Přihlásit se Registrace
Smlouvy Dotace Platy Úřady Zakázky Sponzoři & firmy PastVina 
❤ Podpořte nás Přihlásit se Registrace
Hledat v Hlídači státu
Nápověda jak vyhledávat Snadné hledání
  1. Hlídač Státu
  2. Hlídač Webů
  3. Detailní analýza HTTPs pro Prohlížení databáze certifikátů měřitel

Hlídač Prohlížení databáze certifikátů měřitel Detailní analýza HTTPs pro Prohlížení databáze certifikátů měřitel

Prohlížení databáze certifikátů měřitel
http://typover.cmi.cz

Český metrologický institut Zjištění informace, zda konkrétní druh a typ měřidla je typově schálen pro účely použití ve funkci stanoveného měřidla v ČR.

Zabezpečení komunikace

T
Certifikát expiruje za 80 dní.

Výsledek analýzy HTTPS na typover.cmi.cz ze dne 30.06.2026

Služba je chráněna certifikátem od certifikační autority, kterou hlavní prohlížeče neznají nebo jí nedůvěřují. V českých podmínkách to znamená nejspíše certifikáty vydané našimi vnitrostátními autoritami (ICA, PostSignum a eIdentity), které sice stát zákonem prohlásil za důvěryhodné, ale které nesplňují mezinárodní podmínky nutné proto, aby je za důvěryhodné pokládali i autoři prohlížečů.

Detailní analýza

Detailní report z HTTPs analýzy pomocí nástroje testssl.sh

server typover.cmi.cz/95.173.69.116
pre_128cipher INFO { 
No 128 cipher limit bug
}
SSLv2 OK { 
not offered
}
SSLv3 OK { 
not offered
}
TLS1 LOW { 
offered (deprecated)
}
TLS1_1 LOW { 
offered (deprecated)
}
TLS1_2 OK { 
offered
}
TLS1_3 INFO { 
not offered + downgraded to weaker protocol
}
NPN INFO { 
not offered
}
ALPN INFO { 
not offered
}
cipherlist_NULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_aNULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_EXPORT
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_LOW
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_3DES_IDEA
zranitelnosti: CWE-310
INFO { 
not offered
}
cipherlist_AVERAGE
zranitelnosti: CWE-310
LOW { 
offered
}
cipherlist_GOOD OK { 
offered
}
cipherlist_STRONG MEDIUM { 
not offered
}
cipher_order OK { 
server
}
protocol_negotiated OK { 
Default protocol TLS1.2
}
cipher_negotiated LOW { 
ECDHE-RSA-AES256-SHA384, 521 bit ECDH (P-521) (cbc)
}
cipher-tls1_xc014 LOW { 
TLSv1   xc014   ECDHE-RSA-AES256-SHA              ECDH 521   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_xc013 LOW { 
TLSv1   xc013   ECDHE-RSA-AES128-SHA              ECDH 521   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_x35 LOW { 
TLSv1   x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_x2f LOW { 
TLSv1   x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA
}
cipherorder_TLSv1 INFO { 
ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA AES256-SHA AES128-SHA
}
cipher-tls1_1_xc014 LOW { 
TLSv1.1   xc014   ECDHE-RSA-AES256-SHA              ECDH 521   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_1_xc013 LOW { 
TLSv1.1   xc013   ECDHE-RSA-AES128-SHA              ECDH 521   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_1_x35 LOW { 
TLSv1.1   x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_1_x2f LOW { 
TLSv1.1   x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA
}
cipherorder_TLSv1_1 INFO { 
ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA AES256-SHA AES128-SHA
}
cipher-tls1_2_xc028 LOW { 
TLSv1.2   xc028   ECDHE-RSA-AES256-SHA384           ECDH 521   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
}
cipher-tls1_2_xc027 LOW { 
TLSv1.2   xc027   ECDHE-RSA-AES128-SHA256           ECDH 521   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
}
cipher-tls1_2_xc014 LOW { 
TLSv1.2   xc014   ECDHE-RSA-AES256-SHA              ECDH 521   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_2_xc013 LOW { 
TLSv1.2   xc013   ECDHE-RSA-AES128-SHA              ECDH 521   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_2_x9d OK { 
TLSv1.2   x9d     AES256-GCM-SHA384                 RSA        AESGCM      256      TLS_RSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_x9c OK { 
TLSv1.2   x9c     AES128-GCM-SHA256                 RSA        AESGCM      128      TLS_RSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_x3d LOW { 
TLSv1.2   x3d     AES256-SHA256                     RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA256
}
cipher-tls1_2_x3c LOW { 
TLSv1.2   x3c     AES128-SHA256                     RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA256
}
cipher-tls1_2_x35 LOW { 
TLSv1.2   x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_2_x2f LOW { 
TLSv1.2   x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA
}
cipherorder_TLSv1_2 INFO { 
ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA AES256-GCM-SHA384 AES128-GCM-SHA256 AES256-SHA256 AES128-SHA256 AES256-SHA AES128-SHA
}
FS OK { 
offered
}
FS_ciphers INFO { 
ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA
}
FS_ECDHE_curves OK { 
prime256v1 secp384r1 secp521r1
}
TLS_extensions INFO { 
'status request/#5' 'renegotiation info/#65281' 'extended master secret/#23'
}
TLS_session_ticket INFO { 
no -- no lifetime advertised
}
SSL_sessionID_support INFO { 
yes
}
sessionresumption_ticket INFO { 
not supported
}
sessionresumption_ID INFO { 
not supported
}
TLS_timestamp INFO { 
off by -1 seconds from your localtime
}
cert_compression INFO { 
N/A
}
clientAuth INFO { 
none
}
cert_numbers INFO { 
1
}
cert_signatureAlgorithm OK { 
SHA256 with RSA
}
cert_keySize INFO { 
RSA 2048 bits (exponent is 65537)
}
cert_keyUsage INFO { 
Digital Signature, Key Encipherment
}
cert_extKeyUsage INFO { 
TLS Web Server Authentication, TLS Web Client Authentication
}
cert_serialNumber INFO { 
F5E62F75A2F0A147F0CC7A1C334CE8E5
}
cert_serialNumberLen INFO { 
16
}
cert_fingerprintSHA1 INFO { 
DD2F3FCFAD5E5EEF8DB7B3D3632ADB66F119C1C7
}
cert_fingerprintSHA256 INFO { 
3324D8F29ECF6B6699DE3A3BE40E6A0AAF97290E987971DE186A0495F5B25ED9
}
cert INFO { 
-----BEGIN CERTIFICATE----- MIIGIDCCBIigAwIBAgIRAPXmL3Wi8KFH8Mx6HDNM6OUwDQYJKoZIhvcNAQELBQAw RjELMAkGA1UEBhMCQ1oxFjAUBgNVBAoTDUFscGlybyBzLnIuby4xHzAdBgNVBAMT FkFscGlybyBSU0EgRFYgU1NMIENBIDIwHhcNMjUwODE5MDAwMDAwWhcNMjYwOTE5 MjM1OTU5WjAVMRMwEQYDVQQDEwpjbWkuZ292LmN6MIIBIjANBgkqhkiG9w0BAQEF AAOCAQ8AMIIBCgKCAQEAsKWC8BRBKeIjdsDJLrkeblwXUMbOolPAX3fKSmXEZvN2 +nXhkxqCehA8tnlaEAREV65wvX5yF9wZrpPL2ikM81u8kJIS2FPv7bBCY87FsVJD b6NVLF5rK3Wl6lMtlRVI6iobZR6XcqpvMZunc1+PPVLXprmKwanUNoIqfSgGlYt+ owxw2+qz+vryPU41KYq9dFYoj7DK11yWUHa2BS3rGktGlZ3ttH25/HTHdaFAHtoZ wufd1ypKKgpXycolf/2iWMWN/md1G0lFsK9AVx4flI4DnXDcd2T2z295n1ZLBMRj RIJ/X7ZHLcbW9e/0+0FcXcBrEr4K9j+gtA36T9FmrwIDAQABo4ICuDCCArQwHwYD VR0jBBgwFoAUdQjU+MiMm7WKUuOmjSLeykeLtn0wHQYDVR0OBBYEFCBFZ0BFWmzd C5ss0f+1tGyJP6xBMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjATBgNVHSAEDDAKMAgGBmeBDAECATBt BggrBgEFBQcBAQRhMF8wOAYIKwYBBQUHMAKGLGh0dHA6Ly9jcnQuc2VjdGlnby5j b20vQWxwaXJvUlNBRFZTU0xDQTIuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2Nz cC5zZWN0aWdvLmNvbTCCAYAGCisGAQQB1nkCBAIEggFwBIIBbAFqAHYA2AlVO5RP ev/IFhlvlE+Fq7D4/F6HVSYPFdEucrtFSxQAAAGYwadTAwAABAMARzBFAiEAuWMm SGoqNjw/Uc9WI50ybD3ON1BittuXVkX+/K/mGnICIBg4r0JKtrJMlYAj8Ei8LdxS wrnNZS9nDWC7eVwYUt8fAHcArKswcGzr7IQx9BPS9JFfER5CJEOx8qaMTzwrO6ce AsMAAAGYwadS9QAABAMASDBGAiEA7cLvqiSeHUdeYxAyaTNuvx23mMIzockB5LZ7 Ps4613sCIQD2hE9DrI1CKZzNWBkczffDSudo//eZ3aAYxhEm8YvuyAB3ANdtfRDR p/V3wsfpX9cAv/mCyTNaZeHQswFzF8DIxWl3AAABmMGnUpYAAAQDAEgwRgIhAIXc uZBsGsusdAdnB6nY2QjbZ2Vwqtr6nCHS5ODZxh9KAiEA+OZMPejj09oFPGaDicc8 oZiv9gA9N8lnMrTaI82cIdswLQYDVR0RBCYwJIIKY21pLmdvdi5jeoIIKi5jbWku Y3qCDCouY21pLmdvdi5jejANBgkqhkiG9w0BAQsFAAOCAYEAb3Kku2jfeNjpcAOF rDKzgB8AuyEIDI3zBsI6WD10ntjMKPFkmYjBCEcYTyxgONgAqNSpNf+Cjjtn0aiU o+40Ln4Sr5gUKaNGELgAk19zHbZU/rx3Q4qoE64lU5Dm24IvB1+Y9Zl58/30l0tJ lsmO+P0Pm/XdAFkq9B0NQDv1mNpI9P9CBzs6paXpejOPb0n34fFf7T3INg6gcfqG AV/zTOvIElJktSIHBO+GVTGBH+89gp1Pmeb7prQMdd9oauVcNpV4rlq/OOUEhDPe aCTdiiIfuA/O/Do74nvcZdWCyuXU9lOvsIP3J+f7krS8WJF7J7UHNoWxVvhPLFLo Enkgi871kYeD28zVpt+UL9wSdYWOs/YTsEHLdxnL2nHGT8ysqbuVWQupBwG38RkC jD9V/YA0HM6KXGyJ72oZVPTvrPojNLl7VXJcdXqBcpMsUXF79rs9Q3w4HGNtzPW9 Z1O3QcNUZsi1NCyxwWtZGepM2Ydf6Ovej23R4943L75SF5Ed -----END CERTIFICATE-----
}
cert_commonName OK { 
cmi.gov.cz
}
cert_commonName_wo_SNI INFO { 
cmi.gov.cz
}
cert_subjectAltName INFO { 
cmi.gov.cz *.cmi.cz *.cmi.gov.cz
}
cert_trust OK { 
Ok via SAN wildcard (same w/o SNI)
}
cert_chain_of_trust CRITICAL { 
failed (chain incomplete).
}
cert_certificatePolicies_EV INFO { 
no
}
cert_expirationStatus OK { 
81 >= 60 days
}
cert_notBefore INFO { 
2025-08-19 00:00
}
cert_notAfter OK { 
2026-09-19 23:59
}
cert_extlifeSpan OK { 
certificate has no extended life time according to browser forum
}
cert_eTLS INFO { 
not present
}
cert_crlDistributionPoints INFO { 
--
}
cert_ocspURL INFO { 
http://ocsp.sectigo.com
}
OCSP_stapling OK { 
offered
}
cert_mustStapleExtension INFO { 
--
}
DNS_CAArecord LOW { 
--
}
certificate_transparency OK { 
yes (certificate extension)
}
certs_countServer INFO { 
2
}
certs_list_ordering_problem INFO { 
no
}
cert_caIssuers INFO { 
Alpiro RSA DV SSL CA 2 (Alpiro s.r.o. from CZ)
}
intermediate_cert <#1> INFO { 
-----BEGIN CERTIFICATE----- MIIGITCCBAmgAwIBAgIRAKZyV9GJog2rQ/Aa84oDN+AwDQYJKoZIhvcNAQEMBQAw XzELMAkGA1UEBhMCR0IxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE2MDQGA1UE AxMtU2VjdGlnbyBQdWJsaWMgU2VydmVyIEF1dGhlbnRpY2F0aW9uIFJvb3QgUjQ2 MB4XDTI1MDMyNzAwMDAwMFoXDTM1MDMyNjIzNTk1OVowRjELMAkGA1UEBhMCQ1ox FjAUBgNVBAoTDUFscGlybyBzLnIuby4xHzAdBgNVBAMTFkFscGlybyBSU0EgRFYg U1NMIENBIDIwggGiMA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQDUx47MPW7Y BVt2znX2Y8FbnYTLLajF9b4WYVcBK3IojDSeNONXkVvjMIi4koo570V4DBlrhugp XKB6YFj4X9zJ25vXNOG5KckxIwXEHAQCgxm2yE04abViDCIMIrQvJO04dCgfrqwE kdyGxyOT0Mt2YHUGeBUlsUg3Pnp8fuVc9bCk6CsPkQ/WdaRWnHP5uOG7VQBXpa58 ZIQYAmJTh4AwLGGRT3mnMlvXDICDJP6SiHISGzYEmq2Z/WdQuKP3G9z4tHOKcjo6 AGNCRs+pDaFyqLHZjc9w/ksrypUh6XYA4xGsmReRFYOppVVdj77O2w9b1tAucpe6 p1GFXAYcHwtEkEznV+skxFG3VCn96gK0AMiSfvF2kOSok8g+0n4eFOnyz4U7hM3n JLIh3dxJeax3IAZb/FLJHxMu+0Bb/6LIFv7kRmM3YMIWY9fQAZ3qwVBA1OQjmDNs ZqQ4Bcjuf7b6462ingkX2LscilNBPmQl3iRVflzvc+uPYblwd249uPkCAwEAAaOC AW8wggFrMB8GA1UdIwQYMBaAFFZzWGSV+ZIasBIqBGJ5oUAViCFJMB0GA1UdDgQW BBR1CNT4yIybtYpS46aNIt7KR4u2fTAOBgNVHQ8BAf8EBAMCAYYwEgYDVR0TAQH/ BAgwBgEB/wIBADATBgNVHSUEDDAKBggrBgEFBQcDATATBgNVHSAEDDAKMAgGBmeB DAECATBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vY3JsLnNlY3RpZ28uY29tL1Nl Y3RpZ29QdWJsaWNTZXJ2ZXJBdXRoZW50aWNhdGlvblJvb3RSNDYuY3JsMIGEBggr BgEFBQcBAQR4MHYwTwYIKwYBBQUHMAKGQ2h0dHA6Ly9jcnQuc2VjdGlnby5jb20v U2VjdGlnb1B1YmxpY1NlcnZlckF1dGhlbnRpY2F0aW9uUm9vdFI0Ni5wN2MwIwYI KwYBBQUHMAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMA0GCSqGSIb3DQEBDAUA A4ICAQBQPX41avzHSSAVaFJPCr6GLxgeqj5XSl5GflqEZYnUMi11ZFb5R0DBEHIE ec/Og7pgUi3ehKt1OZ4hbjhrkhdNqYY260Go4Jf5XxmVLSHz1k1A6q+biCLo2eh1 w8/TeTLus4opPh7VQHzYAYvHopiaof/QPoJlZFGvquzlnSA94Ffukse1fV+c3Xhz niz3wcf/bkTETz3C3cq2/0GJi0SIIoYMVbL0bLrZvO4REvYKk9dfozMBijIo1NDd sYQR79DplE3jzycMcGoVsJa2FFRF9N9qCkmFQ4x5BjRYR0NcJXqupV/aFU80ud39 H0ZZOHNAQryjw+3YTK2gh6YT1iklUbtX2hNL4PwSnu0LPipyzK9smCY9P6BlSOd+ gj6pUW/7d7I6hBnwpyk+/iZNFH4ViOMrmOJGiY5lJbH6TOP9e/FbiK51NTK4NPoE RvxyaKDpbIfZgi7AZGmAG3vQW2h+kugixbhK7z7qTkKOG9JTuHV7Px/xqIB6Wgse ddqZCVdZQamPCMtwdtZe7zG9Y7F8VBH5/78hsI7yqn3MRH1JPhlOrth17fyxR+dK iLg2lctsv/v2MpDcR/rhASt3TUbTDjT/VnS9/+xPoxl352FHBnME4D7puZWCt+d1 OING0BUMXPhKecUb3wu27AtmJ06Cfuinj3ifnqfqP4xh5ZFEWQ== -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#1> INFO { 
CDFBB47882818B694AAD818CD8040DD11050197F51DDBF3C2EB09812E4A25DF5
}
intermediate_cert_notBefore <#1> INFO { 
2025-03-27 00:00
}
intermediate_cert_notAfter <#1> OK { 
2035-03-26 23:59
}
intermediate_cert_expiration <#1> OK { 
ok > 40 days
}
intermediate_cert_chain <#1> INFO { 
Alpiro RSA DV SSL CA 2 <-- Sectigo Public Server Authentication Root R46
}
intermediate_cert_badOCSP OK { 
intermediate certificate(s) is/are ok
}
HTTP_status_code INFO { 
200 Ok  ('/')
}
HTTP_clock_skew INFO { 
0 seconds from localtime
}
HTTP_headerTime INFO { 
1782850438
}
HSTS LOW { 
not offered
}
HPKP INFO { 
No support for HTTP Public Key Pinning
}
banner_server INFO { 
Microsoft-IIS/7.5
}
banner_application INFO { 
X-Powered-By: ASP.NET
}
cookie_count INFO { 
0 at '/'
}
security_headers MEDIUM { 
--
}
banner_reverseproxy
zranitelnosti: CWE-200
INFO { 
--
}
heartbleed
zranitelnosti: CVE-2014-0160 CWE-119
OK { 
not vulnerable, no heartbeat extension
}
CCS
zranitelnosti: CVE-2014-0224 CWE-310
OK { 
not vulnerable
}
ticketbleed
zranitelnosti: CVE-2016-9244 CWE-200
OK { 
no session ticket extension
}
ROBOT
zranitelnosti: CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168 CWE-203
OK { 
not vulnerable
}
secure_renego
zranitelnosti: CWE-310
OK { 
supported
}
secure_client_renego
zranitelnosti: CVE-2011-1473 CWE-310
OK { 
not vulnerable
}
CRIME_TLS
zranitelnosti: CVE-2012-4929 CWE-310
OK { 
not vulnerable
}
BREACH
zranitelnosti: CVE-2013-3587 CWE-310
OK { 
not vulnerable, no gzip/deflate/compress/br HTTP compression  - only supplied '/' tested
}
POODLE_SSL
zranitelnosti: CVE-2014-3566 CWE-310
OK { 
not vulnerable, no SSLv3
}
fallback_SCSV WARN { 
NOT supported. Pls rerun with POODLE SSL check
}
SWEET32
zranitelnosti: CVE-2016-2183 CVE-2016-6329 CWE-327
OK { 
not vulnerable
}
FREAK
zranitelnosti: CVE-2015-0204 CWE-310
OK { 
not vulnerable
}
DROWN
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
OK { 
not vulnerable on this host and port
}
DROWN_hint
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
INFO { 
Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=3324D8F29ECF6B6699DE3A3BE40E6A0AAF97290E987971DE186A0495F5B25ED9
}
LOGJAM
zranitelnosti: CVE-2015-4000 CWE-310
OK { 
not vulnerable, no DH EXPORT ciphers,
}
LOGJAM-common_primes
zranitelnosti: CVE-2015-4000 CWE-310
OK { 
no DH key with <= TLS 1.2
}
BEAST_CBC_TLS1
zranitelnosti: CVE-2011-3389 CWE-20
MEDIUM { 
ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA AES256-SHA AES128-SHA
}
BEAST
zranitelnosti: CVE-2011-3389 CWE-20
LOW { 
VULNERABLE -- but also supports higher protocols  TLSv1.1 TLSv1.2 (likely mitigated)
}
LUCKY13
zranitelnosti: CVE-2013-0169 CWE-310
LOW { 
potentially vulnerable, uses TLS CBC ciphers
}
winshock
zranitelnosti: CVE-2014-6321 CWE-94
OK { 
not vulnerable
}
RC4
zranitelnosti: CVE-2013-2566 CVE-2015-2808 CWE-310
OK { 
not vulnerable
}
clientsimulation-android_442 INFO { 
TLSv1.2 ECDHE-RSA-AES128-SHA256
}
clientsimulation-android_500 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA
}
clientsimulation-android_60 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA
}
clientsimulation-android_70 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA
}
clientsimulation-android_81 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA
}
clientsimulation-android_90 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA
}
clientsimulation-android_X INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA
}
clientsimulation-chrome_74_win10 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA
}
clientsimulation-chrome_79_win10 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA
}
clientsimulation-firefox_66_win81 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA
}
clientsimulation-firefox_71_win10 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA
}
clientsimulation-ie_6_xp INFO { 
No connection
}
clientsimulation-ie_8_win7 INFO { 
TLSv1.0 ECDHE-RSA-AES256-SHA
}
clientsimulation-ie_8_xp INFO { 
No connection
}
clientsimulation-ie_11_win7 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA384
}
clientsimulation-ie_11_win81 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA384
}
clientsimulation-ie_11_winphone81 INFO { 
TLSv1.2 ECDHE-RSA-AES128-SHA256
}
clientsimulation-ie_11_win10 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA384
}
clientsimulation-edge_15_win10 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA384
}
clientsimulation-edge_17_win10 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA384
}
clientsimulation-opera_66_win10 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA
}
clientsimulation-safari_9_ios9 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA384
}
clientsimulation-safari_9_osx1011 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA384
}
clientsimulation-safari_10_osx1012 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA384
}
clientsimulation-safari_121_ios_122 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA384
}
clientsimulation-safari_130_osx_10146 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA384
}
clientsimulation-apple_ats_9_ios9 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA384
}
clientsimulation-java_6u45 INFO { 
TLSv1.0 AES128-SHA
}
clientsimulation-java_7u25 INFO { 
TLSv1.0 ECDHE-RSA-AES128-SHA
}
clientsimulation-java_8u161 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA384
}
clientsimulation-java1102 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA384
}
clientsimulation-java1201 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA384
}
clientsimulation-openssl_102e INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA384
}
clientsimulation-openssl_110l INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA384
}
clientsimulation-openssl_111d INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA384
}
clientsimulation-thunderbird_68_3_1 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA
}
rating_spec INFO { 
SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)
}
rating_doc INFO { 
https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide
}
protocol_support_score INFO { 
0
}
protocol_support_score_weighted INFO { 
0
}
key_exchange_score INFO { 
0
}
key_exchange_score_weighted INFO { 
0
}
cipher_strength_score INFO { 
0
}
cipher_strength_score_weighted INFO { 
0
}
final_score INFO { 
0
}
overall_grade CRITICAL { 
T
}
grade_cap_reason_1 INFO { 
Grade capped to T. Issues with the chain of trust (chain incomplete)
}
grade_cap_reason_2 INFO { 
Grade capped to B. TLS 1.1 offered
}
grade_cap_reason_3 INFO { 
Grade capped to B. TLS 1.0 offered
}
grade_cap_reason_4 INFO { 
Grade capped to A. HSTS is not offered
}
grade_cap_reason_5 INFO { 
Grade capped to A. Does not support TLS_FALLBACK_SCSV
}
scanTime INFO { 
197
}