Hlídač ArcGIS Moravskoslezského kraje Detailní analýza HTTPs pro ArcGIS Moravskoslezského kraje

ArcGIS Moravskoslezského kraje
https://gis.msk.cz/

Moravskoslezský kraj


Zabezpečení komunikace

A+
Certifikát expiruje za 87 dní.

Výsledek analýzy HTTPS na gis.msk.cz ze dne 25.04.2024

Všechno je v nejlepším pořádku a web se drží doporučených postupů.


Detailní analýza

Detailní report z HTTPs analýzy pomocí nástroje testssl.sh

server gis.msk.cz/45.93.152.86
pre_128cipher INFO {
No 128 cipher limit bug
}
SSLv2 OK {
not offered
}
SSLv3 OK {
not offered
}
TLS1 INFO {
not offered
}
TLS1_1 INFO {
not offered
}
TLS1_2 OK {
offered
}
TLS1_3 INFO {
not offered + downgraded to weaker protocol
}
NPN INFO {
not offered
}
ALPN INFO {
http/1.1
}
cipherlist_NULL
zranitelnosti: CWE-327
OK {
not offered
}
cipherlist_aNULL
zranitelnosti: CWE-327
OK {
not offered
}
cipherlist_EXPORT
zranitelnosti: CWE-327
OK {
not offered
}
cipherlist_LOW
zranitelnosti: CWE-327
OK {
not offered
}
cipherlist_3DES_IDEA
zranitelnosti: CWE-310
INFO {
not offered
}
cipherlist_AVERAGE
zranitelnosti: CWE-310
INFO {
not offered
}
cipherlist_GOOD INFO {
not offered
}
cipherlist_STRONG OK {
offered
}
cipher_order OK {
server
}
protocol_negotiated OK {
Default protocol TLS1.2
}
cipher_negotiated OK {
ECDHE-RSA-AES128-GCM-SHA256, 521 bit ECDH (P-521)
}
cipher-tls1_2_xcca8 OK {
TLSv1.2   xcca8   ECDHE-RSA-CHACHA20-POLY1305       ECDH 521   ChaCha20    256      TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
}
cipher-tls1_2_xc02f OK {
TLSv1.2   xc02f   ECDHE-RSA-AES128-GCM-SHA256       ECDH 521   AESGCM      128      TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_xc030 OK {
TLSv1.2   xc030   ECDHE-RSA-AES256-GCM-SHA384       ECDH 521   AESGCM      256      TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_x9e OK {
TLSv1.2   x9e     DHE-RSA-AES128-GCM-SHA256         DH 2048    AESGCM      128      TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_x9f OK {
TLSv1.2   x9f     DHE-RSA-AES256-GCM-SHA384         DH 2048    AESGCM      256      TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
}
cipherorder_TLSv1_2 INFO {
ECDHE-RSA-CHACHA20-POLY1305 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384
}
FS OK {
offered
}
FS_ciphers INFO {
ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-CHACHA20-POLY1305 ECDHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-GCM-SHA256
}
FS_ECDHE_curves INFO {
secp224r1 prime256v1 secp384r1 secp521r1
}
DH_groups OK {
Unknown DH group (2048 bits)
}
TLS_extensions INFO {
'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'application layer protocol negotiation/#16'
}
TLS_session_ticket INFO {
no -- no lifetime advertised
}
SSL_sessionID_support INFO {
yes
}
sessionresumption_ticket INFO {
not supported
}
sessionresumption_ID INFO {
supported
}
TLS_timestamp INFO {
random
}
cert_compression INFO {
N/A
}
clientAuth INFO {
none
}
cert_numbers INFO {
1
}
cert_signatureAlgorithm OK {
SHA256 with RSA
}
cert_keySize INFO {
RSA 2048 bits (exponent is 65537)
}
cert_keyUsage INFO {
Digital Signature, Key Encipherment
}
cert_extKeyUsage INFO {
TLS Web Server Authentication, TLS Web Client Authentication
}
cert_serialNumber INFO {
063D3645354F3B6E58F0C1CEB4347167
}
cert_serialNumberLen INFO {
16
}
cert_fingerprintSHA1 INFO {
F579E1335313F1E1E98BA2C0686A9EE02308D945
}
cert_fingerprintSHA256 INFO {
0CC0CEF410690924C9C12EF491F711CF1F88A5AB3584A6EA42AAD8BBE06CCD97
}
cert INFO {
-----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIQBj02RTVPO25Y8MHOtDRxZzANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx MB4XDTIzMDcwMzAwMDAwMFoXDTI0MDcyMjIzNTk1OVowUjELMAkGA1UEBhMCQ1ox EDAOBgNVBAcTB09zdHJhdmExHjAcBgNVBAoMFU1vcmF2c2tvc2xlenNrw70ga3Jh ajERMA8GA1UEAwwIKi5tc2suY3owggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDDyIKOigBXwyRMWa1VHQTxSZbeUHnnMMuS7wxYuGGjnInZ5ndAmJHIQNqH firyFj93goSkt9F4nn8mdSc3elLgHl+XPnaayqbslrM2OELziQjXfVREngClX+Bq L6iLqu/9tZ7BVYhJ0lfF/Yf5M0CJQiCOBC2eXpayRVg0rrs3exYtB0N2oO+q3i2P 0QzXWKaLPpyAY+Qoc/Xk31kMxfOmqm0uHnlyQ69bLY0z+TtKhCWBU+KGUnOLUhrG kt1Y7QAMew1LhxGQ1uhOnf++a/N4/724Gklt8UUKY2/Q0/vIKxsoO4ze8FNqR9JJ ByqYixA5gG6mUeVdRLxYdrYJpVnrAgMBAAGjggMVMIIDETAfBgNVHSMEGDAWgBSU T9Rdi+Sk4qaA/v3Y+QDvo74CVzAdBgNVHQ4EFgQUTHQuzbF8TVxKteopCvq2ybWw VM4wGwYDVR0RBBQwEoIIKi5tc2suY3qCBm1zay5jejAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD8GA1UdHwQ4MDYwNKAyoDCG Lmh0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0VExTUlNBQ0FHMS5jcmww PgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5k aWdpY2VydC5jb20vQ1BTMHYGCCsGAQUFBwEBBGowaDAmBggrBgEFBQcwAYYaaHR0 cDovL3N0YXR1cy5nZW90cnVzdC5jb20wPgYIKwYBBQUHMAKGMmh0dHA6Ly9jYWNl cnRzLmdlb3RydXN0LmNvbS9HZW9UcnVzdFRMU1JTQUNBRzEuY3J0MAkGA1UdEwQC MAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AO7N0GTV2xrOxVy3nbTNE6Iy h0Z8vOzew1FIWUZxH7WbAAABiRwAnooAAAQDAEcwRQIgNKuuRzm33nqo65BG4H1b +a1RLMt2TzlQZXs+70Ljg7ACIQCkVlKlQOi0hAvbkic3ZYVcDEXxtqM2Tb/NgGt2 pOnNIwB1ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABiRwAnoUA AAQDAEYwRAIgYeAc2KtvLtrOY7ToZtCLcXe2hLNg7jbEgPSH97ejqRoCIB92IuiU fRQmng2OHnagfhNKLqKUjac1YMdtUd+lvI/NAHYAdv+IPwq2+5VRwmHM9Ye6NLSk zbsp3GhCCp/mZ0xaOnQAAAGJHACengAABAMARzBFAiEAp/bi18/WYK6iqNJMuoR9 sxQhHpoTpGZH4SIFKMMDlAECIEaF8r+fGekohiTbjLMb/4Hy24SbBtl9qv7aG+o0 lgHmMA0GCSqGSIb3DQEBCwUAA4IBAQCk7df1PcZkOAjv22bcwu129hPeN1eaUBBr jzPlN2h1PsA0tJuRhd9wUuuLUB880h2gVwXzyW/HrZwxfZPoStr4uio+KxB/SKDV c6CBrWK5zmo5p4/DLh8ozQmo9V23JoX28yEFqXcVLJzBudmFDRlqE/Rz7rmXW8CQ 4jeiNgIJCotfyIR8vtxpNlsShcnA7M9CzleGOVchKZPdgF/I+xeCatQ5gymimYlw 72yk7D50dCc7x6bRtf56G7jPQyfcMiYhvcHVd0uN2iQ5snTAHHjGQnU5fRY1S5ns BMJ46zL1RhKr2O/egl10KomkrOlpW/vZCrC6o7LvS4CGJ4owz44/ -----END CERTIFICATE-----
}
cert_commonName OK {
*.msk.cz
}
cert_commonName_wo_SNI INFO {
request w/o SNI didn't succeed
}
cert_subjectAltName INFO {
*.msk.cz msk.cz
}
cert_trust OK {
Ok via SAN wildcard and CN wildcard (SNI mandatory)
}
cert_chain_of_trust OK {
passed.
}
cert_certificatePolicies_EV INFO {
no
}
cert_expirationStatus OK {
88 >= 60 days
}
cert_notBefore INFO {
2023-07-03 00:00
}
cert_notAfter OK {
2024-07-22 23:59
}
cert_extlifeSpan OK {
certificate has no extended life time according to browser forum
}
cert_eTLS INFO {
not present
}
cert_crlDistributionPoints INFO {
http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl
}
cert_ocspURL INFO {
http://status.geotrust.com
}
OCSP_stapling LOW {
not offered
}
cert_mustStapleExtension INFO {
--
}
DNS_CAArecord LOW {
--
}
certificate_transparency OK {
yes (certificate extension)
}
certs_countServer INFO {
3
}
certs_list_ordering_problem INFO {
no
}
cert_caIssuers INFO {
GeoTrust TLS RSA CA G1 (DigiCert Inc from US)
}
intermediate_cert <#1> INFO {
-----BEGIN CERTIFICATE----- MIIEjTCCA3WgAwIBAgIQDQd4KhM/xvmlcpbhMf/ReTANBgkqhkiG9w0BAQsFADBh MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH MjAeFw0xNzExMDIxMjIzMzdaFw0yNzExMDIxMjIzMzdaMGAxCzAJBgNVBAYTAlVT MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j b20xHzAdBgNVBAMTFkdlb1RydXN0IFRMUyBSU0EgQ0EgRzEwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQC+F+jsvikKy/65LWEx/TMkCDIuWegh1Ngwvm4Q yISgP7oU5d79eoySG3vOhC3w/3jEMuipoH1fBtp7m0tTpsYbAhch4XA7rfuD6whU gajeErLVxoiWMPkC/DnUvbgi74BJmdBiuGHQSd7LwsuXpTEGG9fYXcbTVN5SATYq DfbexbYxTMwVJWoVb6lrBEgM3gBBqiiAiy800xu1Nq07JdCIQkBsNpFtZbIZhsDS fzlGWP4wEmBQ3O67c+ZXkFr2DcrXBEtHam80Gp2SNhou2U5U7UesDL/xgLK6/0d7 6TnEVMSUVJkZ8VeZr+IUIlvoLrtjLbqugb0T3OYXW+CQU0kBAgMBAAGjggFAMIIB PDAdBgNVHQ4EFgQUlE/UXYvkpOKmgP792PkA76O+AlcwHwYDVR0jBBgwFoAUTiJU IBiV5uNu5g/6+rkS7QYXjzkwDgYDVR0PAQH/BAQDAgGGMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAGAQH/AgEAMDQGCCsGAQUFBwEB BCgwJjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEIGA1Ud HwQ7MDkwN6A1oDOGMWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEds b2JhbFJvb3RHMi5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEW HGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDQYJKoZIhvcNAQELBQADggEB AIIcBDqC6cWpyGUSXAjjAcYwsK4iiGF7KweG97i1RJz1kwZhRoo6orU1JtBYnjzB c4+/sXmnHJk3mlPyL1xuIAt9sMeC7+vreRIF5wFBC0MCN5sbHwhNN1JzKbifNeP5 ozpZdQFmkCo+neBiKR6HqIA+LMTMCMMuv2khGGuPHmtDze4GmEGZtYLyF8EQpa5Y jPuV6k2Cr/N3XxFpT3hRpt/3usU/Zb9wfKPtWpoznZ4/44c1p9rzFcZYrWkj3A+7 TNBJE0GmP2fhXhP1D/XVfIW/h0yCJGEiV9Glm/uGOa3DXHlmbAcxSyCRraG+ZBkA 7h4SeM6Y8l/7MBRpPCz6l8Y= -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#1> INFO {
C06E307F7CFC1D32FA72A4C033C87B90019AF216F0775D64978A2ECA6C8A230E
}
intermediate_cert_notBefore <#1> INFO {
2017-11-02 12:23
}
intermediate_cert_notAfter <#1> OK {
2027-11-02 12:23
}
intermediate_cert_expiration <#1> OK {
ok > 40 days
}
intermediate_cert_chain <#1> INFO {
GeoTrust TLS RSA CA G1 <-- DigiCert Global Root G2
}
intermediate_cert <#2> INFO {
-----BEGIN CERTIFICATE----- MIIDjjCCAnagAwIBAgIQAzrx5qcRqaC7KGSxHQn65TANBgkqhkiG9w0BAQsFADBh MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH MjAeFw0xMzA4MDExMjAwMDBaFw0zODAxMTUxMjAwMDBaMGExCzAJBgNVBAYTAlVT MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzfNNNx7a8myaJCtSnX/RrohCgiN9RlUyfuI 2/Ou8jqJkTx65qsGGmvPrC3oXgkkRLpimn7Wo6h+4FR1IAWsULecYxpsMNzaHxmx 1x7e/dfgy5SDN67sH0NO3Xss0r0upS/kqbitOtSZpLYl6ZtrAGCSYP9PIUkY92eQ q2EGnI/yuum06ZIya7XzV+hdG82MHauVBJVJ8zUtluNJbd134/tJS7SsVQepj5Wz tCO7TG1F8PapspUwtP1MVYwnSlcUfIKdzXOS0xZKBgyMUNGPHgm+F6HmIcr9g+UQ vIOlCsRnKPZzFBQ9RnbDhxSJITRNrw9FDKZJobq7nMWxM4MphQIDAQABo0IwQDAP BgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjAdBgNVHQ4EFgQUTiJUIBiV 5uNu5g/6+rkS7QYXjzkwDQYJKoZIhvcNAQELBQADggEBAGBnKJRvDkhj6zHd6mcY 1Yl9PMWLSn/pvtsrF9+wX3N3KjITOYFnQoQj8kVnNeyIv/iPsGEMNKSuIEyExtv4 NeF22d+mQrvHRAiGfzZ0JFrabA0UWTW98kndth/Jsw1HKj2ZL7tcu7XUIOGZX1NG Fdtom/DzMNU+MeKNhJ7jitralj41E6Vf8PlwUHBHQRFXGU7Aj64GxJUTFy8bJZ91 8rGOmaFvE7FBcf6IKshPECBV1/MUReXgRPTqh5Uykw7+U0b6LJ3/iyK5S9kJRaTe pLiaWN0bfVKfjllDiIGknibVb63dDcY3fe0Dkhvld1927jyNxF1WW6LZZm6zNTfl MrY= -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#2> INFO {
CB3CCBB76031E5E0138F8DD39A23F9DE47FFC35E43C1144CEA27D46A5AB1CB5F
}
intermediate_cert_notBefore <#2> INFO {
2013-08-01 12:00
}
intermediate_cert_notAfter <#2> OK {
2038-01-15 12:00
}
intermediate_cert_expiration <#2> OK {
ok > 40 days
}
intermediate_cert_chain <#2> INFO {
DigiCert Global Root G2 <-- DigiCert Global Root G2
}
intermediate_cert_badOCSP OK {
intermediate certificate(s) is/are ok
}
HTTP_status_code INFO {
302 Found ('/')
}
HTTP_clock_skew INFO {
0 seconds from localtime
}
HTTP_headerTime INFO {
1714076042
}
HSTS_time OK {
1825 days (=157680000 seconds) > 15552000 seconds
}
HSTS_subdomains OK {
includes subdomains
}
HSTS_preload OK {
domain IS marked for preloading
}
HPKP INFO {
No support for HTTP Public Key Pinning
}
banner_server INFO {
Microsoft-IIS/10.0
}
banner_application INFO {
X-AspNet-Version: 4.0.30319, X-Powered-By: ASP.NET
}
cookie_count INFO {
0 at '/' (30x detected, better try target URL of 30x)
}
Cache-Control INFO {
private
}
banner_reverseproxy
zranitelnosti: CWE-200
INFO {
--
}
heartbleed
zranitelnosti: CVE-2014-0160 CWE-119
OK {
not vulnerable, no heartbeat extension
}
CCS
zranitelnosti: CVE-2014-0224 CWE-310
OK {
not vulnerable
}
ticketbleed
zranitelnosti: CVE-2016-9244 CWE-200
OK {
no session ticket extension
}
ROBOT OK {
not vulnerable, no RSA key transport cipher
}
secure_renego
zranitelnosti: CWE-310
WARN {
OpenSSL handshake didn't succeed
}
secure_client_renego
zranitelnosti: CVE-2011-1473 CWE-310
OK {
not vulnerable
}
CRIME_TLS
zranitelnosti: CVE-2012-4929 CWE-310
OK {
not vulnerable
}
BREACH
zranitelnosti: CVE-2013-3587 CWE-310
OK {
not vulnerable, no gzip/deflate/compress/br HTTP compression  - only supplied '/' tested
}
POODLE_SSL
zranitelnosti: CVE-2014-3566 CWE-310
OK {
not vulnerable, no SSLv3
}
fallback_SCSV OK {
no protocol below TLS 1.2 offered
}
SWEET32 OK {
not vulnerable
}
FREAK
zranitelnosti: CVE-2015-0204 CWE-310
OK {
not vulnerable
}
DROWN OK {
not vulnerable on this host and port
}
DROWN_hint INFO {
Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=0CC0CEF410690924C9C12EF491F711CF1F88A5AB3584A6EA42AAD8BBE06CCD97
}
LOGJAM
zranitelnosti: CVE-2015-4000 CWE-310
OK {
not vulnerable, no DH EXPORT ciphers,
}
LOGJAM-common_primes
zranitelnosti: CVE-2015-4000 CWE-310
OK {
--
}
BEAST
zranitelnosti: CVE-2011-3389 CWE-20
OK {
not vulnerable, no SSL3 or TLS1
}
LUCKY13
zranitelnosti: CVE-2013-0169 CWE-310
OK {
not vulnerable
}
winshock
zranitelnosti: CVE-2014-6321 CWE-94
OK {
not vulnerable
}
RC4 OK {
not vulnerable
}
clientsimulation-android_442 INFO {
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-android_500 INFO {
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-android_60 INFO {
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-android_70 INFO {
TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305
}
clientsimulation-android_81 INFO {
TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305
}
clientsimulation-android_90 INFO {
TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305
}
clientsimulation-android_X INFO {
TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305
}
clientsimulation-chrome_74_win10 INFO {
TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305
}
clientsimulation-chrome_79_win10 INFO {
TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305
}
clientsimulation-firefox_66_win81 INFO {
TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305
}
clientsimulation-firefox_71_win10 INFO {
TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305
}
clientsimulation-ie_6_xp INFO {
No connection
}
clientsimulation-ie_8_win7 INFO {
No connection
}
clientsimulation-ie_8_xp INFO {
No connection
}
clientsimulation-ie_11_win7 INFO {
TLSv1.2 DHE-RSA-AES128-GCM-SHA256
}
clientsimulation-ie_11_win81 INFO {
TLSv1.2 DHE-RSA-AES128-GCM-SHA256
}
clientsimulation-ie_11_winphone81 INFO {
No connection
}
clientsimulation-ie_11_win10 INFO {
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-edge_15_win10 INFO {
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-edge_17_win10 INFO {
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-opera_66_win10 INFO {
TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305
}
clientsimulation-safari_9_ios9 INFO {
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-safari_9_osx1011 INFO {
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-safari_10_osx1012 INFO {
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-safari_121_ios_122 INFO {
TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305
}
clientsimulation-safari_130_osx_10146 INFO {
TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305
}
clientsimulation-apple_ats_9_ios9 INFO {
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-java_6u45 INFO {
No connection
}
clientsimulation-java_7u25 INFO {
No connection
}
clientsimulation-java_8u161 INFO {
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-java1102 INFO {
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-java1201 INFO {
TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305
}
clientsimulation-openssl_102e INFO {
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-openssl_110l INFO {
TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305
}
clientsimulation-openssl_111d INFO {
TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305
}
clientsimulation-thunderbird_68_3_1 INFO {
TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305
}
rating_spec INFO {
SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)
}
rating_doc INFO {
https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide
}
protocol_support_score INFO {
100
}
protocol_support_score_weighted INFO {
30
}
key_exchange_score INFO {
90
}
key_exchange_score_weighted INFO {
27
}
cipher_strength_score INFO {
90
}
cipher_strength_score_weighted INFO {
36
}
final_score INFO {
93
}
overall_grade OK {
A+
}
scanTime INFO {
65
}