Přihlásit se Registrace
Smlouvy Dotace Platy Úřady Zakázky Sponzoři & firmy Kauzy, analýzy
❤ Podpořte nás Přihlásit se Registrace
Hledat v Hlídači státu
Nápověda jak vyhledávat Snadné hledání
  1. Hlídač Státu
  2. Hlídač Webů
  3. Detailní analýza HTTPs pro Statutární město Olomouc

Hlídač Statutární město Olomouc Detailní analýza HTTPs pro Statutární město Olomouc

Statutární město Olomouc
https://www.olomouc.eu/

Statutární město Olomouc Statutární město Olomouc - webové stránky města

Zabezpečení komunikace

B

Výsledek analýzy HTTPS na www.olomouc.eu ze dne 13.11.2026

Služba se nedrží doporučených postupů a jeho nastavení je zastaralé. Sice to neznamená bezprostřední a snadno zneužitelné ohrožení, ale je to znak špatně spravovaného serveru a útok je za určitých okolností možný.

Detailní analýza

Detailní report z HTTPs analýzy pomocí nástroje testssl.sh

server www.olomouc.eu/172.67.69.241
pre_128cipher INFO { 
No 128 cipher limit bug
}
SSLv2 OK { 
not offered
}
SSLv3 OK { 
not offered
}
TLS1 LOW { 
offered (deprecated)
}
TLS1_1 LOW { 
offered (deprecated)
}
TLS1_2 OK { 
offered
}
TLS1_3 OK { 
offered with final
}
NPN INFO { 
offered with h2, http/1.1 (advertised)
}
ALPN_HTTP2 OK { 
h2
}
ALPN INFO { 
http/1.1
}
cipherlist_NULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_aNULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_EXPORT
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_LOW
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_3DES_IDEA
zranitelnosti: CWE-310
MEDIUM { 
offered
}
cipherlist_AVERAGE
zranitelnosti: CWE-310
LOW { 
offered
}
cipherlist_GOOD OK { 
offered
}
cipherlist_STRONG OK { 
offered
}
cipher_order OK { 
server -- TLS 1.3 client determined
}
protocol_negotiated OK { 
Default protocol TLS1.3
}
cipher_negotiated OK { 
TLS_AES_256_GCM_SHA384, 253 bit ECDH (X25519)
}
cipher-tls1_xc013 LOW { 
TLSv1   xc013   ECDHE-RSA-AES128-SHA              ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_x2f LOW { 
TLSv1   x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_xc014 LOW { 
TLSv1   xc014   ECDHE-RSA-AES256-SHA              ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_x35 LOW { 
TLSv1   x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_x0a MEDIUM { 
TLSv1   x0a     DES-CBC3-SHA                      RSA        3DES        168      TLS_RSA_WITH_3DES_EDE_CBC_SHA
}
cipherorder_TLSv1 INFO { 
ECDHE-RSA-AES128-SHA AES128-SHA ECDHE-RSA-AES256-SHA AES256-SHA DES-CBC3-SHA
}
cipher-tls1_1_xc013 LOW { 
TLSv1.1   xc013   ECDHE-RSA-AES128-SHA              ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_1_x2f LOW { 
TLSv1.1   x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_1_xc014 LOW { 
TLSv1.1   xc014   ECDHE-RSA-AES256-SHA              ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_1_x35 LOW { 
TLSv1.1   x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA
}
cipherorder_TLSv1_1 INFO { 
ECDHE-RSA-AES128-SHA AES128-SHA ECDHE-RSA-AES256-SHA AES256-SHA
}
cipher-tls1_2_xc02b OK { 
TLSv1.2   xc02b   ECDHE-ECDSA-AES128-GCM-SHA256     ECDH 253   AESGCM      128      TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_xcca9 OK { 
TLSv1.2   xcca9   ECDHE-ECDSA-CHACHA20-POLY1305     ECDH 253   ChaCha20    256      TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
}
cipher-tls1_2_xc009 LOW { 
TLSv1.2   xc009   ECDHE-ECDSA-AES128-SHA            ECDH 253   AES         128      TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_2_xc02c OK { 
TLSv1.2   xc02c   ECDHE-ECDSA-AES256-GCM-SHA384     ECDH 253   AESGCM      256      TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_xc00a LOW { 
TLSv1.2   xc00a   ECDHE-ECDSA-AES256-SHA            ECDH 253   AES         256      TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_2_xc023 LOW { 
TLSv1.2   xc023   ECDHE-ECDSA-AES128-SHA256         ECDH 253   AES         128      TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
}
cipher-tls1_2_xc024 LOW { 
TLSv1.2   xc024   ECDHE-ECDSA-AES256-SHA384         ECDH 253   AES         256      TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
}
cipher-tls1_2_xc02f OK { 
TLSv1.2   xc02f   ECDHE-RSA-AES128-GCM-SHA256       ECDH 253   AESGCM      128      TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_xcca8 OK { 
TLSv1.2   xcca8   ECDHE-RSA-CHACHA20-POLY1305       ECDH 253   ChaCha20    256      TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
}
cipher-tls1_2_xc013 LOW { 
TLSv1.2   xc013   ECDHE-RSA-AES128-SHA              ECDH 253   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_2_x9c OK { 
TLSv1.2   x9c     AES128-GCM-SHA256                 RSA        AESGCM      128      TLS_RSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_x2f LOW { 
TLSv1.2   x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_2_xc030 OK { 
TLSv1.2   xc030   ECDHE-RSA-AES256-GCM-SHA384       ECDH 253   AESGCM      256      TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_xc014 LOW { 
TLSv1.2   xc014   ECDHE-RSA-AES256-SHA              ECDH 253   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_2_x9d OK { 
TLSv1.2   x9d     AES256-GCM-SHA384                 RSA        AESGCM      256      TLS_RSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_x35 LOW { 
TLSv1.2   x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_2_xc027 LOW { 
TLSv1.2   xc027   ECDHE-RSA-AES128-SHA256           ECDH 253   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
}
cipher-tls1_2_x3c LOW { 
TLSv1.2   x3c     AES128-SHA256                     RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA256
}
cipher-tls1_2_xc028 LOW { 
TLSv1.2   xc028   ECDHE-RSA-AES256-SHA384           ECDH 253   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
}
cipher-tls1_2_x3d LOW { 
TLSv1.2   x3d     AES256-SHA256                     RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA256
}
cipherorder_TLSv1_2 INFO { 
ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-CHACHA20-POLY1305 ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES256-SHA384 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-CHACHA20-POLY1305 ECDHE-RSA-AES128-SHA AES128-GCM-SHA256 AES128-SHA ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA AES256-GCM-SHA384 AES256-SHA ECDHE-RSA-AES128-SHA256 AES128-SHA256 ECDHE-RSA-AES256-SHA384 AES256-SHA256
}
prioritize_chacha_TLSv1_2 INFO { 
true
}
cipher-tls1_3_x1302 OK { 
TLSv1.3   x1302   TLS_AES_256_GCM_SHA384            ECDH 253   AESGCM      256      TLS_AES_256_GCM_SHA384
}
cipher-tls1_3_x1303 OK { 
TLSv1.3   x1303   TLS_CHACHA20_POLY1305_SHA256      ECDH 253   ChaCha20    256      TLS_CHACHA20_POLY1305_SHA256
}
cipher-tls1_3_x1301 OK { 
TLSv1.3   x1301   TLS_AES_128_GCM_SHA256            ECDH 253   AESGCM      128      TLS_AES_128_GCM_SHA256
}
supportedciphers_TLSv1_3 INFO { 
TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 TLS_AES_128_GCM_SHA256
}
FS OK { 
offered
}
FS_ciphers INFO { 
TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-ECDSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-CHACHA20-POLY1305 ECDHE-RSA-CHACHA20-POLY1305 TLS_AES_128_GCM_SHA256 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-ECDSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-ECDSA-AES128-SHA
}
FS_ECDHE_curves OK { 
prime256v1 secp384r1 secp521r1 X25519
}
TLS_extensions INFO { 
'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'next protocol/#13172' 'key share/#51' 'supported versions/#43' 'extended master secret/#23' 'application layer protocol negotiation/#16' 'compress_certificate/#27'
}
TLS_session_ticket INFO { 
valid for 64800 seconds only (<daily)
}
SSL_sessionID_support INFO { 
yes
}
sessionresumption_ticket INFO { 
supported
}
sessionresumption_ID INFO { 
not supported
}
TLS_timestamp INFO { 
off by 0 seconds from your localtime
}
certificate_compression INFO { 
0002/Brotli
}
clientAuth INFO { 
none
}
cert_numbers INFO { 
2
}
cert_signatureAlgorithm <hostCert#1> OK { 
SHA256 with RSA
}
cert_keySize <hostCert#1> INFO { 
RSA 2048 bits (exponent is 65537)
}
cert_keyUsage <hostCert#1> INFO { 
Digital Signature, Key Encipherment
}
cert_extKeyUsage <hostCert#1> INFO { 
TLS Web Server Authentication
}
cert_serialNumber <hostCert#1> INFO { 
1D8D92462001A46A1300E6C89CE23902
}
cert_serialNumberLen <hostCert#1> INFO { 
16
}
cert_fingerprintSHA1 <hostCert#1> INFO { 
D09FF121942303A2AB64CA3E10A7FB5854368606
}
cert_fingerprintSHA256 <hostCert#1> INFO { 
070D0659BBD38A9A152064759B2DA5B4CD57EE62E260732D9C5CA8A770101530
}
cert <hostCert#1> INFO { 
-----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIQHY2SRiABpGoTAObInOI5AjANBgkqhkiG9w0BAQsFADA7 MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZpY2VzMQww CgYDVQQDEwNXUjEwHhcNMjYwOTIxMjMxODU4WhcNMjYxMjIxMDAxNjM0WjAVMRMw EQYDVQQDEwpvbG9tb3VjLmV1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtA0R6GpiR7HiHy1sl4PbvCnQYXPJClSc31rCBtA10dz6xRjMbS3EfPKkrP7U ykxOQzvOEjHqYGPGES11lTTxRrAnC64Lusyqz6IqqYVAlpqoA9aG4+OHY+ZN56eF iw67780VWDiYdO3WbUx/65m+rA6xlSyoGjbfoJOjLgbw0UF+LEw63/3cSrkyrcZz 00O1iQS+7zfDBEt/wfbfKkikqrRj+k/kli34lH3c/OhOA20wX36IK/ynv5FTF8rs EZt1OG6GW/1+LiFNEjyXleBh19jhuTLQDnmqDvMU7WmDZfXsAkegMZ2N8d/i5WWh RFDK66+/D0SChd9XtJAJ4MgYsQIDAQABo4ICJzCCAiMwDgYDVR0PAQH/BAQDAgWg MBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKQh LUSfDnl9ED4WckC3wOs40vFrMB8GA1UdIwQYMBaAFGZpSdTeKpyRA8+JDiS4DjAD boguMDUGCCsGAQUFBwEBBCkwJzAlBggrBgEFBQcwAoYZaHR0cDovL2kucGtpLmdv b2cvd3IxLmNydDAjBgNVHREEHDAaggpvbG9tb3VjLmV1ggwqLm9sb21vdWMuZXUw EwYDVR0gBAwwCjAIBgZngQwBAgEwNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2Mu cGtpLmdvb2cvd3IxL3RtR0tCUXROVl9VLmNybDCCAQMGCisGAQQB1nkCBAIEgfQE gfEA7wB2ANdtfRDRp/V3wsfpX9cAv/mCyTNaZeHQswFzF8DIxWl3AAABoMZ66wAA AAQDAEcwRQIgc4w9a/lc8lRUvvUfY/dDjC2os24CGCnYu1975qMa4ycCIQDdkAnh pdOn2ZtMuCkCmTTi+K+t0o1YkbbSNYJAVkDFggB1ACW3796hEwGT7ZMHl3CqMiom Yg3jWsiqfHUZfeCxqeBlAAABoMZ665YAAAQDAEYwRAIgFLgbvX6nzXinkC7BlK+v yF0kZvaSY3qJOdp5rk1GBfECIEpgr/e+LiGqcnJkvI6Mzs20ITc/y7FtyO0Yko1V G/ynMA0GCSqGSIb3DQEBCwUAA4IBAQCCgX/9lz4FwOwKEx0XW7bDv35FAUcNztl9 +wCNW6UUKTiNXFbiJI2f3fuUZ3TDiSTvUtU3UxsqCpOouM2cEf9XYjXTzj3oXhLF VoGrTuEZ5pTzZIdUwxIVrfiTBKpTQ61D7FzuUoWl81jl4i2/WS0CgzELIJ/3SPvu PwODyAabNagKyYVI4zbzJ3AS8Xtfo41S8KlfI7TnJ5JVnrSCR4Vfnpt5GgyQDRbX yqp4IG2aGX17CBdz99N6WEDaOScB7K+gYkVG7UQeK0zVnaIXrDraxenkLMkZzywT dp0ubn7r970LR4wzAqp/7Zcl44/KxBddMdSvaj+MT6CIL/MKcJAd -----END CERTIFICATE-----
}
cert_commonName <hostCert#1> OK { 
olomouc.eu
}
cert_commonName_wo_SNI <hostCert#1> INFO { 
request w/o SNI didn't succeed
}
cert_subjectAltName <hostCert#1> INFO { 
olomouc.eu *.olomouc.eu
}
cert_trust <hostCert#1> OK { 
Ok via SAN wildcard (SNI mandatory)
}
cert_chain_of_trust <hostCert#1> OK { 
passed.
}
cert_certificatePolicies_EV <hostCert#1> INFO { 
no
}
cert_expirationStatus <hostCert#1> MEDIUM { 
expires < 60 days (37)
}
cert_notBefore <hostCert#1> INFO { 
2026-09-21 23:18
}
cert_notAfter <hostCert#1> MEDIUM { 
2026-12-21 00:16
}
cert_extlifeSpan <hostCert#1> OK { 
certificate has no extended life time according to browser forum
}
cert_eTLS <hostCert#1> INFO { 
not present
}
cert_crlDistributionPoints <hostCert#1> INFO { 
http://c.pki.goog/wr1/tmGKBQtNV_U.crl
}
cert_ocspURL <hostCert#1> INFO { 
--
}
OCSP_stapling <hostCert#1> INFO { 
not offered
}
cert_mustStapleExtension <hostCert#1> INFO { 
--
}
DNS_CAArecord <hostCert#1> OK { 
issue=comodoca.com, issue=digicert.com;, issue=letsencrypt.org, issue=pki.goog;, issue=ssl.com, issuewild=comodoca.com, issuewild=digicert.com;, issuewild=letsencrypt.org, issuewild=pki.goog;, issuewild=ssl.com
}
certificate_transparency <hostCert#1> OK { 
yes (certificate extension)
}
certs_countServer <hostCert#1> INFO { 
3
}
certs_list_ordering_problem <hostCert#1> INFO { 
no
}
cert_caIssuers <hostCert#1> INFO { 
WR1 (Google Trust Services from US)
}
intermediate_cert <#1> <hostCert#1> INFO { 
-----BEGIN CERTIFICATE----- MIIFCzCCAvOgAwIBAgIQf9niwtIEigR0tieibQhopzANBgkqhkiG9w0BAQsFADBH MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzEUMBIGA1UEAxMLR1RTIFJvb3QgUjEwHhcNMjMxMjEzMDkwMDAwWhcNMjkwMjIw MTQwMDAwWjA7MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNl cnZpY2VzMQwwCgYDVQQDEwNXUjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDPbjYWircr7kaYAx1TcA937qNLoHK+jyMtwkfGj1yN+T3mGo7uMyINyRFI uLBizvRpDXICfd7VJg/DbpvPfg7XIM/GkDujggbaOp3/bFa/3OlhlEXkabxPD8kT wK1hRHIggdAPK55oamJqj4oiV3lpK+IkM352YyxdvFFpfiMHsf92gfHuuFi1azUV 76HmSCg5lzHZBx+Vp56uz5i8no2KA+Gwl01Qb5NMSh/4233xkJkVf+OW7e4xgepy PVId3yVkpQtwqp7oqLlHyKdaECVgb0Lh1z/njwzwwoNGMyDmS3cEdqFop10VGO/Y KHc1rQ6tRuRibuKq+MzvN34PJrMHAgMBAAGjgf4wgfswDgYDVR0PAQH/BAQDAgGG MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAGAQH/ AgEAMB0GA1UdDgQWBBRmaUnU3iqckQPPiQ4kuA4wA26ILjAfBgNVHSMEGDAWgBTk rysmcRorSCeFL1JmLO/wiRNxPjA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAKG GGh0dHA6Ly9pLnBraS5nb29nL3IxLmNydDArBgNVHR8EJDAiMCCgHqAchhpodHRw Oi8vYy5wa2kuZ29vZy9yL3IxLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATANBgkq hkiG9w0BAQsFAAOCAgEATuazCBEgkWAn+VGQTQIY7rjBidUihJfm1t/mTjo7KQR+ 3iDx4o2L06oeF0Q3wpKYpQgI/TeMqUlYMWQmZbWPE0PX8pfsVAE5E5tVOjh34bNA JwDPVnsZVJwzN3nw5BGQ7sxRspFzIcM/qbbTpNeXf9II4Wsk2+Tv6FSVFZUL3/0u HradbruDWjRQ4IZ7mYqKiEqk08dpOZ+TmBzwykEGy1/IXberb6Ap1SSnn2+RI7t6 N/fqPCrwwFjp8kg1G6etRATGBaPYCx+GjJMFPX+k97Alvoj3/98SvqdegLPYEPjv xUclHpiKLD63NMmVarVQddIL6kOvTe5k0pnxRnR+mndGHIQc77TLbcZFeja56Pyn lSqmer578c7CBrPqo1BVmPyWUK+v6sGuzs7Mq7QQaxVs4710cI/MpPp1ovxMVt17 ENKxLk34LpEKAKVmqwnzbHHRjhXNeCC984XDOwLEp0K4MzHl8ZOWJQAakCdVlFC+ PyA3GP2JX/QLoqWNHGuN9c9vLObDhHVs/L+65De+OdnnjpFGI9xxtsNyRsyaHdFA f5z7ulOoXDXkHCCej/Ehs5docReNt16W2xbH/EBuirJrOzFE2rtALxksl1TdEjOf IKXOJfUqQeVI5+hA7V+n1+A/n7Npg0S+5ODytWh5XW54ccN1drJnMK54ttozh0c= -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#1> <hostCert#1> INFO { 
B10B6F00E609509E8700F6D34687A2BFCE38EA05A8FDF1CDC40C3A2A0D0D0E45
}
intermediate_cert_notBefore <#1> <hostCert#1> INFO { 
2023-12-13 09:00
}
intermediate_cert_notAfter <#1> <hostCert#1> OK { 
2029-02-20 14:00
}
intermediate_cert_expiration <#1> <hostCert#1> OK { 
ok > 40 days
}
intermediate_cert_chain <#1> <hostCert#1> INFO { 
WR1 <-- GTS Root R1
}
intermediate_cert <#2> <hostCert#1> INFO { 
-----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgIQd70NbNs2+RrqIQ/E8FjTDTANBgkqhkiG9w0BAQsFADBX MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEQMA4GA1UE CxMHUm9vdCBDQTEbMBkGA1UEAxMSR2xvYmFsU2lnbiBSb290IENBMB4XDTIwMDYx OTAwMDA0MloXDTI4MDEyODAwMDA0MlowRzELMAkGA1UEBhMCVVMxIjAgBgNVBAoT GUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBMTEMxFDASBgNVBAMTC0dUUyBSb290IFIx MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAthECix7joXebO9y/lD63 ladAPKH9gvl9MgaCcfb2jH/76Nu8ai6Xl6OMS/kr9rH5zoQdsfnFl97vufKj6bwS iV6nqlKr+CMny6SxnGPb15l+8Ape62im9MZaRw1NEDPjTrETo8gYbEvs/AmQ351k KSUjB6G00j0uYODP0gmHu81I8E3CwnqIiru6z1kZ1q+PsAewnjHxgsHA3y6mbWwZ DrXYfiYaRQM9sHmklCitD38m5agI/pboPGiUU+6DOogrFZYJsuB6jC511pzrp1Zk j5ZPaK49l8KEj8C8QMALXL32h7M1bKwYUH+E4EzNktMg6TO8UpmvMrUpsyUqtEj5 cuHKZPfmghCN6J3Cioj6OGaK/GP5Afl4/Xtcd/p2h/rs37EOeZVXtL0m79YB0esW CruOC7XFxYpVq9Os6pFLKcwZpDIlTirxZUTQAs6qzkm06p98g7BAe+dDq6dso499 iYH6TKX/1Y7DzkvgtdizjkXPdsDtQCv9Uw+wp9U7DbGKogPeMa3Md+pvez7W35Ei Eua++tgy/BBjFFFy3l3WFpO9KWgz7zpm7AeKJt8T11dleCfeXkkUAKIAf5qoIbap sZWwpbkNFhHax2xIPEDgfg1azVY80ZcFuctL7TlLnMQ/0lUTbiSw1nH69MG6zO0b 9f6BQdgAmD06yK56mDcYBZUCAwEAAaOCATgwggE0MA4GA1UdDwEB/wQEAwIBhjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTkrysmcRorSCeFL1JmLO/wiRNxPjAf BgNVHSMEGDAWgBRge2YaRQ2XyolQL30EzTSo//z9SzBgBggrBgEFBQcBAQRUMFIw JQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnBraS5nb29nL2dzcjEwKQYIKwYBBQUH MAKGHWh0dHA6Ly9wa2kuZ29vZy9nc3IxL2dzcjEuY3J0MDIGA1UdHwQrMCkwJ6Al oCOGIWh0dHA6Ly9jcmwucGtpLmdvb2cvZ3NyMS9nc3IxLmNybDA7BgNVHSAENDAy MAgGBmeBDAECATAIBgZngQwBAgIwDQYLKwYBBAHWeQIFAwIwDQYLKwYBBAHWeQIF AwMwDQYJKoZIhvcNAQELBQADggEBADSkHrEoo9C0dhemMXoh6dFSPsjbdBZBiLg9 NR3t5P+T4Vxfq7vqfM/b5A3Ri1fyJm9bvhdGaJQ3b2t6yMAYN/olUazsaL+yyEn9 WprKASOshIArAoyZl+tJaox118fessmXn1hIVw41oeQa1v1vg4Fv74zPl6/AhSrw 9U5pCZEt4Wi4wStz6dTZ/CLANx8LZh1J7QJVj2fhMtfTJr9w4z30Z209fOU0iOMy +qduBmpvvYuR7hZL6Dupszfnw0Skfths18dG9ZKb59UhvmaSGZRVbNQpsg3BZlvi d0lIKO2d1xozclOzgjXPYovJJIultzkMu34qQb9Sz/yilrbCgj8= -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#2> <hostCert#1> INFO { 
3EE0278DF71FA3C125C4CD487F01D774694E6FC57E0CD94C24EFD769133918E5
}
intermediate_cert_notBefore <#2> <hostCert#1> INFO { 
2020-06-19 00:00
}
intermediate_cert_notAfter <#2> <hostCert#1> OK { 
2028-01-28 00:00
}
intermediate_cert_expiration <#2> <hostCert#1> OK { 
ok > 40 days
}
intermediate_cert_chain <#2> <hostCert#1> INFO { 
GTS Root R1 <-- GlobalSign Root CA
}
intermediate_cert_badOCSP <hostCert#1> OK { 
intermediate certificate(s) is/are ok
}
cert_signatureAlgorithm <hostCert#2> OK { 
ECDSA with SHA256
}
cert_keySize <hostCert#2> OK { 
EC 256 bits (curve P-256)
}
cert_keyUsage <hostCert#2> INFO { 
Digital Signature
}
cert_extKeyUsage <hostCert#2> INFO { 
TLS Web Server Authentication
}
cert_serialNumber <hostCert#2> INFO { 
C2C7601356AA98950E2062A17C6C0141
}
cert_serialNumberLen <hostCert#2> INFO { 
16
}
cert_fingerprintSHA1 <hostCert#2> INFO { 
6B1BB10E72D010390C6E8910E6A245A0F4DFC1FF
}
cert_fingerprintSHA256 <hostCert#2> INFO { 
983D5A0FCB1F3B5F09C3CA18C44F3D18ABC285E22603D5B89630A32E8F614566
}
cert <hostCert#2> INFO { 
-----BEGIN CERTIFICATE----- MIIDeTCCAyCgAwIBAgIRAMLHYBNWqpiVDiBioXxsAUEwCgYIKoZIzj0EAwIwOzEL MAkGA1UEBhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczEMMAoG A1UEAxMDV0UxMB4XDTI2MDkyMTIzMTkwN1oXDTI2MTIyMTAwMTkwNVowFTETMBEG A1UEAxMKb2xvbW91Yy5ldTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABPFpbz6q mHrAZJnxqWbrQ2JZ8ejocdRfNywkdPrLm80C9VMRwgqAcwTF4/ssbUyqL+s+8nrT mm7WhHVDUmJb8UyjggIpMIICJTAOBgNVHQ8BAf8EBAMCB4AwEwYDVR0lBAwwCgYI KwYBBQUHAwEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUng2eolfu/jgHttFma6HJ LrsnISUwHwYDVR0jBBgwFoAUkHeSNWfE/6jMqeZ72YB5e8yT+TgwNQYIKwYBBQUH AQEEKTAnMCUGCCsGAQUFBzAChhlodHRwOi8vaS5wa2kuZ29vZy93ZTEuY3J0MCMG A1UdEQQcMBqCCm9sb21vdWMuZXWCDCoub2xvbW91Yy5ldTATBgNVHSAEDDAKMAgG BmeBDAECATA2BgNVHR8ELzAtMCugKaAnhiVodHRwOi8vYy5wa2kuZ29vZy93ZTEv c2pIVlVUTllPXzguY3JsMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAdNudWPfU fp39eHoWKpkcGM9pjafHKZGMmhiwRQ26RLwAAAGgxnsNhgAABAMASDBGAiEA3yR8 lZLwj8x14PTpaKG0L2X5GAJ/7AXaWSxyA7DfwHgCIQCH1S0lgO/TZCMJAUlj+dPz NmUurDzjbK7o4FVZIcDmCAB2ANgJVTuUT3r/yBYZb5RPhauw+Pxeh1UmDxXRLnK7 RUsUAAABoMZ7DUgAAAQDAEcwRQIhAM6q1u2NEtQIcN81l4TdcvvtGQLryUlU5SvO rIt1SSu3AiBDWFmXbiSK6VWG1q1BB4XAY9VZscM65XXXqmnjfuuBMzAKBggqhkjO PQQDAgNHADBEAiBTGBnInYPXU/G1uZfWqD/5Be4dfsviuY/UhQ+y3/X8FwIgTFj1 HCYnLOp4sTBw4HuX1puegmP4nySGWL60ES9LcB4= -----END CERTIFICATE-----
}
cert_commonName <hostCert#2> OK { 
olomouc.eu
}
cert_commonName_wo_SNI <hostCert#2> INFO { 
request w/o SNI didn't succeed, usual for EC certificates
}
cert_subjectAltName <hostCert#2> INFO { 
olomouc.eu *.olomouc.eu
}
cert_trust <hostCert#2> OK { 
Ok via SAN wildcard (SNI mandatory)
}
cert_chain_of_trust <hostCert#2> OK { 
passed.
}
cert_certificatePolicies_EV <hostCert#2> INFO { 
no
}
cert_expirationStatus <hostCert#2> MEDIUM { 
expires < 60 days (37)
}
cert_notBefore <hostCert#2> INFO { 
2026-09-21 23:19
}
cert_notAfter <hostCert#2> MEDIUM { 
2026-12-21 00:19
}
cert_extlifeSpan <hostCert#2> OK { 
certificate has no extended life time according to browser forum
}
cert_eTLS <hostCert#2> INFO { 
not present
}
cert_crlDistributionPoints <hostCert#2> INFO { 
http://c.pki.goog/we1/sjHVUTNYO_8.crl
}
cert_ocspURL <hostCert#2> INFO { 
--
}
OCSP_stapling <hostCert#2> INFO { 
not offered
}
cert_mustStapleExtension <hostCert#2> INFO { 
--
}
DNS_CAArecord <hostCert#2> OK { 
issue=comodoca.com, issue=digicert.com;, issue=letsencrypt.org, issue=pki.goog;, issue=ssl.com, issuewild=comodoca.com, issuewild=digicert.com;, issuewild=letsencrypt.org, issuewild=pki.goog;, issuewild=ssl.com
}
certificate_transparency <hostCert#2> OK { 
yes (certificate extension)
}
certs_countServer <hostCert#2> INFO { 
3
}
certs_list_ordering_problem <hostCert#2> INFO { 
no
}
cert_caIssuers <hostCert#2> INFO { 
WE1 (Google Trust Services from US)
}
intermediate_cert <#1> <hostCert#2> INFO { 
-----BEGIN CERTIFICATE----- MIICnzCCAiWgAwIBAgIQf/MZd5csIkp2FV0TttaF4zAKBggqhkjOPQQDAzBHMQsw CQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEU MBIGA1UEAxMLR1RTIFJvb3QgUjQwHhcNMjMxMjEzMDkwMDAwWhcNMjkwMjIwMTQw MDAwWjA7MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZp Y2VzMQwwCgYDVQQDEwNXRTEwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAARvzTr+ Z1dHTCEDhUDCR127WEcPQMFcF4XGGTfn1XzthkubgdnXGhOlCgP4mMTG6J7/EFmP LCaY9eYmJbsPAvpWo4H+MIH7MA4GA1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwEgYDVR0TAQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQU kHeSNWfE/6jMqeZ72YB5e8yT+TgwHwYDVR0jBBgwFoAUgEzW63T/STaj1dj8tT7F avCUHYwwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzAChhhodHRwOi8vaS5wa2ku Z29vZy9yNC5jcnQwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2MucGtpLmdvb2cv ci9yNC5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwCgYIKoZIzj0EAwMDaAAwZQIx AOcCq1HW90OVznX+0RGU1cxAQXomvtgM8zItPZCuFQ8jSBJSjz5keROv9aYsAm5V sQIwJonMaAFi54mrfhfoFNZEfuNMSQ6/bIBiNLiyoX46FohQvKeIoJ99cx7sUkFN 7uJW -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#1> <hostCert#2> INFO { 
1DFC1605FBAD358D8BC844F76D15203FAC9CA5C1A79FD4857FFAF2864FBEBF96
}
intermediate_cert_notBefore <#1> <hostCert#2> INFO { 
2023-12-13 09:00
}
intermediate_cert_notAfter <#1> <hostCert#2> OK { 
2029-02-20 14:00
}
intermediate_cert_expiration <#1> <hostCert#2> OK { 
ok > 40 days
}
intermediate_cert_chain <#1> <hostCert#2> INFO { 
WE1 <-- GTS Root R4
}
intermediate_cert <#2> <hostCert#2> INFO { 
-----BEGIN CERTIFICATE----- MIIDejCCAmKgAwIBAgIQf+UwvzMTQ77dghYQST2KGzANBgkqhkiG9w0BAQsFADBX MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEQMA4GA1UE CxMHUm9vdCBDQTEbMBkGA1UEAxMSR2xvYmFsU2lnbiBSb290IENBMB4XDTIzMTEx NTAzNDMyMVoXDTI4MDEyODAwMDA0MlowRzELMAkGA1UEBhMCVVMxIjAgBgNVBAoT GUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBMTEMxFDASBgNVBAMTC0dUUyBSb290IFI0 MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAE83Rzp2iLYK5DuDXFgTB7S0md+8Fhzube Rr1r1WEYNa5A3XP3iZEwWus87oV8okB2O6nGuEfYKueSkWpz6bFyOZ8pn6KY019e WIZlD6GEZQbR3IvJx3PIjGov5cSr0R2Ko4H/MIH8MA4GA1UdDwEB/wQEAwIBhjAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDwYDVR0TAQH/BAUwAwEB/zAd BgNVHQ4EFgQUgEzW63T/STaj1dj8tT7FavCUHYwwHwYDVR0jBBgwFoAUYHtmGkUN l8qJUC99BM00qP/8/UswNgYIKwYBBQUHAQEEKjAoMCYGCCsGAQUFBzAChhpodHRw Oi8vaS5wa2kuZ29vZy9nc3IxLmNydDAtBgNVHR8EJjAkMCKgIKAehhxodHRwOi8v Yy5wa2kuZ29vZy9yL2dzcjEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA0GCSqG SIb3DQEBCwUAA4IBAQAYQrsPBtYDh5bjP2OBDwmkoWhIDDkic574y04tfzHpn+cJ odI2D4SseesQ6bDrarZ7C30ddLibZatoKiws3UL9xnELz4ct92vID24FfVbiI1hY +SW6FoVHkNeWIP0GCbaM4C6uVdF5dTUsMVs/ZbzNnIdCp5Gxmx5ejvEau8otR/Cs kGN+hr/W5GvT1tMBjgWKZ1i4//emhA1JG1BbPzoLJQvyEotc03lXjTaCzv8mEbep 8RqZ7a2CPsgRbuvTPBwcOMBBmuFeU88+FSBX6+7iP0il8b4Z0QFqIwwMHfs/L6K1 vepuoxtGzi4CZ68zJpiq1UvSqTbFJjtbD4seiMHl -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#2> <hostCert#2> INFO { 
76B27B80A58027DC3CF1DA68DAC17010ED93997D0B603E2FADBE85012493B5A7
}
intermediate_cert_notBefore <#2> <hostCert#2> INFO { 
2023-11-15 03:43
}
intermediate_cert_notAfter <#2> <hostCert#2> OK { 
2028-01-28 00:00
}
intermediate_cert_expiration <#2> <hostCert#2> OK { 
ok > 40 days
}
intermediate_cert_chain <#2> <hostCert#2> INFO { 
GTS Root R4 <-- GlobalSign Root CA
}
intermediate_cert_badOCSP <hostCert#2> OK { 
intermediate certificate(s) is/are ok
}
HTTP_status_code INFO { 
200 OK ('/')
}
HTTP_clock_skew INFO { 
0 seconds from localtime
}
HTTP_headerTime INFO { 
1794604897
}
HSTS LOW { 
not offered
}
HPKP INFO { 
No support for HTTP Public Key Pinning
}
banner_server INFO { 
cloudflare
}
banner_application INFO { 
No application banner found
}
cookie_count INFO { 
1 at '/'
}
cookie_secure INFO { 
0/1 at '/' marked as secure
}
cookie_httponly INFO { 
0/1 at '/' marked as HttpOnly
}
X-Frame-Options OK { 
SAMEORIGIN
}
Cache-Control INFO { 
maxage=0
}
Pragma INFO { 
no-cache
}
banner_reverseproxy
zranitelnosti: CWE-200
INFO { 
--
}
heartbleed
zranitelnosti: CVE-2014-0160 CWE-119
OK { 
not vulnerable, no heartbeat extension
}
CCS
zranitelnosti: CVE-2014-0224 CWE-310
OK { 
not vulnerable
}
ticketbleed
zranitelnosti: CVE-2016-9244 CWE-200
OK { 
not vulnerable
}
ROBOT
zranitelnosti: CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168 CWE-203
OK { 
not vulnerable
}
secure_renego
zranitelnosti: CWE-310
WARN { 
OpenSSL handshake didn't succeed
}
secure_client_renego
zranitelnosti: CVE-2011-1473 CWE-310
OK { 
not vulnerable
}
CRIME_TLS
zranitelnosti: CVE-2012-4929 CWE-310
OK { 
not vulnerable
}
BREACH
zranitelnosti: CVE-2013-3587 CWE-310
MEDIUM { 
potentially VULNERABLE, br gzip HTTP compression detected  - only supplied '/' tested
}
POODLE_SSL
zranitelnosti: CVE-2014-3566 CWE-310
OK { 
not vulnerable, no SSLv3
}
fallback_SCSV OK { 
supported
}
SWEET32
zranitelnosti: CVE-2016-2183 CVE-2016-6329 CWE-327
LOW { 
uses 64 bit block ciphers
}
FREAK
zranitelnosti: CVE-2015-0204 CWE-310
OK { 
not vulnerable
}
DROWN
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
OK { 
not vulnerable on this host and port
}
DROWN_hint
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
INFO { 
Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=070D0659BBD38A9A152064759B2DA5B4CD57EE62E260732D9C5CA8A770101530
}
LOGJAM
zranitelnosti: CVE-2015-4000 CWE-310
OK { 
not vulnerable, no DH EXPORT ciphers,
}
LOGJAM-common_primes
zranitelnosti: CVE-2015-4000 CWE-310
OK { 
no DH key with <= TLS 1.2
}
BEAST_CBC_TLS1
zranitelnosti: CVE-2011-3389 CWE-20
MEDIUM { 
ECDHE-RSA-AES128-SHA AES128-SHA ECDHE-RSA-AES256-SHA AES256-SHA DES-CBC3-SHA
}
BEAST
zranitelnosti: CVE-2011-3389 CWE-20
LOW { 
VULNERABLE -- but also supports higher protocols  TLSv1.1 TLSv1.2 (likely mitigated)
}
LUCKY13
zranitelnosti: CVE-2013-0169 CWE-310
LOW { 
potentially vulnerable, uses TLS CBC ciphers
}
winshock
zranitelnosti: CVE-2014-6321 CWE-94
OK { 
not vulnerable
}
RC4
zranitelnosti: CVE-2013-2566 CVE-2015-2808 CWE-310
OK { 
not vulnerable
}
clientsimulation-android_442 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_500 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_60 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_70 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_81 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_90 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-android_X INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-chrome_74_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-chrome_79_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-firefox_66_win81 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-firefox_71_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-ie_6_xp INFO { 
No connection
}
clientsimulation-ie_8_win7 INFO { 
TLSv1.0 ECDHE-RSA-AES128-SHA
}
clientsimulation-ie_8_xp INFO { 
No connection
}
clientsimulation-ie_11_win7 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-ie_11_win81 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-ie_11_winphone81 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-ie_11_win10 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-edge_15_win10 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-edge_17_win10 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-opera_66_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-safari_9_ios9 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-safari_9_osx1011 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-safari_10_osx1012 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-safari_121_ios_122 INFO { 
TLSv1.3 TLS_CHACHA20_POLY1305_SHA256
}
clientsimulation-safari_130_osx_10146 INFO { 
TLSv1.3 TLS_CHACHA20_POLY1305_SHA256
}
clientsimulation-apple_ats_9_ios9 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-java_6u45 INFO { 
No connection
}
clientsimulation-java_7u25 INFO { 
TLSv1.0 ECDHE-RSA-AES128-SHA
}
clientsimulation-java_8u161 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-java1102 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-java1201 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-openssl_102e INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-openssl_110l INFO { 
TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305
}
clientsimulation-openssl_111d INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-thunderbird_68_3_1 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
rating_spec INFO { 
SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)
}
rating_doc INFO { 
https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide
}
protocol_support_score INFO { 
95
}
protocol_support_score_weighted INFO { 
28
}
key_exchange_score INFO { 
90
}
key_exchange_score_weighted INFO { 
27
}
cipher_strength_score INFO { 
90
}
cipher_strength_score_weighted INFO { 
36
}
final_score INFO { 
91
}
overall_grade MEDIUM { 
B
}
grade_cap_reason_1 INFO { 
Grade capped to B. TLS 1.1 offered
}
grade_cap_reason_2 INFO { 
Grade capped to B. TLS 1.0 offered
}
grade_cap_reason_3 INFO { 
Grade capped to A. HSTS is not offered
}
server www.olomouc.eu/104.26.12.29
pre_128cipher INFO { 
No 128 cipher limit bug
}
SSLv2 OK { 
not offered
}
SSLv3 OK { 
not offered
}
TLS1 LOW { 
offered (deprecated)
}
TLS1_1 LOW { 
offered (deprecated)
}
TLS1_2 OK { 
offered
}
TLS1_3 OK { 
offered with final
}
NPN INFO { 
offered with h2, http/1.1 (advertised)
}
ALPN_HTTP2 OK { 
h2
}
ALPN INFO { 
http/1.1
}
cipherlist_NULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_aNULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_EXPORT
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_LOW
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_3DES_IDEA
zranitelnosti: CWE-310
MEDIUM { 
offered
}
cipherlist_AVERAGE
zranitelnosti: CWE-310
LOW { 
offered
}
cipherlist_GOOD OK { 
offered
}
cipherlist_STRONG OK { 
offered
}
cipher_order OK { 
server -- TLS 1.3 client determined
}
protocol_negotiated OK { 
Default protocol TLS1.3
}
cipher_negotiated OK { 
TLS_AES_256_GCM_SHA384, 253 bit ECDH (X25519)
}
cipher-tls1_xc013 LOW { 
TLSv1   xc013   ECDHE-RSA-AES128-SHA              ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_x2f LOW { 
TLSv1   x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_xc014 LOW { 
TLSv1   xc014   ECDHE-RSA-AES256-SHA              ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_x35 LOW { 
TLSv1   x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_x0a MEDIUM { 
TLSv1   x0a     DES-CBC3-SHA                      RSA        3DES        168      TLS_RSA_WITH_3DES_EDE_CBC_SHA
}
cipherorder_TLSv1 INFO { 
ECDHE-RSA-AES128-SHA AES128-SHA ECDHE-RSA-AES256-SHA AES256-SHA DES-CBC3-SHA
}
cipher-tls1_1_xc013 LOW { 
TLSv1.1   xc013   ECDHE-RSA-AES128-SHA              ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_1_x2f LOW { 
TLSv1.1   x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_1_xc014 LOW { 
TLSv1.1   xc014   ECDHE-RSA-AES256-SHA              ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_1_x35 LOW { 
TLSv1.1   x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA
}
cipherorder_TLSv1_1 INFO { 
ECDHE-RSA-AES128-SHA AES128-SHA ECDHE-RSA-AES256-SHA AES256-SHA
}
cipher-tls1_2_xc02b OK { 
TLSv1.2   xc02b   ECDHE-ECDSA-AES128-GCM-SHA256     ECDH 253   AESGCM      128      TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_xcca9 OK { 
TLSv1.2   xcca9   ECDHE-ECDSA-CHACHA20-POLY1305     ECDH 253   ChaCha20    256      TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
}
cipher-tls1_2_xc009 LOW { 
TLSv1.2   xc009   ECDHE-ECDSA-AES128-SHA            ECDH 253   AES         128      TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_2_xc02c OK { 
TLSv1.2   xc02c   ECDHE-ECDSA-AES256-GCM-SHA384     ECDH 253   AESGCM      256      TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_xc00a LOW { 
TLSv1.2   xc00a   ECDHE-ECDSA-AES256-SHA            ECDH 253   AES         256      TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_2_xc023 LOW { 
TLSv1.2   xc023   ECDHE-ECDSA-AES128-SHA256         ECDH 253   AES         128      TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
}
cipher-tls1_2_xc024 LOW { 
TLSv1.2   xc024   ECDHE-ECDSA-AES256-SHA384         ECDH 253   AES         256      TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
}
cipher-tls1_2_xc02f OK { 
TLSv1.2   xc02f   ECDHE-RSA-AES128-GCM-SHA256       ECDH 253   AESGCM      128      TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_xcca8 OK { 
TLSv1.2   xcca8   ECDHE-RSA-CHACHA20-POLY1305       ECDH 253   ChaCha20    256      TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
}
cipher-tls1_2_xc013 LOW { 
TLSv1.2   xc013   ECDHE-RSA-AES128-SHA              ECDH 253   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_2_x9c OK { 
TLSv1.2   x9c     AES128-GCM-SHA256                 RSA        AESGCM      128      TLS_RSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_x2f LOW { 
TLSv1.2   x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_2_xc030 OK { 
TLSv1.2   xc030   ECDHE-RSA-AES256-GCM-SHA384       ECDH 253   AESGCM      256      TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_xc014 LOW { 
TLSv1.2   xc014   ECDHE-RSA-AES256-SHA              ECDH 253   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_2_x9d OK { 
TLSv1.2   x9d     AES256-GCM-SHA384                 RSA        AESGCM      256      TLS_RSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_x35 LOW { 
TLSv1.2   x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_2_xc027 LOW { 
TLSv1.2   xc027   ECDHE-RSA-AES128-SHA256           ECDH 253   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
}
cipher-tls1_2_x3c LOW { 
TLSv1.2   x3c     AES128-SHA256                     RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA256
}
cipher-tls1_2_xc028 LOW { 
TLSv1.2   xc028   ECDHE-RSA-AES256-SHA384           ECDH 253   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
}
cipher-tls1_2_x3d LOW { 
TLSv1.2   x3d     AES256-SHA256                     RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA256
}
cipherorder_TLSv1_2 INFO { 
ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-CHACHA20-POLY1305 ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES256-SHA384 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-CHACHA20-POLY1305 ECDHE-RSA-AES128-SHA AES128-GCM-SHA256 AES128-SHA ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA AES256-GCM-SHA384 AES256-SHA ECDHE-RSA-AES128-SHA256 AES128-SHA256 ECDHE-RSA-AES256-SHA384 AES256-SHA256
}
prioritize_chacha_TLSv1_2 INFO { 
true
}
cipher-tls1_3_x1302 OK { 
TLSv1.3   x1302   TLS_AES_256_GCM_SHA384            ECDH 253   AESGCM      256      TLS_AES_256_GCM_SHA384
}
cipher-tls1_3_x1303 OK { 
TLSv1.3   x1303   TLS_CHACHA20_POLY1305_SHA256      ECDH 253   ChaCha20    256      TLS_CHACHA20_POLY1305_SHA256
}
cipher-tls1_3_x1301 OK { 
TLSv1.3   x1301   TLS_AES_128_GCM_SHA256            ECDH 253   AESGCM      128      TLS_AES_128_GCM_SHA256
}
supportedciphers_TLSv1_3 INFO { 
TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 TLS_AES_128_GCM_SHA256
}
FS OK { 
offered
}
FS_ciphers INFO { 
TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-ECDSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-CHACHA20-POLY1305 ECDHE-RSA-CHACHA20-POLY1305 TLS_AES_128_GCM_SHA256 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-ECDSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-ECDSA-AES128-SHA
}
FS_ECDHE_curves OK { 
prime256v1 secp384r1 secp521r1 X25519
}
TLS_extensions INFO { 
'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'next protocol/#13172' 'key share/#51' 'supported versions/#43' 'extended master secret/#23' 'application layer protocol negotiation/#16' 'compress_certificate/#27'
}
TLS_session_ticket INFO { 
valid for 64800 seconds only (<daily)
}
SSL_sessionID_support INFO { 
yes
}
sessionresumption_ticket INFO { 
supported
}
sessionresumption_ID INFO { 
supported
}
TLS_timestamp INFO { 
off by 0 seconds from your localtime
}
certificate_compression INFO { 
0002/Brotli
}
clientAuth INFO { 
none
}
cert_numbers INFO { 
2
}
cert_signatureAlgorithm <hostCert#1> OK { 
SHA256 with RSA
}
cert_keySize <hostCert#1> INFO { 
RSA 2048 bits (exponent is 65537)
}
cert_keyUsage <hostCert#1> INFO { 
Digital Signature, Key Encipherment
}
cert_extKeyUsage <hostCert#1> INFO { 
TLS Web Server Authentication
}
cert_serialNumber <hostCert#1> INFO { 
1D8D92462001A46A1300E6C89CE23902
}
cert_serialNumberLen <hostCert#1> INFO { 
16
}
cert_fingerprintSHA1 <hostCert#1> INFO { 
D09FF121942303A2AB64CA3E10A7FB5854368606
}
cert_fingerprintSHA256 <hostCert#1> INFO { 
070D0659BBD38A9A152064759B2DA5B4CD57EE62E260732D9C5CA8A770101530
}
cert <hostCert#1> INFO { 
-----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIQHY2SRiABpGoTAObInOI5AjANBgkqhkiG9w0BAQsFADA7 MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZpY2VzMQww CgYDVQQDEwNXUjEwHhcNMjYwOTIxMjMxODU4WhcNMjYxMjIxMDAxNjM0WjAVMRMw EQYDVQQDEwpvbG9tb3VjLmV1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtA0R6GpiR7HiHy1sl4PbvCnQYXPJClSc31rCBtA10dz6xRjMbS3EfPKkrP7U ykxOQzvOEjHqYGPGES11lTTxRrAnC64Lusyqz6IqqYVAlpqoA9aG4+OHY+ZN56eF iw67780VWDiYdO3WbUx/65m+rA6xlSyoGjbfoJOjLgbw0UF+LEw63/3cSrkyrcZz 00O1iQS+7zfDBEt/wfbfKkikqrRj+k/kli34lH3c/OhOA20wX36IK/ynv5FTF8rs EZt1OG6GW/1+LiFNEjyXleBh19jhuTLQDnmqDvMU7WmDZfXsAkegMZ2N8d/i5WWh RFDK66+/D0SChd9XtJAJ4MgYsQIDAQABo4ICJzCCAiMwDgYDVR0PAQH/BAQDAgWg MBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKQh LUSfDnl9ED4WckC3wOs40vFrMB8GA1UdIwQYMBaAFGZpSdTeKpyRA8+JDiS4DjAD boguMDUGCCsGAQUFBwEBBCkwJzAlBggrBgEFBQcwAoYZaHR0cDovL2kucGtpLmdv b2cvd3IxLmNydDAjBgNVHREEHDAaggpvbG9tb3VjLmV1ggwqLm9sb21vdWMuZXUw EwYDVR0gBAwwCjAIBgZngQwBAgEwNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2Mu cGtpLmdvb2cvd3IxL3RtR0tCUXROVl9VLmNybDCCAQMGCisGAQQB1nkCBAIEgfQE gfEA7wB2ANdtfRDRp/V3wsfpX9cAv/mCyTNaZeHQswFzF8DIxWl3AAABoMZ66wAA AAQDAEcwRQIgc4w9a/lc8lRUvvUfY/dDjC2os24CGCnYu1975qMa4ycCIQDdkAnh pdOn2ZtMuCkCmTTi+K+t0o1YkbbSNYJAVkDFggB1ACW3796hEwGT7ZMHl3CqMiom Yg3jWsiqfHUZfeCxqeBlAAABoMZ665YAAAQDAEYwRAIgFLgbvX6nzXinkC7BlK+v yF0kZvaSY3qJOdp5rk1GBfECIEpgr/e+LiGqcnJkvI6Mzs20ITc/y7FtyO0Yko1V G/ynMA0GCSqGSIb3DQEBCwUAA4IBAQCCgX/9lz4FwOwKEx0XW7bDv35FAUcNztl9 +wCNW6UUKTiNXFbiJI2f3fuUZ3TDiSTvUtU3UxsqCpOouM2cEf9XYjXTzj3oXhLF VoGrTuEZ5pTzZIdUwxIVrfiTBKpTQ61D7FzuUoWl81jl4i2/WS0CgzELIJ/3SPvu PwODyAabNagKyYVI4zbzJ3AS8Xtfo41S8KlfI7TnJ5JVnrSCR4Vfnpt5GgyQDRbX yqp4IG2aGX17CBdz99N6WEDaOScB7K+gYkVG7UQeK0zVnaIXrDraxenkLMkZzywT dp0ubn7r970LR4wzAqp/7Zcl44/KxBddMdSvaj+MT6CIL/MKcJAd -----END CERTIFICATE-----
}
cert_commonName <hostCert#1> OK { 
olomouc.eu
}
cert_commonName_wo_SNI <hostCert#1> INFO { 
request w/o SNI didn't succeed
}
cert_subjectAltName <hostCert#1> INFO { 
olomouc.eu *.olomouc.eu
}
cert_trust <hostCert#1> OK { 
Ok via SAN wildcard (SNI mandatory)
}
cert_chain_of_trust <hostCert#1> OK { 
passed.
}
cert_certificatePolicies_EV <hostCert#1> INFO { 
no
}
cert_expirationStatus <hostCert#1> MEDIUM { 
expires < 60 days (37)
}
cert_notBefore <hostCert#1> INFO { 
2026-09-21 23:18
}
cert_notAfter <hostCert#1> MEDIUM { 
2026-12-21 00:16
}
cert_extlifeSpan <hostCert#1> OK { 
certificate has no extended life time according to browser forum
}
cert_eTLS <hostCert#1> INFO { 
not present
}
cert_crlDistributionPoints <hostCert#1> INFO { 
http://c.pki.goog/wr1/tmGKBQtNV_U.crl
}
cert_ocspURL <hostCert#1> INFO { 
--
}
OCSP_stapling <hostCert#1> INFO { 
not offered
}
cert_mustStapleExtension <hostCert#1> INFO { 
--
}
DNS_CAArecord <hostCert#1> OK { 
issue=comodoca.com, issue=digicert.com;, issue=letsencrypt.org, issue=pki.goog;, issue=ssl.com, issuewild=comodoca.com, issuewild=digicert.com;, issuewild=letsencrypt.org, issuewild=pki.goog;, issuewild=ssl.com
}
certificate_transparency <hostCert#1> OK { 
yes (certificate extension)
}
certs_countServer <hostCert#1> INFO { 
3
}
certs_list_ordering_problem <hostCert#1> INFO { 
no
}
cert_caIssuers <hostCert#1> INFO { 
WR1 (Google Trust Services from US)
}
intermediate_cert <#1> <hostCert#1> INFO { 
-----BEGIN CERTIFICATE----- MIIFCzCCAvOgAwIBAgIQf9niwtIEigR0tieibQhopzANBgkqhkiG9w0BAQsFADBH MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzEUMBIGA1UEAxMLR1RTIFJvb3QgUjEwHhcNMjMxMjEzMDkwMDAwWhcNMjkwMjIw MTQwMDAwWjA7MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNl cnZpY2VzMQwwCgYDVQQDEwNXUjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDPbjYWircr7kaYAx1TcA937qNLoHK+jyMtwkfGj1yN+T3mGo7uMyINyRFI uLBizvRpDXICfd7VJg/DbpvPfg7XIM/GkDujggbaOp3/bFa/3OlhlEXkabxPD8kT wK1hRHIggdAPK55oamJqj4oiV3lpK+IkM352YyxdvFFpfiMHsf92gfHuuFi1azUV 76HmSCg5lzHZBx+Vp56uz5i8no2KA+Gwl01Qb5NMSh/4233xkJkVf+OW7e4xgepy PVId3yVkpQtwqp7oqLlHyKdaECVgb0Lh1z/njwzwwoNGMyDmS3cEdqFop10VGO/Y KHc1rQ6tRuRibuKq+MzvN34PJrMHAgMBAAGjgf4wgfswDgYDVR0PAQH/BAQDAgGG MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAGAQH/ AgEAMB0GA1UdDgQWBBRmaUnU3iqckQPPiQ4kuA4wA26ILjAfBgNVHSMEGDAWgBTk rysmcRorSCeFL1JmLO/wiRNxPjA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAKG GGh0dHA6Ly9pLnBraS5nb29nL3IxLmNydDArBgNVHR8EJDAiMCCgHqAchhpodHRw Oi8vYy5wa2kuZ29vZy9yL3IxLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATANBgkq hkiG9w0BAQsFAAOCAgEATuazCBEgkWAn+VGQTQIY7rjBidUihJfm1t/mTjo7KQR+ 3iDx4o2L06oeF0Q3wpKYpQgI/TeMqUlYMWQmZbWPE0PX8pfsVAE5E5tVOjh34bNA JwDPVnsZVJwzN3nw5BGQ7sxRspFzIcM/qbbTpNeXf9II4Wsk2+Tv6FSVFZUL3/0u HradbruDWjRQ4IZ7mYqKiEqk08dpOZ+TmBzwykEGy1/IXberb6Ap1SSnn2+RI7t6 N/fqPCrwwFjp8kg1G6etRATGBaPYCx+GjJMFPX+k97Alvoj3/98SvqdegLPYEPjv xUclHpiKLD63NMmVarVQddIL6kOvTe5k0pnxRnR+mndGHIQc77TLbcZFeja56Pyn lSqmer578c7CBrPqo1BVmPyWUK+v6sGuzs7Mq7QQaxVs4710cI/MpPp1ovxMVt17 ENKxLk34LpEKAKVmqwnzbHHRjhXNeCC984XDOwLEp0K4MzHl8ZOWJQAakCdVlFC+ PyA3GP2JX/QLoqWNHGuN9c9vLObDhHVs/L+65De+OdnnjpFGI9xxtsNyRsyaHdFA f5z7ulOoXDXkHCCej/Ehs5docReNt16W2xbH/EBuirJrOzFE2rtALxksl1TdEjOf IKXOJfUqQeVI5+hA7V+n1+A/n7Npg0S+5ODytWh5XW54ccN1drJnMK54ttozh0c= -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#1> <hostCert#1> INFO { 
B10B6F00E609509E8700F6D34687A2BFCE38EA05A8FDF1CDC40C3A2A0D0D0E45
}
intermediate_cert_notBefore <#1> <hostCert#1> INFO { 
2023-12-13 09:00
}
intermediate_cert_notAfter <#1> <hostCert#1> OK { 
2029-02-20 14:00
}
intermediate_cert_expiration <#1> <hostCert#1> OK { 
ok > 40 days
}
intermediate_cert_chain <#1> <hostCert#1> INFO { 
WR1 <-- GTS Root R1
}
intermediate_cert <#2> <hostCert#1> INFO { 
-----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgIQd70NbNs2+RrqIQ/E8FjTDTANBgkqhkiG9w0BAQsFADBX MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEQMA4GA1UE CxMHUm9vdCBDQTEbMBkGA1UEAxMSR2xvYmFsU2lnbiBSb290IENBMB4XDTIwMDYx OTAwMDA0MloXDTI4MDEyODAwMDA0MlowRzELMAkGA1UEBhMCVVMxIjAgBgNVBAoT GUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBMTEMxFDASBgNVBAMTC0dUUyBSb290IFIx MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAthECix7joXebO9y/lD63 ladAPKH9gvl9MgaCcfb2jH/76Nu8ai6Xl6OMS/kr9rH5zoQdsfnFl97vufKj6bwS iV6nqlKr+CMny6SxnGPb15l+8Ape62im9MZaRw1NEDPjTrETo8gYbEvs/AmQ351k KSUjB6G00j0uYODP0gmHu81I8E3CwnqIiru6z1kZ1q+PsAewnjHxgsHA3y6mbWwZ DrXYfiYaRQM9sHmklCitD38m5agI/pboPGiUU+6DOogrFZYJsuB6jC511pzrp1Zk j5ZPaK49l8KEj8C8QMALXL32h7M1bKwYUH+E4EzNktMg6TO8UpmvMrUpsyUqtEj5 cuHKZPfmghCN6J3Cioj6OGaK/GP5Afl4/Xtcd/p2h/rs37EOeZVXtL0m79YB0esW CruOC7XFxYpVq9Os6pFLKcwZpDIlTirxZUTQAs6qzkm06p98g7BAe+dDq6dso499 iYH6TKX/1Y7DzkvgtdizjkXPdsDtQCv9Uw+wp9U7DbGKogPeMa3Md+pvez7W35Ei Eua++tgy/BBjFFFy3l3WFpO9KWgz7zpm7AeKJt8T11dleCfeXkkUAKIAf5qoIbap sZWwpbkNFhHax2xIPEDgfg1azVY80ZcFuctL7TlLnMQ/0lUTbiSw1nH69MG6zO0b 9f6BQdgAmD06yK56mDcYBZUCAwEAAaOCATgwggE0MA4GA1UdDwEB/wQEAwIBhjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTkrysmcRorSCeFL1JmLO/wiRNxPjAf BgNVHSMEGDAWgBRge2YaRQ2XyolQL30EzTSo//z9SzBgBggrBgEFBQcBAQRUMFIw JQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnBraS5nb29nL2dzcjEwKQYIKwYBBQUH MAKGHWh0dHA6Ly9wa2kuZ29vZy9nc3IxL2dzcjEuY3J0MDIGA1UdHwQrMCkwJ6Al oCOGIWh0dHA6Ly9jcmwucGtpLmdvb2cvZ3NyMS9nc3IxLmNybDA7BgNVHSAENDAy MAgGBmeBDAECATAIBgZngQwBAgIwDQYLKwYBBAHWeQIFAwIwDQYLKwYBBAHWeQIF AwMwDQYJKoZIhvcNAQELBQADggEBADSkHrEoo9C0dhemMXoh6dFSPsjbdBZBiLg9 NR3t5P+T4Vxfq7vqfM/b5A3Ri1fyJm9bvhdGaJQ3b2t6yMAYN/olUazsaL+yyEn9 WprKASOshIArAoyZl+tJaox118fessmXn1hIVw41oeQa1v1vg4Fv74zPl6/AhSrw 9U5pCZEt4Wi4wStz6dTZ/CLANx8LZh1J7QJVj2fhMtfTJr9w4z30Z209fOU0iOMy +qduBmpvvYuR7hZL6Dupszfnw0Skfths18dG9ZKb59UhvmaSGZRVbNQpsg3BZlvi d0lIKO2d1xozclOzgjXPYovJJIultzkMu34qQb9Sz/yilrbCgj8= -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#2> <hostCert#1> INFO { 
3EE0278DF71FA3C125C4CD487F01D774694E6FC57E0CD94C24EFD769133918E5
}
intermediate_cert_notBefore <#2> <hostCert#1> INFO { 
2020-06-19 00:00
}
intermediate_cert_notAfter <#2> <hostCert#1> OK { 
2028-01-28 00:00
}
intermediate_cert_expiration <#2> <hostCert#1> OK { 
ok > 40 days
}
intermediate_cert_chain <#2> <hostCert#1> INFO { 
GTS Root R1 <-- GlobalSign Root CA
}
intermediate_cert_badOCSP <hostCert#1> OK { 
intermediate certificate(s) is/are ok
}
cert_signatureAlgorithm <hostCert#2> OK { 
ECDSA with SHA256
}
cert_keySize <hostCert#2> OK { 
EC 256 bits (curve P-256)
}
cert_keyUsage <hostCert#2> INFO { 
Digital Signature
}
cert_extKeyUsage <hostCert#2> INFO { 
TLS Web Server Authentication
}
cert_serialNumber <hostCert#2> INFO { 
C2C7601356AA98950E2062A17C6C0141
}
cert_serialNumberLen <hostCert#2> INFO { 
16
}
cert_fingerprintSHA1 <hostCert#2> INFO { 
6B1BB10E72D010390C6E8910E6A245A0F4DFC1FF
}
cert_fingerprintSHA256 <hostCert#2> INFO { 
983D5A0FCB1F3B5F09C3CA18C44F3D18ABC285E22603D5B89630A32E8F614566
}
cert <hostCert#2> INFO { 
-----BEGIN CERTIFICATE----- MIIDeTCCAyCgAwIBAgIRAMLHYBNWqpiVDiBioXxsAUEwCgYIKoZIzj0EAwIwOzEL MAkGA1UEBhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczEMMAoG A1UEAxMDV0UxMB4XDTI2MDkyMTIzMTkwN1oXDTI2MTIyMTAwMTkwNVowFTETMBEG A1UEAxMKb2xvbW91Yy5ldTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABPFpbz6q mHrAZJnxqWbrQ2JZ8ejocdRfNywkdPrLm80C9VMRwgqAcwTF4/ssbUyqL+s+8nrT mm7WhHVDUmJb8UyjggIpMIICJTAOBgNVHQ8BAf8EBAMCB4AwEwYDVR0lBAwwCgYI KwYBBQUHAwEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUng2eolfu/jgHttFma6HJ LrsnISUwHwYDVR0jBBgwFoAUkHeSNWfE/6jMqeZ72YB5e8yT+TgwNQYIKwYBBQUH AQEEKTAnMCUGCCsGAQUFBzAChhlodHRwOi8vaS5wa2kuZ29vZy93ZTEuY3J0MCMG A1UdEQQcMBqCCm9sb21vdWMuZXWCDCoub2xvbW91Yy5ldTATBgNVHSAEDDAKMAgG BmeBDAECATA2BgNVHR8ELzAtMCugKaAnhiVodHRwOi8vYy5wa2kuZ29vZy93ZTEv c2pIVlVUTllPXzguY3JsMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAdNudWPfU fp39eHoWKpkcGM9pjafHKZGMmhiwRQ26RLwAAAGgxnsNhgAABAMASDBGAiEA3yR8 lZLwj8x14PTpaKG0L2X5GAJ/7AXaWSxyA7DfwHgCIQCH1S0lgO/TZCMJAUlj+dPz NmUurDzjbK7o4FVZIcDmCAB2ANgJVTuUT3r/yBYZb5RPhauw+Pxeh1UmDxXRLnK7 RUsUAAABoMZ7DUgAAAQDAEcwRQIhAM6q1u2NEtQIcN81l4TdcvvtGQLryUlU5SvO rIt1SSu3AiBDWFmXbiSK6VWG1q1BB4XAY9VZscM65XXXqmnjfuuBMzAKBggqhkjO PQQDAgNHADBEAiBTGBnInYPXU/G1uZfWqD/5Be4dfsviuY/UhQ+y3/X8FwIgTFj1 HCYnLOp4sTBw4HuX1puegmP4nySGWL60ES9LcB4= -----END CERTIFICATE-----
}
cert_commonName <hostCert#2> OK { 
olomouc.eu
}
cert_commonName_wo_SNI <hostCert#2> INFO { 
request w/o SNI didn't succeed, usual for EC certificates
}
cert_subjectAltName <hostCert#2> INFO { 
olomouc.eu *.olomouc.eu
}
cert_trust <hostCert#2> OK { 
Ok via SAN wildcard (SNI mandatory)
}
cert_chain_of_trust <hostCert#2> OK { 
passed.
}
cert_certificatePolicies_EV <hostCert#2> INFO { 
no
}
cert_expirationStatus <hostCert#2> MEDIUM { 
expires < 60 days (37)
}
cert_notBefore <hostCert#2> INFO { 
2026-09-21 23:19
}
cert_notAfter <hostCert#2> MEDIUM { 
2026-12-21 00:19
}
cert_extlifeSpan <hostCert#2> OK { 
certificate has no extended life time according to browser forum
}
cert_eTLS <hostCert#2> INFO { 
not present
}
cert_crlDistributionPoints <hostCert#2> INFO { 
http://c.pki.goog/we1/sjHVUTNYO_8.crl
}
cert_ocspURL <hostCert#2> INFO { 
--
}
OCSP_stapling <hostCert#2> INFO { 
not offered
}
cert_mustStapleExtension <hostCert#2> INFO { 
--
}
DNS_CAArecord <hostCert#2> OK { 
issue=comodoca.com, issue=digicert.com;, issue=letsencrypt.org, issue=pki.goog;, issue=ssl.com, issuewild=comodoca.com, issuewild=digicert.com;, issuewild=letsencrypt.org, issuewild=pki.goog;, issuewild=ssl.com
}
certificate_transparency <hostCert#2> OK { 
yes (certificate extension)
}
certs_countServer <hostCert#2> INFO { 
3
}
certs_list_ordering_problem <hostCert#2> INFO { 
no
}
cert_caIssuers <hostCert#2> INFO { 
WE1 (Google Trust Services from US)
}
intermediate_cert <#1> <hostCert#2> INFO { 
-----BEGIN CERTIFICATE----- MIICnzCCAiWgAwIBAgIQf/MZd5csIkp2FV0TttaF4zAKBggqhkjOPQQDAzBHMQsw CQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEU MBIGA1UEAxMLR1RTIFJvb3QgUjQwHhcNMjMxMjEzMDkwMDAwWhcNMjkwMjIwMTQw MDAwWjA7MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZp Y2VzMQwwCgYDVQQDEwNXRTEwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAARvzTr+ Z1dHTCEDhUDCR127WEcPQMFcF4XGGTfn1XzthkubgdnXGhOlCgP4mMTG6J7/EFmP LCaY9eYmJbsPAvpWo4H+MIH7MA4GA1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwEgYDVR0TAQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQU kHeSNWfE/6jMqeZ72YB5e8yT+TgwHwYDVR0jBBgwFoAUgEzW63T/STaj1dj8tT7F avCUHYwwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzAChhhodHRwOi8vaS5wa2ku Z29vZy9yNC5jcnQwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2MucGtpLmdvb2cv ci9yNC5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwCgYIKoZIzj0EAwMDaAAwZQIx AOcCq1HW90OVznX+0RGU1cxAQXomvtgM8zItPZCuFQ8jSBJSjz5keROv9aYsAm5V sQIwJonMaAFi54mrfhfoFNZEfuNMSQ6/bIBiNLiyoX46FohQvKeIoJ99cx7sUkFN 7uJW -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#1> <hostCert#2> INFO { 
1DFC1605FBAD358D8BC844F76D15203FAC9CA5C1A79FD4857FFAF2864FBEBF96
}
intermediate_cert_notBefore <#1> <hostCert#2> INFO { 
2023-12-13 09:00
}
intermediate_cert_notAfter <#1> <hostCert#2> OK { 
2029-02-20 14:00
}
intermediate_cert_expiration <#1> <hostCert#2> OK { 
ok > 40 days
}
intermediate_cert_chain <#1> <hostCert#2> INFO { 
WE1 <-- GTS Root R4
}
intermediate_cert <#2> <hostCert#2> INFO { 
-----BEGIN CERTIFICATE----- MIIDejCCAmKgAwIBAgIQf+UwvzMTQ77dghYQST2KGzANBgkqhkiG9w0BAQsFADBX MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEQMA4GA1UE CxMHUm9vdCBDQTEbMBkGA1UEAxMSR2xvYmFsU2lnbiBSb290IENBMB4XDTIzMTEx NTAzNDMyMVoXDTI4MDEyODAwMDA0MlowRzELMAkGA1UEBhMCVVMxIjAgBgNVBAoT GUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBMTEMxFDASBgNVBAMTC0dUUyBSb290IFI0 MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAE83Rzp2iLYK5DuDXFgTB7S0md+8Fhzube Rr1r1WEYNa5A3XP3iZEwWus87oV8okB2O6nGuEfYKueSkWpz6bFyOZ8pn6KY019e WIZlD6GEZQbR3IvJx3PIjGov5cSr0R2Ko4H/MIH8MA4GA1UdDwEB/wQEAwIBhjAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDwYDVR0TAQH/BAUwAwEB/zAd BgNVHQ4EFgQUgEzW63T/STaj1dj8tT7FavCUHYwwHwYDVR0jBBgwFoAUYHtmGkUN l8qJUC99BM00qP/8/UswNgYIKwYBBQUHAQEEKjAoMCYGCCsGAQUFBzAChhpodHRw Oi8vaS5wa2kuZ29vZy9nc3IxLmNydDAtBgNVHR8EJjAkMCKgIKAehhxodHRwOi8v Yy5wa2kuZ29vZy9yL2dzcjEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA0GCSqG SIb3DQEBCwUAA4IBAQAYQrsPBtYDh5bjP2OBDwmkoWhIDDkic574y04tfzHpn+cJ odI2D4SseesQ6bDrarZ7C30ddLibZatoKiws3UL9xnELz4ct92vID24FfVbiI1hY +SW6FoVHkNeWIP0GCbaM4C6uVdF5dTUsMVs/ZbzNnIdCp5Gxmx5ejvEau8otR/Cs kGN+hr/W5GvT1tMBjgWKZ1i4//emhA1JG1BbPzoLJQvyEotc03lXjTaCzv8mEbep 8RqZ7a2CPsgRbuvTPBwcOMBBmuFeU88+FSBX6+7iP0il8b4Z0QFqIwwMHfs/L6K1 vepuoxtGzi4CZ68zJpiq1UvSqTbFJjtbD4seiMHl -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#2> <hostCert#2> INFO { 
76B27B80A58027DC3CF1DA68DAC17010ED93997D0B603E2FADBE85012493B5A7
}
intermediate_cert_notBefore <#2> <hostCert#2> INFO { 
2023-11-15 03:43
}
intermediate_cert_notAfter <#2> <hostCert#2> OK { 
2028-01-28 00:00
}
intermediate_cert_expiration <#2> <hostCert#2> OK { 
ok > 40 days
}
intermediate_cert_chain <#2> <hostCert#2> INFO { 
GTS Root R4 <-- GlobalSign Root CA
}
intermediate_cert_badOCSP <hostCert#2> OK { 
intermediate certificate(s) is/are ok
}
HTTP_status_code INFO { 
200 OK ('/')
}
HTTP_clock_skew INFO { 
0 seconds from localtime
}
HTTP_headerTime INFO { 
1794605029
}
HSTS LOW { 
not offered
}
HPKP INFO { 
No support for HTTP Public Key Pinning
}
banner_server INFO { 
cloudflare
}
banner_application INFO { 
No application banner found
}
cookie_count INFO { 
1 at '/'
}
cookie_secure INFO { 
0/1 at '/' marked as secure
}
cookie_httponly INFO { 
0/1 at '/' marked as HttpOnly
}
X-Frame-Options OK { 
SAMEORIGIN
}
Cache-Control INFO { 
maxage=0
}
Pragma INFO { 
no-cache
}
banner_reverseproxy
zranitelnosti: CWE-200
INFO { 
--
}
heartbleed
zranitelnosti: CVE-2014-0160 CWE-119
OK { 
not vulnerable, no heartbeat extension
}
CCS
zranitelnosti: CVE-2014-0224 CWE-310
OK { 
not vulnerable
}
ticketbleed
zranitelnosti: CVE-2016-9244 CWE-200
OK { 
not vulnerable
}
ROBOT
zranitelnosti: CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168 CWE-203
OK { 
not vulnerable
}
secure_renego
zranitelnosti: CWE-310
WARN { 
OpenSSL handshake didn't succeed
}
secure_client_renego
zranitelnosti: CVE-2011-1473 CWE-310
OK { 
not vulnerable
}
CRIME_TLS
zranitelnosti: CVE-2012-4929 CWE-310
OK { 
not vulnerable
}
BREACH
zranitelnosti: CVE-2013-3587 CWE-310
MEDIUM { 
potentially VULNERABLE, br gzip HTTP compression detected  - only supplied '/' tested
}
POODLE_SSL
zranitelnosti: CVE-2014-3566 CWE-310
OK { 
not vulnerable, no SSLv3
}
fallback_SCSV OK { 
supported
}
SWEET32
zranitelnosti: CVE-2016-2183 CVE-2016-6329 CWE-327
LOW { 
uses 64 bit block ciphers
}
FREAK
zranitelnosti: CVE-2015-0204 CWE-310
OK { 
not vulnerable
}
DROWN
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
OK { 
not vulnerable on this host and port
}
DROWN_hint
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
INFO { 
Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=070D0659BBD38A9A152064759B2DA5B4CD57EE62E260732D9C5CA8A770101530
}
LOGJAM
zranitelnosti: CVE-2015-4000 CWE-310
OK { 
not vulnerable, no DH EXPORT ciphers,
}
LOGJAM-common_primes
zranitelnosti: CVE-2015-4000 CWE-310
OK { 
no DH key with <= TLS 1.2
}
BEAST_CBC_TLS1
zranitelnosti: CVE-2011-3389 CWE-20
MEDIUM { 
ECDHE-RSA-AES128-SHA AES128-SHA ECDHE-RSA-AES256-SHA AES256-SHA DES-CBC3-SHA
}
BEAST
zranitelnosti: CVE-2011-3389 CWE-20
LOW { 
VULNERABLE -- but also supports higher protocols  TLSv1.1 TLSv1.2 (likely mitigated)
}
LUCKY13
zranitelnosti: CVE-2013-0169 CWE-310
LOW { 
potentially vulnerable, uses TLS CBC ciphers
}
winshock
zranitelnosti: CVE-2014-6321 CWE-94
OK { 
not vulnerable
}
RC4
zranitelnosti: CVE-2013-2566 CVE-2015-2808 CWE-310
OK { 
not vulnerable
}
clientsimulation-android_442 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_500 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_60 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_70 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_81 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_90 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-android_X INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-chrome_74_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-chrome_79_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-firefox_66_win81 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-firefox_71_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-ie_6_xp INFO { 
No connection
}
clientsimulation-ie_8_win7 INFO { 
TLSv1.0 ECDHE-RSA-AES128-SHA
}
clientsimulation-ie_8_xp INFO { 
No connection
}
clientsimulation-ie_11_win7 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-ie_11_win81 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-ie_11_winphone81 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-ie_11_win10 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-edge_15_win10 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-edge_17_win10 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-opera_66_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-safari_9_ios9 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-safari_9_osx1011 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-safari_10_osx1012 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-safari_121_ios_122 INFO { 
TLSv1.3 TLS_CHACHA20_POLY1305_SHA256
}
clientsimulation-safari_130_osx_10146 INFO { 
TLSv1.3 TLS_CHACHA20_POLY1305_SHA256
}
clientsimulation-apple_ats_9_ios9 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-java_6u45 INFO { 
No connection
}
clientsimulation-java_7u25 INFO { 
TLSv1.0 ECDHE-RSA-AES128-SHA
}
clientsimulation-java_8u161 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-java1102 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-java1201 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-openssl_102e INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-openssl_110l INFO { 
TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305
}
clientsimulation-openssl_111d INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-thunderbird_68_3_1 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
rating_spec INFO { 
SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)
}
rating_doc INFO { 
https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide
}
protocol_support_score INFO { 
95
}
protocol_support_score_weighted INFO { 
28
}
key_exchange_score INFO { 
90
}
key_exchange_score_weighted INFO { 
27
}
cipher_strength_score INFO { 
90
}
cipher_strength_score_weighted INFO { 
36
}
final_score INFO { 
91
}
overall_grade MEDIUM { 
B
}
grade_cap_reason_1 INFO { 
Grade capped to B. TLS 1.1 offered
}
grade_cap_reason_2 INFO { 
Grade capped to B. TLS 1.0 offered
}
grade_cap_reason_3 INFO { 
Grade capped to A. HSTS is not offered
}
server www.olomouc.eu/104.26.13.29
pre_128cipher INFO { 
No 128 cipher limit bug
}
SSLv2 OK { 
not offered
}
SSLv3 OK { 
not offered
}
TLS1 LOW { 
offered (deprecated)
}
TLS1_1 LOW { 
offered (deprecated)
}
TLS1_2 OK { 
offered
}
TLS1_3 OK { 
offered with final
}
NPN INFO { 
offered with h2, http/1.1 (advertised)
}
ALPN_HTTP2 OK { 
h2
}
ALPN INFO { 
http/1.1
}
cipherlist_NULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_aNULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_EXPORT
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_LOW
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_3DES_IDEA
zranitelnosti: CWE-310
MEDIUM { 
offered
}
cipherlist_AVERAGE
zranitelnosti: CWE-310
LOW { 
offered
}
cipherlist_GOOD OK { 
offered
}
cipherlist_STRONG OK { 
offered
}
cipher_order OK { 
server -- TLS 1.3 client determined
}
protocol_negotiated OK { 
Default protocol TLS1.3
}
cipher_negotiated OK { 
TLS_AES_256_GCM_SHA384, 253 bit ECDH (X25519)
}
cipher-tls1_xc013 LOW { 
TLSv1   xc013   ECDHE-RSA-AES128-SHA              ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_x2f LOW { 
TLSv1   x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_xc014 LOW { 
TLSv1   xc014   ECDHE-RSA-AES256-SHA              ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_x35 LOW { 
TLSv1   x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_x0a MEDIUM { 
TLSv1   x0a     DES-CBC3-SHA                      RSA        3DES        168      TLS_RSA_WITH_3DES_EDE_CBC_SHA
}
cipherorder_TLSv1 INFO { 
ECDHE-RSA-AES128-SHA AES128-SHA ECDHE-RSA-AES256-SHA AES256-SHA DES-CBC3-SHA
}
cipher-tls1_1_xc013 LOW { 
TLSv1.1   xc013   ECDHE-RSA-AES128-SHA              ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_1_x2f LOW { 
TLSv1.1   x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_1_xc014 LOW { 
TLSv1.1   xc014   ECDHE-RSA-AES256-SHA              ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_1_x35 LOW { 
TLSv1.1   x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA
}
cipherorder_TLSv1_1 INFO { 
ECDHE-RSA-AES128-SHA AES128-SHA ECDHE-RSA-AES256-SHA AES256-SHA
}
cipher-tls1_2_xc02b OK { 
TLSv1.2   xc02b   ECDHE-ECDSA-AES128-GCM-SHA256     ECDH 253   AESGCM      128      TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_xcca9 OK { 
TLSv1.2   xcca9   ECDHE-ECDSA-CHACHA20-POLY1305     ECDH 253   ChaCha20    256      TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
}
cipher-tls1_2_xc009 LOW { 
TLSv1.2   xc009   ECDHE-ECDSA-AES128-SHA            ECDH 253   AES         128      TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_2_xc02c OK { 
TLSv1.2   xc02c   ECDHE-ECDSA-AES256-GCM-SHA384     ECDH 253   AESGCM      256      TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_xc00a LOW { 
TLSv1.2   xc00a   ECDHE-ECDSA-AES256-SHA            ECDH 253   AES         256      TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_2_xc023 LOW { 
TLSv1.2   xc023   ECDHE-ECDSA-AES128-SHA256         ECDH 253   AES         128      TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
}
cipher-tls1_2_xc024 LOW { 
TLSv1.2   xc024   ECDHE-ECDSA-AES256-SHA384         ECDH 253   AES         256      TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
}
cipher-tls1_2_xc02f OK { 
TLSv1.2   xc02f   ECDHE-RSA-AES128-GCM-SHA256       ECDH 253   AESGCM      128      TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_xcca8 OK { 
TLSv1.2   xcca8   ECDHE-RSA-CHACHA20-POLY1305       ECDH 253   ChaCha20    256      TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
}
cipher-tls1_2_xc013 LOW { 
TLSv1.2   xc013   ECDHE-RSA-AES128-SHA              ECDH 253   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_2_x9c OK { 
TLSv1.2   x9c     AES128-GCM-SHA256                 RSA        AESGCM      128      TLS_RSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_x2f LOW { 
TLSv1.2   x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_2_xc030 OK { 
TLSv1.2   xc030   ECDHE-RSA-AES256-GCM-SHA384       ECDH 253   AESGCM      256      TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_xc014 LOW { 
TLSv1.2   xc014   ECDHE-RSA-AES256-SHA              ECDH 253   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_2_x9d OK { 
TLSv1.2   x9d     AES256-GCM-SHA384                 RSA        AESGCM      256      TLS_RSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_x35 LOW { 
TLSv1.2   x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_2_xc027 LOW { 
TLSv1.2   xc027   ECDHE-RSA-AES128-SHA256           ECDH 253   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
}
cipher-tls1_2_x3c LOW { 
TLSv1.2   x3c     AES128-SHA256                     RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA256
}
cipher-tls1_2_xc028 LOW { 
TLSv1.2   xc028   ECDHE-RSA-AES256-SHA384           ECDH 253   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
}
cipher-tls1_2_x3d LOW { 
TLSv1.2   x3d     AES256-SHA256                     RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA256
}
cipherorder_TLSv1_2 INFO { 
ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-CHACHA20-POLY1305 ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES256-SHA384 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-CHACHA20-POLY1305 ECDHE-RSA-AES128-SHA AES128-GCM-SHA256 AES128-SHA ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA AES256-GCM-SHA384 AES256-SHA ECDHE-RSA-AES128-SHA256 AES128-SHA256 ECDHE-RSA-AES256-SHA384 AES256-SHA256
}
prioritize_chacha_TLSv1_2 INFO { 
true
}
cipher-tls1_3_x1302 OK { 
TLSv1.3   x1302   TLS_AES_256_GCM_SHA384            ECDH 253   AESGCM      256      TLS_AES_256_GCM_SHA384
}
cipher-tls1_3_x1303 OK { 
TLSv1.3   x1303   TLS_CHACHA20_POLY1305_SHA256      ECDH 253   ChaCha20    256      TLS_CHACHA20_POLY1305_SHA256
}
cipher-tls1_3_x1301 OK { 
TLSv1.3   x1301   TLS_AES_128_GCM_SHA256            ECDH 253   AESGCM      128      TLS_AES_128_GCM_SHA256
}
supportedciphers_TLSv1_3 INFO { 
TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 TLS_AES_128_GCM_SHA256
}
FS OK { 
offered
}
FS_ciphers INFO { 
TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-ECDSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-CHACHA20-POLY1305 ECDHE-RSA-CHACHA20-POLY1305 TLS_AES_128_GCM_SHA256 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-ECDSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-ECDSA-AES128-SHA
}
FS_ECDHE_curves OK { 
prime256v1 secp384r1 secp521r1 X25519
}
TLS_extensions INFO { 
'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'next protocol/#13172' 'key share/#51' 'supported versions/#43' 'extended master secret/#23' 'application layer protocol negotiation/#16' 'compress_certificate/#27'
}
TLS_session_ticket INFO { 
valid for 64800 seconds only (<daily)
}
SSL_sessionID_support INFO { 
yes
}
sessionresumption_ticket INFO { 
supported
}
sessionresumption_ID INFO { 
supported
}
TLS_timestamp INFO { 
off by 0 seconds from your localtime
}
certificate_compression INFO { 
0002/Brotli
}
clientAuth INFO { 
none
}
cert_numbers INFO { 
2
}
cert_signatureAlgorithm <hostCert#1> OK { 
SHA256 with RSA
}
cert_keySize <hostCert#1> INFO { 
RSA 2048 bits (exponent is 65537)
}
cert_keyUsage <hostCert#1> INFO { 
Digital Signature, Key Encipherment
}
cert_extKeyUsage <hostCert#1> INFO { 
TLS Web Server Authentication
}
cert_serialNumber <hostCert#1> INFO { 
1D8D92462001A46A1300E6C89CE23902
}
cert_serialNumberLen <hostCert#1> INFO { 
16
}
cert_fingerprintSHA1 <hostCert#1> INFO { 
D09FF121942303A2AB64CA3E10A7FB5854368606
}
cert_fingerprintSHA256 <hostCert#1> INFO { 
070D0659BBD38A9A152064759B2DA5B4CD57EE62E260732D9C5CA8A770101530
}
cert <hostCert#1> INFO { 
-----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIQHY2SRiABpGoTAObInOI5AjANBgkqhkiG9w0BAQsFADA7 MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZpY2VzMQww CgYDVQQDEwNXUjEwHhcNMjYwOTIxMjMxODU4WhcNMjYxMjIxMDAxNjM0WjAVMRMw EQYDVQQDEwpvbG9tb3VjLmV1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtA0R6GpiR7HiHy1sl4PbvCnQYXPJClSc31rCBtA10dz6xRjMbS3EfPKkrP7U ykxOQzvOEjHqYGPGES11lTTxRrAnC64Lusyqz6IqqYVAlpqoA9aG4+OHY+ZN56eF iw67780VWDiYdO3WbUx/65m+rA6xlSyoGjbfoJOjLgbw0UF+LEw63/3cSrkyrcZz 00O1iQS+7zfDBEt/wfbfKkikqrRj+k/kli34lH3c/OhOA20wX36IK/ynv5FTF8rs EZt1OG6GW/1+LiFNEjyXleBh19jhuTLQDnmqDvMU7WmDZfXsAkegMZ2N8d/i5WWh RFDK66+/D0SChd9XtJAJ4MgYsQIDAQABo4ICJzCCAiMwDgYDVR0PAQH/BAQDAgWg MBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKQh LUSfDnl9ED4WckC3wOs40vFrMB8GA1UdIwQYMBaAFGZpSdTeKpyRA8+JDiS4DjAD boguMDUGCCsGAQUFBwEBBCkwJzAlBggrBgEFBQcwAoYZaHR0cDovL2kucGtpLmdv b2cvd3IxLmNydDAjBgNVHREEHDAaggpvbG9tb3VjLmV1ggwqLm9sb21vdWMuZXUw EwYDVR0gBAwwCjAIBgZngQwBAgEwNgYDVR0fBC8wLTAroCmgJ4YlaHR0cDovL2Mu cGtpLmdvb2cvd3IxL3RtR0tCUXROVl9VLmNybDCCAQMGCisGAQQB1nkCBAIEgfQE gfEA7wB2ANdtfRDRp/V3wsfpX9cAv/mCyTNaZeHQswFzF8DIxWl3AAABoMZ66wAA AAQDAEcwRQIgc4w9a/lc8lRUvvUfY/dDjC2os24CGCnYu1975qMa4ycCIQDdkAnh pdOn2ZtMuCkCmTTi+K+t0o1YkbbSNYJAVkDFggB1ACW3796hEwGT7ZMHl3CqMiom Yg3jWsiqfHUZfeCxqeBlAAABoMZ665YAAAQDAEYwRAIgFLgbvX6nzXinkC7BlK+v yF0kZvaSY3qJOdp5rk1GBfECIEpgr/e+LiGqcnJkvI6Mzs20ITc/y7FtyO0Yko1V G/ynMA0GCSqGSIb3DQEBCwUAA4IBAQCCgX/9lz4FwOwKEx0XW7bDv35FAUcNztl9 +wCNW6UUKTiNXFbiJI2f3fuUZ3TDiSTvUtU3UxsqCpOouM2cEf9XYjXTzj3oXhLF VoGrTuEZ5pTzZIdUwxIVrfiTBKpTQ61D7FzuUoWl81jl4i2/WS0CgzELIJ/3SPvu PwODyAabNagKyYVI4zbzJ3AS8Xtfo41S8KlfI7TnJ5JVnrSCR4Vfnpt5GgyQDRbX yqp4IG2aGX17CBdz99N6WEDaOScB7K+gYkVG7UQeK0zVnaIXrDraxenkLMkZzywT dp0ubn7r970LR4wzAqp/7Zcl44/KxBddMdSvaj+MT6CIL/MKcJAd -----END CERTIFICATE-----
}
cert_commonName <hostCert#1> OK { 
olomouc.eu
}
cert_commonName_wo_SNI <hostCert#1> INFO { 
request w/o SNI didn't succeed
}
cert_subjectAltName <hostCert#1> INFO { 
olomouc.eu *.olomouc.eu
}
cert_trust <hostCert#1> OK { 
Ok via SAN wildcard (SNI mandatory)
}
cert_chain_of_trust <hostCert#1> OK { 
passed.
}
cert_certificatePolicies_EV <hostCert#1> INFO { 
no
}
cert_expirationStatus <hostCert#1> MEDIUM { 
expires < 60 days (37)
}
cert_notBefore <hostCert#1> INFO { 
2026-09-21 23:18
}
cert_notAfter <hostCert#1> MEDIUM { 
2026-12-21 00:16
}
cert_extlifeSpan <hostCert#1> OK { 
certificate has no extended life time according to browser forum
}
cert_eTLS <hostCert#1> INFO { 
not present
}
cert_crlDistributionPoints <hostCert#1> INFO { 
http://c.pki.goog/wr1/tmGKBQtNV_U.crl
}
cert_ocspURL <hostCert#1> INFO { 
--
}
OCSP_stapling <hostCert#1> INFO { 
not offered
}
cert_mustStapleExtension <hostCert#1> INFO { 
--
}
DNS_CAArecord <hostCert#1> OK { 
issue=comodoca.com, issue=digicert.com;, issue=letsencrypt.org, issue=pki.goog;, issue=ssl.com, issuewild=comodoca.com, issuewild=digicert.com;, issuewild=letsencrypt.org, issuewild=pki.goog;, issuewild=ssl.com
}
certificate_transparency <hostCert#1> OK { 
yes (certificate extension)
}
certs_countServer <hostCert#1> INFO { 
3
}
certs_list_ordering_problem <hostCert#1> INFO { 
no
}
cert_caIssuers <hostCert#1> INFO { 
WR1 (Google Trust Services from US)
}
intermediate_cert <#1> <hostCert#1> INFO { 
-----BEGIN CERTIFICATE----- MIIFCzCCAvOgAwIBAgIQf9niwtIEigR0tieibQhopzANBgkqhkiG9w0BAQsFADBH MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzEUMBIGA1UEAxMLR1RTIFJvb3QgUjEwHhcNMjMxMjEzMDkwMDAwWhcNMjkwMjIw MTQwMDAwWjA7MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNl cnZpY2VzMQwwCgYDVQQDEwNXUjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDPbjYWircr7kaYAx1TcA937qNLoHK+jyMtwkfGj1yN+T3mGo7uMyINyRFI uLBizvRpDXICfd7VJg/DbpvPfg7XIM/GkDujggbaOp3/bFa/3OlhlEXkabxPD8kT wK1hRHIggdAPK55oamJqj4oiV3lpK+IkM352YyxdvFFpfiMHsf92gfHuuFi1azUV 76HmSCg5lzHZBx+Vp56uz5i8no2KA+Gwl01Qb5NMSh/4233xkJkVf+OW7e4xgepy PVId3yVkpQtwqp7oqLlHyKdaECVgb0Lh1z/njwzwwoNGMyDmS3cEdqFop10VGO/Y KHc1rQ6tRuRibuKq+MzvN34PJrMHAgMBAAGjgf4wgfswDgYDVR0PAQH/BAQDAgGG MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAGAQH/ AgEAMB0GA1UdDgQWBBRmaUnU3iqckQPPiQ4kuA4wA26ILjAfBgNVHSMEGDAWgBTk rysmcRorSCeFL1JmLO/wiRNxPjA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAKG GGh0dHA6Ly9pLnBraS5nb29nL3IxLmNydDArBgNVHR8EJDAiMCCgHqAchhpodHRw Oi8vYy5wa2kuZ29vZy9yL3IxLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATANBgkq hkiG9w0BAQsFAAOCAgEATuazCBEgkWAn+VGQTQIY7rjBidUihJfm1t/mTjo7KQR+ 3iDx4o2L06oeF0Q3wpKYpQgI/TeMqUlYMWQmZbWPE0PX8pfsVAE5E5tVOjh34bNA JwDPVnsZVJwzN3nw5BGQ7sxRspFzIcM/qbbTpNeXf9II4Wsk2+Tv6FSVFZUL3/0u HradbruDWjRQ4IZ7mYqKiEqk08dpOZ+TmBzwykEGy1/IXberb6Ap1SSnn2+RI7t6 N/fqPCrwwFjp8kg1G6etRATGBaPYCx+GjJMFPX+k97Alvoj3/98SvqdegLPYEPjv xUclHpiKLD63NMmVarVQddIL6kOvTe5k0pnxRnR+mndGHIQc77TLbcZFeja56Pyn lSqmer578c7CBrPqo1BVmPyWUK+v6sGuzs7Mq7QQaxVs4710cI/MpPp1ovxMVt17 ENKxLk34LpEKAKVmqwnzbHHRjhXNeCC984XDOwLEp0K4MzHl8ZOWJQAakCdVlFC+ PyA3GP2JX/QLoqWNHGuN9c9vLObDhHVs/L+65De+OdnnjpFGI9xxtsNyRsyaHdFA f5z7ulOoXDXkHCCej/Ehs5docReNt16W2xbH/EBuirJrOzFE2rtALxksl1TdEjOf IKXOJfUqQeVI5+hA7V+n1+A/n7Npg0S+5ODytWh5XW54ccN1drJnMK54ttozh0c= -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#1> <hostCert#1> INFO { 
B10B6F00E609509E8700F6D34687A2BFCE38EA05A8FDF1CDC40C3A2A0D0D0E45
}
intermediate_cert_notBefore <#1> <hostCert#1> INFO { 
2023-12-13 09:00
}
intermediate_cert_notAfter <#1> <hostCert#1> OK { 
2029-02-20 14:00
}
intermediate_cert_expiration <#1> <hostCert#1> OK { 
ok > 40 days
}
intermediate_cert_chain <#1> <hostCert#1> INFO { 
WR1 <-- GTS Root R1
}
intermediate_cert <#2> <hostCert#1> INFO { 
-----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgIQd70NbNs2+RrqIQ/E8FjTDTANBgkqhkiG9w0BAQsFADBX MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEQMA4GA1UE CxMHUm9vdCBDQTEbMBkGA1UEAxMSR2xvYmFsU2lnbiBSb290IENBMB4XDTIwMDYx OTAwMDA0MloXDTI4MDEyODAwMDA0MlowRzELMAkGA1UEBhMCVVMxIjAgBgNVBAoT GUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBMTEMxFDASBgNVBAMTC0dUUyBSb290IFIx MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAthECix7joXebO9y/lD63 ladAPKH9gvl9MgaCcfb2jH/76Nu8ai6Xl6OMS/kr9rH5zoQdsfnFl97vufKj6bwS iV6nqlKr+CMny6SxnGPb15l+8Ape62im9MZaRw1NEDPjTrETo8gYbEvs/AmQ351k KSUjB6G00j0uYODP0gmHu81I8E3CwnqIiru6z1kZ1q+PsAewnjHxgsHA3y6mbWwZ DrXYfiYaRQM9sHmklCitD38m5agI/pboPGiUU+6DOogrFZYJsuB6jC511pzrp1Zk j5ZPaK49l8KEj8C8QMALXL32h7M1bKwYUH+E4EzNktMg6TO8UpmvMrUpsyUqtEj5 cuHKZPfmghCN6J3Cioj6OGaK/GP5Afl4/Xtcd/p2h/rs37EOeZVXtL0m79YB0esW CruOC7XFxYpVq9Os6pFLKcwZpDIlTirxZUTQAs6qzkm06p98g7BAe+dDq6dso499 iYH6TKX/1Y7DzkvgtdizjkXPdsDtQCv9Uw+wp9U7DbGKogPeMa3Md+pvez7W35Ei Eua++tgy/BBjFFFy3l3WFpO9KWgz7zpm7AeKJt8T11dleCfeXkkUAKIAf5qoIbap sZWwpbkNFhHax2xIPEDgfg1azVY80ZcFuctL7TlLnMQ/0lUTbiSw1nH69MG6zO0b 9f6BQdgAmD06yK56mDcYBZUCAwEAAaOCATgwggE0MA4GA1UdDwEB/wQEAwIBhjAP BgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTkrysmcRorSCeFL1JmLO/wiRNxPjAf BgNVHSMEGDAWgBRge2YaRQ2XyolQL30EzTSo//z9SzBgBggrBgEFBQcBAQRUMFIw JQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnBraS5nb29nL2dzcjEwKQYIKwYBBQUH MAKGHWh0dHA6Ly9wa2kuZ29vZy9nc3IxL2dzcjEuY3J0MDIGA1UdHwQrMCkwJ6Al oCOGIWh0dHA6Ly9jcmwucGtpLmdvb2cvZ3NyMS9nc3IxLmNybDA7BgNVHSAENDAy MAgGBmeBDAECATAIBgZngQwBAgIwDQYLKwYBBAHWeQIFAwIwDQYLKwYBBAHWeQIF AwMwDQYJKoZIhvcNAQELBQADggEBADSkHrEoo9C0dhemMXoh6dFSPsjbdBZBiLg9 NR3t5P+T4Vxfq7vqfM/b5A3Ri1fyJm9bvhdGaJQ3b2t6yMAYN/olUazsaL+yyEn9 WprKASOshIArAoyZl+tJaox118fessmXn1hIVw41oeQa1v1vg4Fv74zPl6/AhSrw 9U5pCZEt4Wi4wStz6dTZ/CLANx8LZh1J7QJVj2fhMtfTJr9w4z30Z209fOU0iOMy +qduBmpvvYuR7hZL6Dupszfnw0Skfths18dG9ZKb59UhvmaSGZRVbNQpsg3BZlvi d0lIKO2d1xozclOzgjXPYovJJIultzkMu34qQb9Sz/yilrbCgj8= -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#2> <hostCert#1> INFO { 
3EE0278DF71FA3C125C4CD487F01D774694E6FC57E0CD94C24EFD769133918E5
}
intermediate_cert_notBefore <#2> <hostCert#1> INFO { 
2020-06-19 00:00
}
intermediate_cert_notAfter <#2> <hostCert#1> OK { 
2028-01-28 00:00
}
intermediate_cert_expiration <#2> <hostCert#1> OK { 
ok > 40 days
}
intermediate_cert_chain <#2> <hostCert#1> INFO { 
GTS Root R1 <-- GlobalSign Root CA
}
intermediate_cert_badOCSP <hostCert#1> OK { 
intermediate certificate(s) is/are ok
}
cert_signatureAlgorithm <hostCert#2> OK { 
ECDSA with SHA256
}
cert_keySize <hostCert#2> OK { 
EC 256 bits (curve P-256)
}
cert_keyUsage <hostCert#2> INFO { 
Digital Signature
}
cert_extKeyUsage <hostCert#2> INFO { 
TLS Web Server Authentication
}
cert_serialNumber <hostCert#2> INFO { 
C2C7601356AA98950E2062A17C6C0141
}
cert_serialNumberLen <hostCert#2> INFO { 
16
}
cert_fingerprintSHA1 <hostCert#2> INFO { 
6B1BB10E72D010390C6E8910E6A245A0F4DFC1FF
}
cert_fingerprintSHA256 <hostCert#2> INFO { 
983D5A0FCB1F3B5F09C3CA18C44F3D18ABC285E22603D5B89630A32E8F614566
}
cert <hostCert#2> INFO { 
-----BEGIN CERTIFICATE----- MIIDeTCCAyCgAwIBAgIRAMLHYBNWqpiVDiBioXxsAUEwCgYIKoZIzj0EAwIwOzEL MAkGA1UEBhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczEMMAoG A1UEAxMDV0UxMB4XDTI2MDkyMTIzMTkwN1oXDTI2MTIyMTAwMTkwNVowFTETMBEG A1UEAxMKb2xvbW91Yy5ldTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABPFpbz6q mHrAZJnxqWbrQ2JZ8ejocdRfNywkdPrLm80C9VMRwgqAcwTF4/ssbUyqL+s+8nrT mm7WhHVDUmJb8UyjggIpMIICJTAOBgNVHQ8BAf8EBAMCB4AwEwYDVR0lBAwwCgYI KwYBBQUHAwEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUng2eolfu/jgHttFma6HJ LrsnISUwHwYDVR0jBBgwFoAUkHeSNWfE/6jMqeZ72YB5e8yT+TgwNQYIKwYBBQUH AQEEKTAnMCUGCCsGAQUFBzAChhlodHRwOi8vaS5wa2kuZ29vZy93ZTEuY3J0MCMG A1UdEQQcMBqCCm9sb21vdWMuZXWCDCoub2xvbW91Yy5ldTATBgNVHSAEDDAKMAgG BmeBDAECATA2BgNVHR8ELzAtMCugKaAnhiVodHRwOi8vYy5wa2kuZ29vZy93ZTEv c2pIVlVUTllPXzguY3JsMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAdNudWPfU fp39eHoWKpkcGM9pjafHKZGMmhiwRQ26RLwAAAGgxnsNhgAABAMASDBGAiEA3yR8 lZLwj8x14PTpaKG0L2X5GAJ/7AXaWSxyA7DfwHgCIQCH1S0lgO/TZCMJAUlj+dPz NmUurDzjbK7o4FVZIcDmCAB2ANgJVTuUT3r/yBYZb5RPhauw+Pxeh1UmDxXRLnK7 RUsUAAABoMZ7DUgAAAQDAEcwRQIhAM6q1u2NEtQIcN81l4TdcvvtGQLryUlU5SvO rIt1SSu3AiBDWFmXbiSK6VWG1q1BB4XAY9VZscM65XXXqmnjfuuBMzAKBggqhkjO PQQDAgNHADBEAiBTGBnInYPXU/G1uZfWqD/5Be4dfsviuY/UhQ+y3/X8FwIgTFj1 HCYnLOp4sTBw4HuX1puegmP4nySGWL60ES9LcB4= -----END CERTIFICATE-----
}
cert_commonName <hostCert#2> OK { 
olomouc.eu
}
cert_commonName_wo_SNI <hostCert#2> INFO { 
request w/o SNI didn't succeed, usual for EC certificates
}
cert_subjectAltName <hostCert#2> INFO { 
olomouc.eu *.olomouc.eu
}
cert_trust <hostCert#2> OK { 
Ok via SAN wildcard (SNI mandatory)
}
cert_chain_of_trust <hostCert#2> OK { 
passed.
}
cert_certificatePolicies_EV <hostCert#2> INFO { 
no
}
cert_expirationStatus <hostCert#2> MEDIUM { 
expires < 60 days (37)
}
cert_notBefore <hostCert#2> INFO { 
2026-09-21 23:19
}
cert_notAfter <hostCert#2> MEDIUM { 
2026-12-21 00:19
}
cert_extlifeSpan <hostCert#2> OK { 
certificate has no extended life time according to browser forum
}
cert_eTLS <hostCert#2> INFO { 
not present
}
cert_crlDistributionPoints <hostCert#2> INFO { 
http://c.pki.goog/we1/sjHVUTNYO_8.crl
}
cert_ocspURL <hostCert#2> INFO { 
--
}
OCSP_stapling <hostCert#2> INFO { 
not offered
}
cert_mustStapleExtension <hostCert#2> INFO { 
--
}
DNS_CAArecord <hostCert#2> OK { 
issue=comodoca.com, issue=digicert.com;, issue=letsencrypt.org, issue=pki.goog;, issue=ssl.com, issuewild=comodoca.com, issuewild=digicert.com;, issuewild=letsencrypt.org, issuewild=pki.goog;, issuewild=ssl.com
}
certificate_transparency <hostCert#2> OK { 
yes (certificate extension)
}
certs_countServer <hostCert#2> INFO { 
3
}
certs_list_ordering_problem <hostCert#2> INFO { 
no
}
cert_caIssuers <hostCert#2> INFO { 
WE1 (Google Trust Services from US)
}
intermediate_cert <#1> <hostCert#2> INFO { 
-----BEGIN CERTIFICATE----- MIICnzCCAiWgAwIBAgIQf/MZd5csIkp2FV0TttaF4zAKBggqhkjOPQQDAzBHMQsw CQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEU MBIGA1UEAxMLR1RTIFJvb3QgUjQwHhcNMjMxMjEzMDkwMDAwWhcNMjkwMjIwMTQw MDAwWjA7MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZp Y2VzMQwwCgYDVQQDEwNXRTEwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAARvzTr+ Z1dHTCEDhUDCR127WEcPQMFcF4XGGTfn1XzthkubgdnXGhOlCgP4mMTG6J7/EFmP LCaY9eYmJbsPAvpWo4H+MIH7MA4GA1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwEgYDVR0TAQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQU kHeSNWfE/6jMqeZ72YB5e8yT+TgwHwYDVR0jBBgwFoAUgEzW63T/STaj1dj8tT7F avCUHYwwNAYIKwYBBQUHAQEEKDAmMCQGCCsGAQUFBzAChhhodHRwOi8vaS5wa2ku Z29vZy9yNC5jcnQwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2MucGtpLmdvb2cv ci9yNC5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwCgYIKoZIzj0EAwMDaAAwZQIx AOcCq1HW90OVznX+0RGU1cxAQXomvtgM8zItPZCuFQ8jSBJSjz5keROv9aYsAm5V sQIwJonMaAFi54mrfhfoFNZEfuNMSQ6/bIBiNLiyoX46FohQvKeIoJ99cx7sUkFN 7uJW -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#1> <hostCert#2> INFO { 
1DFC1605FBAD358D8BC844F76D15203FAC9CA5C1A79FD4857FFAF2864FBEBF96
}
intermediate_cert_notBefore <#1> <hostCert#2> INFO { 
2023-12-13 09:00
}
intermediate_cert_notAfter <#1> <hostCert#2> OK { 
2029-02-20 14:00
}
intermediate_cert_expiration <#1> <hostCert#2> OK { 
ok > 40 days
}
intermediate_cert_chain <#1> <hostCert#2> INFO { 
WE1 <-- GTS Root R4
}
intermediate_cert <#2> <hostCert#2> INFO { 
-----BEGIN CERTIFICATE----- MIIDejCCAmKgAwIBAgIQf+UwvzMTQ77dghYQST2KGzANBgkqhkiG9w0BAQsFADBX MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEQMA4GA1UE CxMHUm9vdCBDQTEbMBkGA1UEAxMSR2xvYmFsU2lnbiBSb290IENBMB4XDTIzMTEx NTAzNDMyMVoXDTI4MDEyODAwMDA0MlowRzELMAkGA1UEBhMCVVMxIjAgBgNVBAoT GUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBMTEMxFDASBgNVBAMTC0dUUyBSb290IFI0 MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAE83Rzp2iLYK5DuDXFgTB7S0md+8Fhzube Rr1r1WEYNa5A3XP3iZEwWus87oV8okB2O6nGuEfYKueSkWpz6bFyOZ8pn6KY019e WIZlD6GEZQbR3IvJx3PIjGov5cSr0R2Ko4H/MIH8MA4GA1UdDwEB/wQEAwIBhjAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDwYDVR0TAQH/BAUwAwEB/zAd BgNVHQ4EFgQUgEzW63T/STaj1dj8tT7FavCUHYwwHwYDVR0jBBgwFoAUYHtmGkUN l8qJUC99BM00qP/8/UswNgYIKwYBBQUHAQEEKjAoMCYGCCsGAQUFBzAChhpodHRw Oi8vaS5wa2kuZ29vZy9nc3IxLmNydDAtBgNVHR8EJjAkMCKgIKAehhxodHRwOi8v Yy5wa2kuZ29vZy9yL2dzcjEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA0GCSqG SIb3DQEBCwUAA4IBAQAYQrsPBtYDh5bjP2OBDwmkoWhIDDkic574y04tfzHpn+cJ odI2D4SseesQ6bDrarZ7C30ddLibZatoKiws3UL9xnELz4ct92vID24FfVbiI1hY +SW6FoVHkNeWIP0GCbaM4C6uVdF5dTUsMVs/ZbzNnIdCp5Gxmx5ejvEau8otR/Cs kGN+hr/W5GvT1tMBjgWKZ1i4//emhA1JG1BbPzoLJQvyEotc03lXjTaCzv8mEbep 8RqZ7a2CPsgRbuvTPBwcOMBBmuFeU88+FSBX6+7iP0il8b4Z0QFqIwwMHfs/L6K1 vepuoxtGzi4CZ68zJpiq1UvSqTbFJjtbD4seiMHl -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#2> <hostCert#2> INFO { 
76B27B80A58027DC3CF1DA68DAC17010ED93997D0B603E2FADBE85012493B5A7
}
intermediate_cert_notBefore <#2> <hostCert#2> INFO { 
2023-11-15 03:43
}
intermediate_cert_notAfter <#2> <hostCert#2> OK { 
2028-01-28 00:00
}
intermediate_cert_expiration <#2> <hostCert#2> OK { 
ok > 40 days
}
intermediate_cert_chain <#2> <hostCert#2> INFO { 
GTS Root R4 <-- GlobalSign Root CA
}
intermediate_cert_badOCSP <hostCert#2> OK { 
intermediate certificate(s) is/are ok
}
HTTP_status_code INFO { 
200 OK ('/')
}
HTTP_clock_skew INFO { 
0 seconds from localtime
}
HTTP_headerTime INFO { 
1794605167
}
HSTS LOW { 
not offered
}
HPKP INFO { 
No support for HTTP Public Key Pinning
}
banner_server INFO { 
cloudflare
}
banner_application INFO { 
No application banner found
}
cookie_count INFO { 
1 at '/'
}
cookie_secure INFO { 
0/1 at '/' marked as secure
}
cookie_httponly INFO { 
0/1 at '/' marked as HttpOnly
}
X-Frame-Options OK { 
SAMEORIGIN
}
Cache-Control INFO { 
maxage=0
}
Pragma INFO { 
no-cache
}
banner_reverseproxy
zranitelnosti: CWE-200
INFO { 
--
}
heartbleed
zranitelnosti: CVE-2014-0160 CWE-119
OK { 
not vulnerable, no heartbeat extension
}
CCS
zranitelnosti: CVE-2014-0224 CWE-310
OK { 
not vulnerable
}
ticketbleed
zranitelnosti: CVE-2016-9244 CWE-200
OK { 
not vulnerable
}
ROBOT
zranitelnosti: CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168 CWE-203
OK { 
not vulnerable
}
secure_renego
zranitelnosti: CWE-310
WARN { 
OpenSSL handshake didn't succeed
}
secure_client_renego
zranitelnosti: CVE-2011-1473 CWE-310
OK { 
not vulnerable
}
CRIME_TLS
zranitelnosti: CVE-2012-4929 CWE-310
OK { 
not vulnerable
}
BREACH
zranitelnosti: CVE-2013-3587 CWE-310
MEDIUM { 
potentially VULNERABLE, br gzip HTTP compression detected  - only supplied '/' tested
}
POODLE_SSL
zranitelnosti: CVE-2014-3566 CWE-310
OK { 
not vulnerable, no SSLv3
}
fallback_SCSV OK { 
supported
}
SWEET32
zranitelnosti: CVE-2016-2183 CVE-2016-6329 CWE-327
LOW { 
uses 64 bit block ciphers
}
FREAK
zranitelnosti: CVE-2015-0204 CWE-310
OK { 
not vulnerable
}
DROWN
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
OK { 
not vulnerable on this host and port
}
DROWN_hint
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
INFO { 
Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=070D0659BBD38A9A152064759B2DA5B4CD57EE62E260732D9C5CA8A770101530
}
LOGJAM
zranitelnosti: CVE-2015-4000 CWE-310
OK { 
not vulnerable, no DH EXPORT ciphers,
}
LOGJAM-common_primes
zranitelnosti: CVE-2015-4000 CWE-310
OK { 
no DH key with <= TLS 1.2
}
BEAST_CBC_TLS1
zranitelnosti: CVE-2011-3389 CWE-20
MEDIUM { 
ECDHE-RSA-AES128-SHA AES128-SHA ECDHE-RSA-AES256-SHA AES256-SHA DES-CBC3-SHA
}
BEAST
zranitelnosti: CVE-2011-3389 CWE-20
LOW { 
VULNERABLE -- but also supports higher protocols  TLSv1.1 TLSv1.2 (likely mitigated)
}
LUCKY13
zranitelnosti: CVE-2013-0169 CWE-310
LOW { 
potentially vulnerable, uses TLS CBC ciphers
}
winshock
zranitelnosti: CVE-2014-6321 CWE-94
OK { 
not vulnerable
}
RC4
zranitelnosti: CVE-2013-2566 CVE-2015-2808 CWE-310
OK { 
not vulnerable
}
clientsimulation-android_442 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_500 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_60 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_70 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_81 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_90 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-android_X INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-chrome_74_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-chrome_79_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-firefox_66_win81 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-firefox_71_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-ie_6_xp INFO { 
No connection
}
clientsimulation-ie_8_win7 INFO { 
TLSv1.0 ECDHE-RSA-AES128-SHA
}
clientsimulation-ie_8_xp INFO { 
No connection
}
clientsimulation-ie_11_win7 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-ie_11_win81 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-ie_11_winphone81 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-ie_11_win10 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-edge_15_win10 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-edge_17_win10 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-opera_66_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-safari_9_ios9 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-safari_9_osx1011 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-safari_10_osx1012 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-safari_121_ios_122 INFO { 
TLSv1.3 TLS_CHACHA20_POLY1305_SHA256
}
clientsimulation-safari_130_osx_10146 INFO { 
TLSv1.3 TLS_CHACHA20_POLY1305_SHA256
}
clientsimulation-apple_ats_9_ios9 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-java_6u45 INFO { 
No connection
}
clientsimulation-java_7u25 INFO { 
TLSv1.0 ECDHE-RSA-AES128-SHA
}
clientsimulation-java_8u161 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-java1102 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-java1201 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-openssl_102e INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-openssl_110l INFO { 
TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305
}
clientsimulation-openssl_111d INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-thunderbird_68_3_1 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
rating_spec INFO { 
SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)
}
rating_doc INFO { 
https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide
}
protocol_support_score INFO { 
95
}
protocol_support_score_weighted INFO { 
28
}
key_exchange_score INFO { 
90
}
key_exchange_score_weighted INFO { 
27
}
cipher_strength_score INFO { 
90
}
cipher_strength_score_weighted INFO { 
36
}
final_score INFO { 
91
}
overall_grade MEDIUM { 
B
}
grade_cap_reason_1 INFO { 
Grade capped to B. TLS 1.1 offered
}
grade_cap_reason_2 INFO { 
Grade capped to B. TLS 1.0 offered
}
grade_cap_reason_3 INFO { 
Grade capped to A. HSTS is not offered
}
scanTime INFO { 
406
}