f   ECDHE-RSA-AES128-GCM-SHA256       ECDH 253   AESGCM      128      TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_xcca8 OK { 
TLSv1.2   xcca8   ECDHE-RSA-CHACHA20-POLY1305       ECDH 253   ChaCha20    256      TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
}
cipher-tls1_2_xc013 LOW { 
TLSv1.2   xc013   ECDHE-RSA-AES128-SHA              ECDH 253   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_2_x9c OK { 
TLSv1.2   x9c     AES128-GCM-SHA256                 RSA        AESGCM      128      TLS_RSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_x2f LOW { 
TLSv1.2   x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_2_xc030 OK { 
TLSv1.2   xc030   ECDHE-RSA-AES256-GCM-SHA384       ECDH 253   AESGCM      256      TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_xc014 LOW { 
TLSv1.2   xc014   ECDHE-RSA-AES256-SHA              ECDH 253   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_2_x9d OK { 
TLSv1.2   x9d     AES256-GCM-SHA384                 RSA        AESGCM      256      TLS_RSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_x35 LOW { 
TLSv1.2   x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_2_xc027 LOW { 
TLSv1.2   xc027   ECDHE-RSA-AES128-SHA256           ECDH 253   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
}
cipher-tls1_2_x3c LOW { 
TLSv1.2   x3c     AES128-SHA256                     RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA256
}
cipher-tls1_2_xc028 LOW { 
TLSv1.2   xc028   ECDHE-RSA-AES256-SHA384           ECDH 253   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
}
cipher-tls1_2_x3d LOW { 
TLSv1.2   x3d     AES256-SHA256                     RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA256
}
cipherorder_TLSv1_2 INFO { 
ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-CHACHA20-POLY1305 ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES256-SHA384 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-CHACHA20-POLY1305 ECDHE-RSA-AES128-SHA AES128-GCM-SHA256 AES128-SHA ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA AES256-GCM-SHA384 AES256-SHA ECDHE-RSA-AES128-SHA256 AES128-SHA256 ECDHE-RSA-AES256-SHA384 AES256-SHA256
}
prioritize_chacha_TLSv1_2 INFO { 
true
}
cipher-tls1_3_x1302 OK { 
TLSv1.3   x1302   TLS_AES_256_GCM_SHA384            ECDH 253   AESGCM      256      TLS_AES_256_GCM_SHA384
}
cipher-tls1_3_x1303 OK { 
TLSv1.3   x1303   TLS_CHACHA20_POLY1305_SHA256      ECDH 253   ChaCha20    256      TLS_CHACHA20_POLY1305_SHA256
}
cipher-tls1_3_x1301 OK { 
TLSv1.3   x1301   TLS_AES_128_GCM_SHA256            ECDH 253   AESGCM      128      TLS_AES_128_GCM_SHA256
}
supportedciphers_TLSv1_3 INFO { 
TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 TLS_AES_128_GCM_SHA256
}
FS OK { 
offered
}
FS_ciphers INFO { 
TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-ECDSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-CHACHA20-POLY1305 ECDHE-RSA-CHACHA20-POLY1305 TLS_AES_128_GCM_SHA256 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-ECDSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-ECDSA-AES128-SHA
}
FS_ECDHE_curves OK { 
prime256v1 secp384r1 secp521r1 X25519
}
TLS_extensions INFO { 
'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'next protocol/#13172' 'key share/#51' 'supported versions/#43' 'extended master secret/#23' 'application layer protocol negotiation/#16' 'compress_certificate/#27'
}
TLS_session_ticket INFO { 
valid for 64800 seconds only (<daily)
}
SSL_sessionID_support INFO { 
yes
}
sessionresumption_ticket INFO { 
supported
}
sessionresumption_ID INFO { 
not supported
}
TLS_timestamp INFO { 
off by -5 seconds from your localtime
}
certificate_compression INFO { 
0002/Brotli
}
clientAuth INFO { 
none
}
cert_numbers INFO { 
2
}
cert_signatureAlgorithm <hostCert#1> OK { 
SHA256 with RSA
}
cert_keySize <hostCert#1> INFO { 
RSA 2048 bits (exponent is 65537)
}
cert_keyUsage <hostCert#1> INFO { 
Digital Signature, Key Encipherment
}
cert_extKeyUsage <hostCert#1> INFO { 
TLS Web Server Authentication
}
cert_serialNumber <hostCert#1> INFO { 
F6E7182F46BE952C13A68B3260AD1A4A
}
cert_serialNumberLen <hostCert#1> INFO { 
16
}
cert_fingerprintSHA1 <hostCert#1> INFO { 
B6A36E704358B40FA1FF61BB54C9E13C40DB7FA7
}
cert_fingerprintSHA256 <hostCert#1> INFO { 
D687086D2B30261C506B227C3F8A09F699AD8313517B624E81DD27113054FDE1
}
cert <hostCert#1> INFO { 
-----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIRAPbnGC9GvpUsE6aLMmCtGkowDQYJKoZIhvcNAQELBQAw OzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczEM MAoGA1UEAxMDV1IxMB4XDTI2MDkzMDA2MzYxMloXDTI2MTIyOTA3MzIyN1owGjEY MBYGA1UEAxMPYnVzaW5lc3NpbmZvLmN6MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAxNtUP5uDn2wTQSa9UyBLOHF75bZzrHkVwyd62HsNMmsV4yx6OLAC VFz9wa/rsjtywGxbGDu10lYgW7WUikaUXzocSMXXCBoDus6dLaL5b4HxcKFyO9cc hhVi4y+op+TadnaeIeoVOV83sK/ZyALt7sXwNKBP84jlCA6/fS7Cqt+ELgasUOP/ yGjoLV1TYEDZBlW0iIff2LEwb3gOI/K7ZtOdr8XWhmT60s8/48mR31C9/L4sdFKD YYPHhPZSHK1PZguc6jlRpNJthegx6W0bwbm5R9Cb5yYsloKX/XxVV8x7AEd4k2Ex sboFJ3Xx/VtsRnM8Pbkz6waa/fojP0VNiQIDAQABo4ICMTCCAi0wDgYDVR0PAQH/ BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFDOhkUGSPk2WKTHJJ1xLn0R7XE+fMB8GA1UdIwQYMBaAFGZpSdTeKpyRA8+J DiS4DjADboguMDUGCCsGAQUFBwEBBCkwJzAlBggrBgEFBQcwAoYZaHR0cDovL2ku cGtpLmdvb2cvd3IxLmNydDAtBgNVHREEJjAkgg9idXNpbmVzc2luZm8uY3qCESou YnVzaW5lc3NpbmZvLmN6MBMGA1UdIAQMMAowCAYGZ4EMAQIBMDYGA1UdHwQvMC0w K6ApoCeGJWh0dHA6Ly9jLnBraS5nb29nL3dyMS9ISE9malJnZmpUUS5jcmwwggED BgorBgEEAdZ5AgQCBIH0BIHxAO8AdgDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMB cxfAyMVpdwAAAaDxPhYOAAAEAwBHMEUCIQC1RyKcaGZ7XzF7/cbNN6pbR3sxMvC0 3p0EZ20eLuT4WQIgY4zK6cdzO0jsp6m0vNgEJI1TSTFaNBisL5Z7+a2IRb8AdQCv Z4g7V7BO3Y+m2X72LqjrgQrHcWDwJF5V1gwv54WHOgAAAaDxPhYnAAAEAwBGMEQC IE4g387YLGLCAUr6hvSeaEG8NR/3BDvGmTRD+gPmHcjjAiBD9YSNAP8kptE1Dv28 9bYo3WJTLdAkQ2qEB0WtmHGSNjANBgkqhkiG9w0BAQsFAAOCAQEAok4hbBlY30iR 7dCUrWQg8KpreMPiWW9nIWJ4SFg1L9vioIVhbcFGG/hSeBpkD5Oh1tXBbvPgbq99 V0T95GT5gvUEDLbfSvxfqxR4KHpK+ndORT6iYLoyPcg80WWjV27Hha8q4bI/y144 w8JCP+RrSp96cokFMsBgELIQnbIvIbubGz0N1wahWYFalxSQitjF66MrN5g6bid4 lIWtyrfL/yUZwYoieDsL9HazLwZPF3WY+xiX4Eh0PRHq4/Ab4lbgWSp0m+GyIF2K I7EpfMnrJpU0B8p8QAJ2Nb+YVV9LH7chklM81M9ms0Cp63BiONqtoiH0hRzM+t4y u+lHZDrdrA== -----END CERTIFICATE-----
}
cert_commonName <hostCert#1> OK { 
businessinfo.cz
}
cert_commonName_wo_SNI <hostCert#1> INFO { 
request w/o SNI didn't succeed
}
cert_subjectAltName <hostCert#1> INFO { 
businessinfo.cz *.businessinfo.cz
}
cert_trust <hostCert#1> OK { 
Ok via SAN wildcard (SNI mandatory)
}
cert_chain_of_trust <hostCert#1> OK { 
passed.
}
cert_certificatePolicies_EV <hostCert#1> INFO { 
no
}
cert_expirationStatus <hostCert#1> MEDIUM { 
expires < 60 days (45)
}
cert_notBefore <hostCert#1> INFO { 
2026-09-30 06:36
}
cert_notAfter <hostCert#1> MEDIUM { 
2026-12-29 07:32
}
cert_extlifeSpan <hostCert#1> OK { 
certificate has no extended life time according to browser forum
}
cert_eTLS <hostCert#1> INFO { 
not present
}
cert_crlDistributionPoints <hostCert#1> INFO { 
http://c.pki.goog/wr1/HHOfjRgfjTQ.crl
}
cert_ocspURL <hostCert#1> INFO { 
--
}
OCSP_stapling <hostCert#1> INFO { 
not offered
}
cert_mustStapleExtension <hostCert#1> INFO { 
--
}
DNS_CAArecord <hostCert#1> OK { 
issue=comodoca.com, issue=digicert.com;, issue=letsencrypt.org, issue=pki.goog;, issue=ssl.com, issuewild=comodoca.com, issuewild=digicert.com;, issuewild=letsencrypt.org, issuewild=pki.goog;, issuewild=ssl.com
}
certificate_transparency <hostCert#1> OK { 
yes (certificate extension)
}
certs_countServer <hostCert#1> INFO { 
3
}
certs_list_ordering_problem <hostCert#1> INFO { 
no
}
cert_caIssuers <hostCert#1> INFO { 
WR1 (Google Trust Services from US)
}
intermediate_cert <#1> <hostCert#1> INFO { 
-----BEGIN CERTIFICATE----- MIIFCzCCAvOgAwIBAgIQf9niwtIEigR0tieibQhopzANBgkqhkiG9w0BAQsFADBH MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzEUMBIGA1UEAxMLR1RTIFJvb3QgUjEwHhcNMjMxMjEzMDkwMDAwWhcNMjkwMjIw MTQwMDAwWjA7MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNl cnZpY2VzMQwwCgYDVQQDEwNXUjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDPbjYWircr7kaYAx1TcA937qNLoHK+jyMtwkfGj1yN+T3mGo7uMyINyRFI uLBizvRpDXICfd7VJg/DbpvPfg7XIM/GkDujggbaOp3/bFa/3OlhlEXkabxPD8kT wK1hRHIggdAPK55oamJqj4oiV3lpK+IkM352YyxdvFFpfiMHsf92gfHuuFi1azUV 76HmSCg5lzHZBx+Vp56uz5i8no2KA+Gwl01Qb5NMSh/4233xkJkVf+OW7e4xgepy PVId3yVkpQtwqp7oqLlHyKdaECVgb0Lh1z/njwzwwoNGMyDmS3cEdqFop10VGO/Y KHc1rQ6tRuRibuKq+MzvN34PJrMHAgMBAAGjgf4wgfswDgYDVR0PAQH/BAQDAgGG MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAGAQH/ AgEAMB0GA1UdDgQWBBRmaUnU3iqckQPPiQ4kuA4wA26ILjAfBgNVHSMEGDAWgBTk rysmcRorSCeFL1JmLO/wiRNxPjA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAKG GGh0dHA6Ly9pLnBraS5nb29nL3IxLmNydDArBgNVHR8EJDAiMCCgHqAchhpodHRw Oi8vYy5wa2kuZ29vZy9yL3IxLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATANBgkq hkiG9w0BAQsFAAOCAgEATuazCBEgkWAn+VGQTQIY7rjBidUihJfm1t/mTjo7KQR+ 3iDx4o2L06oeF0Q3wpKYpQgI/TeMqUlYMWQmZbWPE0PX8pfsVAE5E5tVOjh34bNA JwDPVnsZVJwzN3nw5BGQ7sxRspFzIcM/qbbTpNeXf9II4Wsk2+Tv6FSVFZUL3/0u HradbruDWjRQ4IZ7mYqKiEqk08dpOZ+TmBzwykEGy1/IXberb6Ap1SSnn2+RI7t6 N/fqPCrwwFjp8kg1G6etRATGBaPYCx+GjJMFPX+k97Alvoj3/98SvqdegLPYEPjv xUclHpiKLD63NMmVarVQddIL6kOvTe5k0pnxRnR+mndGHIQc77TLbcZFeja56Pyn lSqmer578c7CBrPqo1BVmPyWUK+v6sGuzs7Mq7QQaxVs4710cI/MpPp1ovxMVt17 ENKxLk34LpEKAKVmqwnzbHHRjhXNeCC984XDOwLEp0K4MzHl8ZOWJQAakCdVlFC+ PyA3GP2JX/QLoqWNHGuN9c9vLObDhHVs/L+65De+OdnnjpFGI9xxtsNyRsyaHdFA f5z7ulOoXDXkHCCej/Ehs5docReNt16W2xbH/EBuirJrOzFE2rtALxksl1TdEjOf IKXOJfUqQeVI5+hA7V+n1+A/n7Npg0S+5ODytWh5XW54ccN1drJnMK54ttozh0c= -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#1> <hostCert#1> INFO { 
B10B6F00E609509E8700F6D34687A2BFCE38EA05A8FDF1CDC40C3A2A0D0D0E45
}
intermediate_cert_notBefore <#1> <hostCert#1> INFO { 
2023-12-13 09:00
}
intermediate_cert_notAfter <#1> <hostCert#1> OK { 
2029-02-20 14:00
}
intermediate_cert_expiration <#1> <hostCert#1> OK { 
ok > 40 days
}
intermediate_cert_chain <#1> <hostCert#1> INFO { 
WR1 <-- GTS Root R1
}
intermediate_cert <#2> <hostCert#1> INFO { 
-----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgIQd70NbNs2+RrqIQ/E8FjTDTANBgkqhkiG9w0BAQsFADBX MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEQMA4GA1UE CxMHUm9vdCBDQTEbMBkGA1UEAxMSR2xvYmFsU2lnbiBSb290IENBMB4XDTIwMDYx OTAwMDA0MloXDTI4MDEyODAwMDA0MlowRzELMAkGA1UEBhMCVVMxIjAgBgNVBAoT GUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBMTEMxFDASBgNVBAMTC0dUUyBSb290IFIx MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAthECix7joXebO9y/lD63 ladAPKH9gvl9MgaCcfb2jH/76Nu8ai6Xl6OMS/kr9rH5zoQdsfnFl97vufKj6bwS iV6nqlKr+CMny6SxnGPb15l+8Ape62im9MZaRw1NEDPjTrETo8gYbEvs/AmQ351k KSUjB6G00j0uYODP0gmHu81I8E3CwnqIiru6z1kZ1q+PsAewnjHxgsHA3y6mbWwZ DrXYfiYaRQM9sHmklCitD38m5agI/pboPGiUU+6DOogrFZYJsuB6jC511pzrp1Zk j5ZPaK49l8KEj8C8QMALXL32h7M1bKwYUH+E4EzNktMg6TO8UpmvMrUpsyUqtEj5 cuHKZPfmghCN6J3Cioj6OGaK/GP5Afl4/Xtcd/p2h/rs37EOeZVXtL0m79YB0esW CruOC7XFxYpVq9Os6pFLKcwZpDIlTirxZUTQAs6qzkm06p98g7BAe+dDq6dso499 iYH6TKX/1Y7DzkvgtdizjkXPdsDtQCv9Uw+wp9U7DbGKogPeMa3Md+pvez7W35Ei Eua++tgy/BBjFFFy3l3WFpO9KWgz7zpm7AeKJt8T11dleCfeXkkUAKIAf5qoIbap sZWwpbkNFhHax2xIPEDgfg1azVY80ZcFuctL7TlLnMQ/0lUTbiSw1nH69MG6zO0b 9f6BQdgAmD06yK56mDcYBZUCAwEAAaOCATgwggE0MA4GA1UdDwEB/wQEAwIBhjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTkrysmcRorSCeFL1JmLO/wiRNxPjAf BgNVHSMEGDAWgBRge2YaRQ2XyolQL30EzTSo//z9SzBgBggrBgEFBQcBAQRUMFIw JQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnBraS5nb29nL2dzcjEwKQYIKwYBBQUH MAKGHWh0dHA6Ly9wa2kuZ29vZy9nc3IxL2dzcjEuY3J0MDIGA1UdHwQrMCkwJ6Al oCOGIWh0dHA6Ly9jcmwucGtpLmdvb2cvZ3NyMS9nc3IxLmNybDA7BgNVHSAENDAy MAgGBmeBDAECATAIBgZngQwBAgIwDQYLKwYBBAHWeQIFAwIwDQYLKwYBBAHWeQIF AwMwDQYJKoZIhvcNAQELBQADggEBADSkHrEoo9C0dhemMXoh6dFSPsjbdBZBiLg9 NR3t5P+T4Vxfq7vqfM/b5A3Ri1fyJm9bvhdGaJQ3b2t6yMAYN/olUazsaL+yyEn9 WprKASOshIArAoyZl+tJaox118fessmXn1hIVw41oeQa1v1vg4Fv74zPl6/AhSrw 9U5pCZEt4Wi4wStz6dTZ/CLANx8LZh1J7QJVj2fhMtfTJr9w4z30Z209fOU0iOMy +qduBmpvvYuR7hZL6Dupszfnw0Skfths18dG9ZKb59UhvmaSGZRVbNQpsg3BZlvi d0lIKO2d1xozclOzgjXPYovJJIultzkMu34qQb9Sz/yilrbCgj8= -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#2> <hostCert#1> INFO { 
3EE0278DF71FA3C125C4CD487F01D774694E6FC57E0CD94C24EFD769133918E5
}
intermediate_cert_notBefore <#2> <hostCert#1> INFO { 
2020-06-19 00:00
}
intermediate_cert_notAfter <#2> <hostCert#1> OK { 
2028-01-28 00:00
}
intermediate_cert_expiration <#2> <hostCert#1> OK { 
ok > 40 days
}
intermediate_cert_chain <#2> <hostCert#1> INFO { 
GTS Root R1 <-- GlobalSign Root CA
}
intermediate_cert_badOCSP <hostCert#1> OK { 
intermediate certificate(s) is/are ok
}
cert_signatureAlgorithm <hostCert#2> OK { 
ECDSA with SHA256
}
cert_keySize <hostCert#2> OK { 
EC 256 bits (curve P-256)
}
cert_keyUsage <hostCert#2> INFO { 
Digital Signature
}
cert_extKeyUsage <hostCert#2> INFO { 
TLS Web Server Authentication
}
cert_serialNumber <hostCert#2> INFO { 
F09367AEC3164D01137CD555AAE84772
}
cert_serialNumberLen <hostCert#2> INFO { 
16
}
cert_fingerprintSHA1 <hostCert#2> INFO { 
6E0B4A041AD6AFE2775F5FBC31FF62491ABEABF4
}
cert_fingerprintSHA256 <hostCert#2> INFO { 
CF10C5332612412C96C8959F0282F2FBFDA8EAC8490EAAA7DB18143895384A86
}
cert <hostCert#2> INFO { 
-----BEGIN CERTIFICATE----- MIIDiDCCAy6gAwIBAgIRAPCTZ67DFk0BE3zVVaroR3IwCgYIKoZIzj0EAwIwOzEL MAkGA1UEBhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczEMMAoG A1UEAxMDV0UxMB4XDTI2MDkzMDA2MzYzNVoXDTI2MTIyOTA3MzYxOFowGjEYMBYG A1UEAxMPYnVzaW5lc3NpbmZvLmN6MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE Ya/pXFoBUl6hhQlw84CKa68enWDDxrzsyvHIo3JkLptB5RIKxNUk/lVdPAf/Q9Hb +1T0dZKmp/GXBYCy08nrWqOCAjIwggIuMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUE DDAKBggrBgEFBQcDATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBR1MKg9jQZPqaGv 9xph8QKODAdj9DAfBgNVHSMEGDAWgBSQd5I1Z8T/qMyp5nvZgHl7zJP5ODA1Bggr BgEFBQcBAQQpMCcwJQYIKwYBBQUHMAKGGWh0dHA6Ly9pLnBraS5nb29nL3dlMS5j cnQwLQYDVR0RBCYwJIIPYnVzaW5lc3NpbmZvLmN6ghEqLmJ1c2luZXNzaW5mby5j ejATBgNVHSAEDDAKMAgGBmeBDAECATA2BgNVHR8ELzAtMCugKaAnhiVodHRwOi8v Yy5wa2kuZ29vZy93ZTEvb3RQQmlCckZxWDAuY3JsMIIBBAYKKwYBBAHWeQIEAgSB 9QSB8gDwAHYA2AlVO5RPev/IFhlvlE+Fq7D4/F6HVSYPFdEucrtFSxQAAAGg8T5v dQAABAMARzBFAiBnHUyisOmyuexMb+5mSZjDx7CsFsKyOQWrHeSuKFbv2AIhALLJ g8TRzqm7s0cScX/7q5xRejl3cag8vSQ5HaGuFV7WAHYAyzj3FYl8hKFEX1vB3fvJ bvKaWc1HCmkFhbDLFMMUWOcAAAGg8T5vbwAABAMARzBFAiEA2IZKCH3DcSfsw3lh Q9DegnuIy7aswnlgkzYlpNggbEgCIE2rzp80Lhh4gEhaJztJsjcDq8hkafTiz34Z rrFuNla8MAoGCCqGSM49BAMCA0gAMEUCIQD7S+HkUDRfX9F9BV1gH7tSmA/UuWE4 8qzwTjc1nDH/OQIgTn4BRZ/emxlrwD4jS/vcT5nG6oGwnMd8alrSD7LraaI= -----END CERTIFICATE-----
}
cert_commonName <hostCert#2> OK { 
businessinfo.cz
}
cert_commonName_wo_SNI <hostCert#2> INFO { 
request w/o SNI didn't succeed, usual for EC certificates
}
cert_subjectAltName <hostCert#2> INFO { 
businessinfo.cz *.businessinfo.cz
}
cert_trust <hostCert#2> OK { 
Ok via SAN wildcard (SNI mandatory)
}
cert_chain_of_trust <hostCert#2> OK { 
passed.
}
cert_certificatePolicies_EV <hostCert#2> INFO { 
no
}
cert_expirationStatus <hostCert#2> MEDIUM { 
expires < 60 days (45)
}
cert_notBefore <hostCert#2> INFO { 
2026-09-30 06:36
}
cert_notAfter <hostCert#2> MEDIUM { 
2026-12-29 07:36
}
cert_extlifeSpan <hostCert#2> OK { 
certificate has no extended life time according to browser forum
}
cert_eTLS <hostCert#2> INFO { 
not present
}
cert_crlDistributionPoints <hostCert#2> INFO { 
http://c.pki.goog/we1/otPBiBrFqX0.crl
}
cert_ocspURL <hostCert#2> INFO { 
--
}
OCSP_stapling <hostCert#2> INFO { 
not offered
}
cert_mustStapleExtension <hostCert#2> INFO { 
--
}
DNS_CAArecord <hostCert#2> OK { 
issue=comodoca.com, issue=digicert.com;, issue=letsencrypt.org, issue=pki.goog;, issue=ssl.com, issuewild=comodoca.com, issuewild=digicert.com;, issuewild=letsencrypt.org, issuewild=pki.goog;, issuewild=ssl.com
}
certificate_transparency <hostCert#2> OK { 
yes (certificate extension)
}
certs_countServer <hostCert#2> INFO { 
3
}
certs_list_ordering_problem <hostCert#2> INFO { 
no
}
cert_caIssuers <hostCert#2> INFO { 
WE1 (Google Trust Services from US)
}
intermediate_cert <#1> <hostCert#2> INFO { 
-----BEGIN CERTIFICATE----- MIICnzCCAiWgAwIBAgIQf/MZd5csIkp2FV0TttaF4zAKBggqhkjOPQQDAzBHMQsw CQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEU MBIGA1UEAxMLR1RTIFJvb3QgUjQwHhcNMjMxMjEzMDkwMDAwWhcNMjkwMjIwMTQw MDAwWjA7MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZp Y2VzMQwwCgYDVQQDEwNXRTEwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAARvzTr+ Z1dHTCEDhUDCR127WEcPQMFcF4XGGTfn1XzthkubgdnXGhOlCgP4mMTG6J7/EFmP LCaY9eYmJbsPAvpWo4H+MIH7MA4GA1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwEgYDVR0TAQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQU kHeSNWfE/6jMqeZ72YB5e8yT+TgwHwYDVR0jBBgwFoAUgEzW63T/STaj1dj8tT7F avCUHYwwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzAChhhodHRwOi8vaS5wa2ku Z29vZy9yNC5jcnQwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2MucGtpLmdvb2cv ci9yNC5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwCgYIKoZIzj0EAwMDaAAwZQIx AOcCq1HW90OVznX+0RGU1cxAQXomvtgM8zItPZCuFQ8jSBJSjz5keROv9aYsAm5V sQIwJonMaAFi54mrfhfoFNZEfuNMSQ6/bIBiNLiyoX46FohQvKeIoJ99cx7sUkFN 7uJW -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#1> <hostCert#2> INFO { 
1DFC1605FBAD358D8BC844F76D15203FAC9CA5C1A79FD4857FFAF2864FBEBF96
}
intermediate_cert_notBefore <#1> <hostCert#2> INFO { 
2023-12-13 09:00
}
intermediate_cert_notAfter <#1> <hostCert#2> OK { 
2029-02-20 14:00
}
intermediate_cert_expiration <#1> <hostCert#2> OK { 
ok > 40 days
}
intermediate_cert_chain <#1> <hostCert#2> INFO { 
WE1 <-- GTS Root R4
}
intermediate_cert <#2> <hostCert#2> INFO { 
-----BEGIN CERTIFICATE----- MIIDejCCAmKgAwIBAgIQf+UwvzMTQ77dghYQST2KGzANBgkqhkiG9w0BAQsFADBX MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEQMA4GA1UE CxMHUm9vdCBDQTEbMBkGA1UEAxMSR2xvYmFsU2lnbiBSb290IENBMB4XDTIzMTEx NTAzNDMyMVoXDTI4MDEyODAwMDA0MlowRzELMAkGA1UEBhMCVVMxIjAgBgNVBAoT GUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBMTEMxFDASBgNVBAMTC0dUUyBSb290IFI0 MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAE83Rzp2iLYK5DuDXFgTB7S0md+8Fhzube Rr1r1WEYNa5A3XP3iZEwWus87oV8okB2O6nGuEfYKueSkWpz6bFyOZ8pn6KY019e WIZlD6GEZQbR3IvJx3PIjGov5cSr0R2Ko4H/MIH8MA4GA1UdDwEB/wQEAwIBhjAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDwYDVR0TAQH/BAUwAwEB/zAd BgNVHQ4EFgQUgEzW63T/STaj1dj8tT7FavCUHYwwHwYDVR0jBBgwFoAUYHtmGkUN l8qJUC99BM00qP/8/UswNgYIKwYBBQUHAQEEKjAoMCYGCCsGAQUFBzAChhpodHRw Oi8vaS5wa2kuZ29vZy9nc3IxLmNydDAtBgNVHR8EJjAkMCKgIKAehhxodHRwOi8v Yy5wa2kuZ29vZy9yL2dzcjEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA0GCSqG SIb3DQEBCwUAA4IBAQAYQrsPBtYDh5bjP2OBDwmkoWhIDDkic574y04tfzHpn+cJ odI2D4SseesQ6bDrarZ7C30ddLibZatoKiws3UL9xnELz4ct92vID24FfVbiI1hY +SW6FoVHkNeWIP0GCbaM4C6uVdF5dTUsMVs/ZbzNnIdCp5Gxmx5ejvEau8otR/Cs kGN+hr/W5GvT1tMBjgWKZ1i4//emhA1JG1BbPzoLJQvyEotc03lXjTaCzv8mEbep 8RqZ7a2CPsgRbuvTPBwcOMBBmuFeU88+FSBX6+7iP0il8b4Z0QFqIwwMHfs/L6K1 vepuoxtGzi4CZ68zJpiq1UvSqTbFJjtbD4seiMHl -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#2> <hostCert#2> INFO { 
76B27B80A58027DC3CF1DA68DAC17010ED93997D0B603E2FADBE85012493B5A7
}
intermediate_cert_notBefore <#2> <hostCert#2> INFO { 
2023-11-15 03:43
}
intermediate_cert_notAfter <#2> <hostCert#2> OK { 
2028-01-28 00:00
}
intermediate_cert_expiration <#2> <hostCert#2> OK { 
ok > 40 days
}
intermediate_cert_chain <#2> <hostCert#2> INFO { 
GTS Root R4 <-- GlobalSign Root CA
}
intermediate_cert_badOCSP <hostCert#2> OK { 
intermediate certificate(s) is/are ok
}
HTTP_status_code INFO { 
200 OK ('/')
}
HTTP_clock_skew INFO { 
+409 seconds from localtime
}
HTTP_headerTime INFO { 
1794603898
}
HTTP_headerAge INFO { 
409 seconds
}
HSTS_time OK { 
365 days (=31536000 seconds) > 15552000 seconds
}
HSTS_subdomains OK { 
includes subdomains
}
HSTS_preload INFO { 
domain is NOT marked for preloading
}
HPKP INFO { 
No support for HTTP Public Key Pinning
}
banner_server INFO { 
cloudflare
}
banner_application INFO { 
x-powered-by: BusinessInfo.cz
}
cookie_count INFO { 
0 at '/'
}
X-Frame-Options OK { 
SAMEORIGIN
}
X-Content-Type-Options OK { 
nosniff
}
Content-Security-Policy OK { 
default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://www.gstatic.com https://code.jquery.com https://kit.fontawesome.com https://www.google.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://analytics.businessinfo.cz https://matomo.businessinfo.cz; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com http://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://ka-p.fontawesome.com; img-src 'self' data: https: blob:; font-src 'self' https://fonts.gstatic.com https://ka-p.fontawesome.com data:; connect-src 'self' blob: https://www.google-analytics.com https://*.google-analytics.com https://www.googletagmanager.com https://www.google.com https://api.mapy.com https://ka-p.fontawesome.com https://mx.businessinfo.cz https://analytics.businessinfo.cz https://matomo.businessinfo.cz https://projekt-bi.geetix.com https://projekt.businessinfo.cz https://projekt-staging.businessinfo.cz https://my.yoast.com https://cdn.jsdelivr.net; frame-src 'self' blob: https://www.googletagmanager.com https://www.google.com https://maps.google.com https://www.youtube.com https://player.vimeo.com https://embed.spotify.com https://embed.podcasts.apple.com https://w.soundcloud.com https://player.captivate.fm https://mx.businessinfo.cz https://wp.freemius.com https://api.freemius.com; manifest-src 'self' https://businessinfo.cloudflareaccess.com; worker-src 'self' blob:; base-uri 'self'; form-action 'self'
}
Permissions-Policy OK { 
accelerometer=*, autoplay=*, encrypted-media=*, fullscreen=*, geolocation=*, gyroscope=*, magnetometer=*, microphone=*, payment=*, sync-xhr=*
}
Referrer-Policy INFO { 
strict-origin-when-cross-origin
}
Cache-Control INFO { 
max-age=14400, must-revalidate
}
Pragma INFO { 
no-cache
}
banner_reverseproxy
zranitelnosti: CWE-200
INFO { 
--
}
heartbleed
zranitelnosti: CVE-2014-0160 CWE-119
OK { 
not vulnerable, no heartbeat extension
}
CCS
zranitelnosti: CVE-2014-0224 CWE-310
OK { 
not vulnerable
}
ticketbleed
zranitelnosti: CVE-2016-9244 CWE-200
OK { 
not vulnerable
}
ROBOT
zranitelnosti: CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168 CWE-203
OK { 
not vulnerable
}
secure_renego
zranitelnosti: CWE-310
WARN { 
OpenSSL handshake didn't succeed
}
secure_client_renego
zranitelnosti: CVE-2011-1473 CWE-310
OK { 
not vulnerable
}
CRIME_TLS
zranitelnosti: CVE-2012-4929 CWE-310
OK { 
not vulnerable
}
BREACH
zranitelnosti: CVE-2013-3587 CWE-310
MEDIUM { 
potentially VULNERABLE, gzip br HTTP compression detected  - only supplied '/' tested
}
POODLE_SSL
zranitelnosti: CVE-2014-3566 CWE-310
OK { 
not vulnerable, no SSLv3
}
fallback_SCSV OK { 
no protocol below TLS 1.2 offered
}
SWEET32
zranitelnosti: CVE-2016-2183 CVE-2016-6329 CWE-327
OK { 
not vulnerable
}
FREAK
zranitelnosti: CVE-2015-0204 CWE-310
OK { 
not vulnerable
}
DROWN
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
OK { 
not vulnerable on this host and port
}
DROWN_hint
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
INFO { 
Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=D687086D2B30261C506B227C3F8A09F699AD8313517B624E81DD27113054FDE1
}
LOGJAM
zranitelnosti: CVE-2015-4000 CWE-310
OK { 
not vulnerable, no DH EXPORT ciphers,
}
LOGJAM-common_primes
zranitelnosti: CVE-2015-4000 CWE-310
OK { 
no DH key with <= TLS 1.2
}
BEAST
zranitelnosti: CVE-2011-3389 CWE-20
OK { 
not vulnerable, no SSL3 or TLS1
}
LUCKY13
zranitelnosti: CVE-2013-0169 CWE-310
LOW { 
potentially vulnerable, uses TLS CBC ciphers
}
winshock
zranitelnosti: CVE-2014-6321 CWE-94
OK { 
not vulnerable
}
RC4
zranitelnosti: CVE-2013-2566 CVE-2015-2808 CWE-310
OK { 
not vulnerable
}
clientsimulation-android_442 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_500 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_60 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_70 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_81 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_90 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-android_X INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-chrome_74_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-chrome_79_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-firefox_66_win81 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-firefox_71_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-ie_6_xp INFO { 
No connection
}
clientsimulation-ie_8_win7 INFO { 
No connection
}
clientsimulation-ie_8_xp INFO { 
No connection
}
clientsimulation-ie_11_win7 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-ie_11_win81 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-ie_11_winphone81 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-ie_11_win10 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-edge_15_win10 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-edge_17_win10 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-opera_66_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-safari_9_ios9 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-safari_9_osx1011 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-safari_10_osx1012 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-safari_121_ios_122 INFO { 
TLSv1.3 TLS_CHACHA20_POLY1305_SHA256
}
clientsimulation-safari_130_osx_10146 INFO { 
TLSv1.3 TLS_CHACHA20_POLY1305_SHA256
}
clientsimulation-apple_ats_9_ios9 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-java_6u45 INFO { 
No connection
}
clientsimulation-java_7u25 INFO { 
No connection
}
clientsimulation-java_8u161 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-java1102 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-java1201 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-openssl_102e INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-openssl_110l INFO { 
TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305
}
clientsimulation-openssl_111d INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-thunderbird_68_3_1 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
rating_spec INFO { 
SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)
}
rating_doc INFO { 
https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide
}
protocol_support_score INFO { 
100
}
protocol_support_score_weighted INFO { 
30
}
key_exchange_score INFO { 
90
}
key_exchange_score_weighted INFO { 
27
}
cipher_strength_score INFO { 
90
}
cipher_strength_score_weighted INFO { 
36
}
final_score INFO { 
93
}
overall_grade OK { 
A+
}
scanTime INFO { 
256
}