Přihlásit se Registrace
Smlouvy Dotace Platy Úřady Zakázky Sponzoři & firmy PastVina 
❤ Podpořte nás Přihlásit se Registrace
Hledat v Hlídači státu
Nápověda jak vyhledávat Snadné hledání
  1. Hlídač Státu
  2. Hlídač Webů
  3. Detailní analýza HTTPs pro Statutární město Brno

Hlídač Statutární město Brno Detailní analýza HTTPs pro Statutární město Brno

Statutární město Brno
https://www.brno.cz/uvodni-strana/

Statutární město Brno Statutární město Brno - webové stránky města

Zabezpečení komunikace

A+
Certifikát expiruje za týden.

Výsledek analýzy HTTPS na www.brno.cz ze dne 30.06.2026

Všechno je v nejlepším pořádku a web se drží doporučených postupů.

Detailní analýza

Detailní report z HTTPs analýzy pomocí nástroje testssl.sh

server www.brno.cz/138.2.181.66
pre_128cipher INFO { 
No 128 cipher limit bug
}
SSLv2 OK { 
not offered
}
SSLv3 OK { 
not offered
}
TLS1 INFO { 
not offered
}
TLS1_1 INFO { 
not offered
}
TLS1_2 OK { 
offered
}
TLS1_3 INFO { 
not offered + downgraded to weaker protocol
}
NPN INFO { 
offered with h2, http/1.1 (advertised)
}
ALPN_HTTP2 OK { 
h2
}
ALPN INFO { 
http/1.1
}
cipherlist_NULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_aNULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_EXPORT
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_LOW
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_3DES_IDEA
zranitelnosti: CWE-310
INFO { 
not offered
}
cipherlist_AVERAGE
zranitelnosti: CWE-310
INFO { 
not offered
}
cipherlist_GOOD INFO { 
not offered
}
cipherlist_STRONG OK { 
offered
}
cipher_order HIGH { 
NOT a cipher order configured
}
protocol_negotiated OK { 
Default protocol TLS1.2
}
cipher_negotiated OK { 
DHE-RSA-AES128-GCM-SHA256, 4096 bit DH  (matching cipher in list missing)
}
cipher-tls1_2_xc030 OK { 
TLSv1.2   xc030   ECDHE-RSA-AES256-GCM-SHA384       ECDH 521   AESGCM      256      TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_x9f OK { 
TLSv1.2   x9f     DHE-RSA-AES256-GCM-SHA384         DH 4096    AESGCM      256      TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_xc02f OK { 
TLSv1.2   xc02f   ECDHE-RSA-AES128-GCM-SHA256       ECDH 521   AESGCM      128      TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_x9e OK { 
TLSv1.2   x9e     DHE-RSA-AES128-GCM-SHA256         DH 4096    AESGCM      128      TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
}
supportedciphers_TLSv1_2 INFO { 
ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-GCM-SHA256
}
FS OK { 
offered
}
FS_ciphers INFO { 
ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-GCM-SHA256
}
FS_ECDHE_curves OK { 
prime256v1 secp384r1 secp521r1 X25519 X448
}
DH_groups OK { 
ffdhe4096
}
TLS_extensions INFO { 
'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'next protocol/#13172' 'max fragment length/#1' 'application layer protocol negotiation/#16' 'extended master secret/#23'
}
TLS_session_ticket INFO { 
no -- no lifetime advertised
}
SSL_sessionID_support INFO { 
yes
}
sessionresumption_ticket INFO { 
not supported
}
sessionresumption_ID INFO { 
not supported
}
TLS_timestamp INFO { 
random
}
cert_compression INFO { 
N/A
}
clientAuth INFO { 
none
}
cert_numbers INFO { 
1
}
cert_signatureAlgorithm OK { 
SHA256 with RSA
}
cert_keySize INFO { 
RSA 2048 bits (exponent is 65537)
}
cert_keyUsage INFO { 
Digital Signature, Key Encipherment
}
cert_extKeyUsage INFO { 
TLS Web Server Authentication, TLS Web Client Authentication
}
cert_serialNumber INFO { 
07B9544116C91C36723C80B170304D4F
}
cert_serialNumberLen INFO { 
16
}
cert_fingerprintSHA1 INFO { 
5F1C49760CE0E2077F272EB8ED99DCAF3F89850E
}
cert_fingerprintSHA256 INFO { 
9A9E12D6C6C11D581219A01F7CB6EE8047FFE82B2A07E8BE8A285942EF34F280
}
cert INFO { 
-----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIQB7lUQRbJHDZyPICxcDBNTzANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRUaGF3dGUgVExTIFJTQSBDQSBHMTAe Fw0yNTA2MDcwMDAwMDBaFw0yNjA3MDgyMzU5NTlaMFMxCzAJBgNVBAYTAkNaMQ0w CwYDVQQHEwRCcm5vMSEwHwYDVQQKDBhTdGF0dXTDoXJuw60gbcSbc3RvIEJybm8x EjAQBgNVBAMMCSouYnJuby5jejCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALMrCjWw1WZcm0MaZuMDtH68ozA3fe19hVgi5fihIBgEC3uGDT5UoiWn3dXI hUCjfuN+dGW4QgZ+8tYaeXA79Yfia5aC+jJm6nfJNBzW156ywcRWP6WcPHMJgjI4 CIr9Va9Y0oc63HhQ0fH8/fOpIzjPhBT07UlmyWOQVVed+aVjX/Um0SGMQN6Q7Kbc 94LDxvDJsp/8NP0q9RXXpj7KeS6PGJ/Mpx4FRtCC1p1xlN61s85JKhf1xxaWgwB5 6YJCEQN6hY6lmK0CCa/2xW/GsSWySF6nKsQlro1liMp4MAFm+LvBDBgZ0bDJ0X7C ezNXNzCL7iViSH3SxFGt4mHrIqkCAwEAAaOCAxIwggMOMB8GA1UdIwQYMBaAFKWM /jLM6w8s1BnGCLgAJIhdw8W3MB0GA1UdDgQWBBRcn/nEr0JrskYaF+4eK6gOMH43 4TAdBgNVHREEFjAUggkqLmJybm8uY3qCB2Jybm8uY3owPgYDVR0gBDcwNTAzBgZn gQwBAgIwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BT MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw OwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NkcC50aGF3dGUuY29tL1RoYXd0ZVRM U1JTQUNBRzEuY3JsMHAGCCsGAQUFBwEBBGQwYjAkBggrBgEFBQcwAYYYaHR0cDov L3N0YXR1cy50aGF3dGUuY29tMDoGCCsGAQUFBzAChi5odHRwOi8vY2FjZXJ0cy50 aGF3dGUuY29tL1RoYXd0ZVRMU1JTQUNBRzEuY3J0MAwGA1UdEwEB/wQCMAAwggF/ BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB3ANdtfRDRp/V3wsfpX9cAv/mCyTNaZeHQ swFzF8DIxWl3AAABl0pRqxgAAAQDAEgwRgIhAPMYElKOe5IpbczAvqniUq6lZgoZ KvztG56jFARfHkQlAiEAgWQmHY3Rbfg6jybZ3CE1BI0/rfR8r/Ql2sI0yBnAlHUA dgDCMX5XRRmjRe5/ON6ykEHrx8IhWiK/f9W1rXaa2Q5SzQAAAZdKUatDAAAEAwBH MEUCIAn2Y4B6fQK6ff2Il24yglH4Ouwj8yXevRZJAypAIupVAiEA9myPj8gj9j/d rOT5AL0adtpQ2XLGcJbGsnuzNM5NNZ0AdgCUTkOH+uzB74HzGSQmqBhlAcfTXzgC AT9yZ31VNy4Z2AAAAZdKUatZAAAEAwBHMEUCIQDe9WYyhl4xWpmxiCdKfXpQ3R1Q jbfNbB/szm/l0qe0wAIgGEqiYmUuDmJtgbdWNcS16jWxTBrmhZ3sz/II16Q8Ka4w DQYJKoZIhvcNAQELBQADggEBAASIDzEz2YES+erm8goAZnsY6xOTpe2e9ZdKZicl shThkV5I1gkyD26CXd0Nd4SeqKAOdgOV2LF/fl/wNg7oGaVSq82Oacy0FiDNlvlY fkFzk4ku6XNc3MN/YnDhWhZ3NzAwLUTO8NSwgho4LDCUr+lHkTF9Kj1XKFW8O5V4 Jf5AvKTEBkNLg8OkojLLNiTtrSiU+JomXaXLrNf/Ag0NGV59E5PysIPC7PvnZZw/ 5QyZ5ioUMgvfuVYYEE58Jrinntx/5vAJz91cHJ9q5N/6sWmDlxyDtoa/uhBXZ0UK IeA2XNCPuiOnInWoTNW/1ypq+Ywxfem4Dj3z7jUTv+GxeH8= -----END CERTIFICATE-----
}
cert_commonName OK { 
*.brno.cz
}
cert_commonName_wo_SNI INFO { 
*.brno.cz
}
cert_subjectAltName INFO { 
*.brno.cz brno.cz
}
cert_trust OK { 
Ok via SAN wildcard and CN wildcard (same w/o SNI)
}
cert_chain_of_trust OK { 
passed.
}
cert_certificatePolicies_EV INFO { 
no
}
cert_expirationStatus HIGH { 
expires < 30 days (8)
}
cert_notBefore INFO { 
2025-06-07 00:00
}
cert_notAfter HIGH { 
2026-07-08 23:59
}
cert_extlifeSpan OK { 
certificate has no extended life time according to browser forum
}
cert_eTLS INFO { 
not present
}
cert_crlDistributionPoints INFO { 
http://cdp.thawte.com/ThawteTLSRSACAG1.crl
}
cert_ocspURL INFO { 
http://status.thawte.com
}
OCSP_stapling LOW { 
not offered
}
cert_mustStapleExtension INFO { 
--
}
DNS_CAArecord LOW { 
--
}
certificate_transparency OK { 
yes (certificate extension)
}
certs_countServer INFO { 
2
}
certs_list_ordering_problem INFO { 
no
}
cert_caIssuers INFO { 
Thawte TLS RSA CA G1 (DigiCert Inc from US)
}
intermediate_cert <#1> INFO { 
-----BEGIN CERTIFICATE----- MIIEizCCA3OgAwIBAgIQCQ7oxd5b+mLSri/3CXxIVzANBgkqhkiG9w0BAQsFADBh MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH MjAeFw0xNzExMDIxMjI0MjVaFw0yNzExMDIxMjI0MjVaMF4xCzAJBgNVBAYTAlVT MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j b20xHTAbBgNVBAMTFFRoYXd0ZSBUTFMgUlNBIENBIEcxMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAxjngmPhVetC0b/ozbYJdzOBUA1sMog47030cAP+P 23ANUN8grXECL8NhDEF4F1R9tL0wY0mczHaR0a7lYanlxtwWo1s2uGnnyDs6mOCs 66ew2w3YETr6Tb14xgjpu1gGFtAeewaikO9Fud8hxGJTSwn8xeNkfKVWpD2L4vFN 36FNgxeilK6aE4ykgGAzNlokTp6hNOLAYpDySdLAPKzuJSQ7JCEZ6O+SDKywIdXL oMTnpxuBKGSG88NWTo3CHCOGmQECia2yqdPDjgLqnEiYNjwQL8uMqj8rOvlMgviB cHA7xty+7/uYLN6ZS7Vq1/F/lVhVOf5ej6jZdmB85szFbQIDAQABo4IBQDCCATww HQYDVR0OBBYEFKWM/jLM6w8s1BnGCLgAJIhdw8W3MB8GA1UdIwQYMBaAFE4iVCAY lebjbuYP+vq5Eu0GF485MA4GA1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwEgYDVR0TAQH/BAgwBgEB/wIBADA0BggrBgEFBQcBAQQo MCYwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBCBgNVHR8E OzA5MDegNaAzhjFodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9i YWxSb290RzIuY3JsMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxo dHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA0GCSqGSIb3DQEBCwUAA4IBAQC6 km0KA4sTb2VYpEBm/uL2HL/pZX9B7L/hbJ4NcoBe7V56oCnt7aeIo8sMjCRWTCWZ D1dY0+2KZOC1dKj8d1VXXAtnjytDDuPPf6/iow0mYQTO/GAg/MLyL6CDm3FzDB8V tsH/aeMgP6pgD1XQqz+haDnfnJTKBuxhcpnx3Adbleue/QnPf1hHYa8L+Rv8Pi5U h4V9FwHOfphdMXOxi14OqmsiTbc5cOs9/uukH+YVsuFdWTna6IVw1qh+tEtyH16R vmi7pkqyZYULOPMIE7avrljVVBZuikwARtY8tCVV6Pp9l3VeagBqb2ffgqNJt3C0 TYNYQI+BXG1R1cABlold -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#1> INFO { 
4BCC5E234FE81EDE4EAF883AA19C31335B0B26E85E066B9945E4CB6153EB20C2
}
intermediate_cert_notBefore <#1> INFO { 
2017-11-02 12:24
}
intermediate_cert_notAfter <#1> OK { 
2027-11-02 12:24
}
intermediate_cert_expiration <#1> OK { 
ok > 40 days
}
intermediate_cert_chain <#1> INFO { 
Thawte TLS RSA CA G1 <-- DigiCert Global Root G2
}
intermediate_cert_badOCSP OK { 
intermediate certificate(s) is/are ok
}
HTTP_status_code INFO { 
200 OK ('/')
}
HTTP_clock_skew INFO { 
+32 seconds from localtime
}
HTTP_headerTime INFO { 
1782850897
}
HTTP_headerAge INFO { 
32 seconds
}
HSTS_time OK { 
365 days (=31536000 seconds) > 15552000 seconds
}
HSTS_subdomains OK { 
includes subdomains
}
HSTS_preload INFO { 
domain is NOT marked for preloading
}
HPKP INFO { 
No support for HTTP Public Key Pinning
}
banner_server INFO { 
No Server banner line in header, interesting!
}
banner_application INFO { 
No application banner found
}
cookie_count INFO { 
0 at '/'
}
X-Frame-Options OK { 
SAMEORIGIN
}
X-Content-Type-Options OK { 
nosniff
}
Content-Security-Policy OK { 
default-src 'self' https://damenavas.cz https://www.google-analytics.com https://office.com https://player.livebox.cz https://gis.brno.cz https://www.mapy.cz https://frame.mapy.cz https://maps.google.com https://forms.google.com https://www.youtube.com https://www.book4u.cz *.issuu.com https://*.tagembed.com; connect-src 'self' https://api.taggbox.com https://gis.brno.cz/ https://js.arcgis.com https://utility.arcgisonline.com https://cz-services.tmapserver.cz https://www.google-analytics.com *.google-analytics.com *.googletagmanager.com *.google.com https://emmb-matomo.brno.cz https://static.arcgis.com https://*.tagembed.com *.wasabisys.com https://r71z7bzeb1.execute-api.eu-west-1.amazonaws.com https://kulturabrno.ecomailapp.cz ; img-src 'self' data: https://www.gstatic.com https://fonts.gstatic.com https://www.google-analytics.com https://gis.brno.cz/ https://cz-services.tmapserver.cz https://js.arcgis.com https://apl.brno.cz https://webcam.brno.cz https://www.brno.cz https://*.tagembed.com https://*.taggbox.com https://*.tagbox.com https://*.xx.fbcdn.net https://ui-avatars.com; frame-src 'self' formapps: https://app.whitelabel.ai https://objednani.brno.cz https://www.google.com https://www.youtube.com https://www.book4u.cz *.mapy.cz *.issuu.com  https://gis.brno.cz https://*.tagembed.com https://player.vimeo.com/ https://apl.brno.cz https://webcam.brno.cz https://platform.twitter.com https://app.powerbi.com data: https://playermmbarchiv.livebox.cz/ https://player.livebox.cz https://infogram.com https://brno.infogram.com https://*.arcgis.com https://arcgis.com; child-src 'self' ; worker-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: https://app.whitelabel.ai https://www.gstatic.com https://fonts.gstatic.com https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://portal.gov.cz https://*.tagembed.com https://cloud.tagbox.com https://js.arcgis.com *.google-analytics.com *.googletagmanager.com *.google.com https://emmb-matomo.brno.cz https://platform.twitter.com https://d70shl7vidtft.cloudfront.net; style-src 'self' 'unsafe-inline' https://www.gstatic.com https://fonts.gstatic.com https://fonts.googleapis.com https://js.arcgis.com https://cdn.tagbox.com  https://*.tagembed.com; font-src 'self' https://*.tagbox.com https://fonts.gstatic.com https://js.arcgis.com https://*.tagembed.com data:; frame-ancestors 'self'; form-action 'self';
}
Permissions-Policy OK { 
microphone=(), payment=(), sync-xhr=(self), geolocation=(self)
}
X-XSS-Protection INFO { 
1; mode=block
}
Referrer-Policy INFO { 
origin-when-cross-origin
}
Cache-Control INFO { 
max-age=60, public
}
banner_reverseproxy
zranitelnosti: CWE-200
INFO { 
X-Cache-time: 60.000X-Cache-Action: HITX-Cache-Hits: 2Via: cache
}
heartbleed
zranitelnosti: CVE-2014-0160 CWE-119
OK { 
not vulnerable, no heartbeat extension
}
CCS
zranitelnosti: CVE-2014-0224 CWE-310
OK { 
not vulnerable
}
ticketbleed
zranitelnosti: CVE-2016-9244 CWE-200
OK { 
no session ticket extension
}
ROBOT
zranitelnosti: CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168 CWE-203
OK { 
not vulnerable, no RSA key transport cipher
}
secure_renego
zranitelnosti: CWE-310
OK { 
supported
}
secure_client_renego
zranitelnosti: CVE-2011-1473 CWE-310
OK { 
not vulnerable
}
CRIME_TLS
zranitelnosti: CVE-2012-4929 CWE-310
OK { 
not vulnerable
}
BREACH
zranitelnosti: CVE-2013-3587 CWE-310
MEDIUM { 
potentially VULNERABLE, gzip HTTP compression detected  - only supplied '/' tested
}
POODLE_SSL
zranitelnosti: CVE-2014-3566 CWE-310
OK { 
not vulnerable, no SSLv3
}
fallback_SCSV OK { 
no protocol below TLS 1.2 offered
}
SWEET32
zranitelnosti: CVE-2016-2183 CVE-2016-6329 CWE-327
OK { 
not vulnerable
}
FREAK
zranitelnosti: CVE-2015-0204 CWE-310
OK { 
not vulnerable
}
DROWN
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
OK { 
not vulnerable on this host and port
}
DROWN_hint
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
INFO { 
Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=9A9E12D6C6C11D581219A01F7CB6EE8047FFE82B2A07E8BE8A285942EF34F280
}
LOGJAM-common_primes
zranitelnosti: CVE-2015-4000 CWE-310
INFO { 
RFC7919/ffdhe4096
}
LOGJAM
zranitelnosti: CVE-2015-4000 CWE-310
OK { 
not vulnerable, no DH EXPORT ciphers,
}
BEAST
zranitelnosti: CVE-2011-3389 CWE-20
OK { 
not vulnerable, no SSL3 or TLS1
}
LUCKY13
zranitelnosti: CVE-2013-0169 CWE-310
OK { 
not vulnerable
}
winshock
zranitelnosti: CVE-2014-6321 CWE-94
OK { 
not vulnerable
}
RC4
zranitelnosti: CVE-2013-2566 CVE-2015-2808 CWE-310
OK { 
not vulnerable
}
clientsimulation-android_442 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-android_500 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-android_60 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-android_70 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-android_81 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-android_90 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-android_X INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-chrome_74_win10 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-chrome_79_win10 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-firefox_66_win81 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-firefox_71_win10 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-ie_6_xp INFO { 
No connection
}
clientsimulation-ie_8_win7 INFO { 
No connection
}
clientsimulation-ie_8_xp INFO { 
No connection
}
clientsimulation-ie_11_win7 INFO { 
TLSv1.2 DHE-RSA-AES256-GCM-SHA384
}
clientsimulation-ie_11_win81 INFO { 
TLSv1.2 DHE-RSA-AES256-GCM-SHA384
}
clientsimulation-ie_11_winphone81 INFO { 
No connection
}
clientsimulation-ie_11_win10 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-edge_15_win10 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-edge_17_win10 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-opera_66_win10 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-safari_9_ios9 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-safari_9_osx1011 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-safari_10_osx1012 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-safari_121_ios_122 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-safari_130_osx_10146 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-apple_ats_9_ios9 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-java_6u45 INFO { 
No connection
}
clientsimulation-java_7u25 INFO { 
No connection
}
clientsimulation-java_8u161 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-java1102 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-java1201 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-openssl_102e INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-openssl_110l INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-openssl_111d INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-thunderbird_68_3_1 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
rating_spec INFO { 
SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)
}
rating_doc INFO { 
https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide
}
protocol_support_score INFO { 
100
}
protocol_support_score_weighted INFO { 
30
}
key_exchange_score INFO { 
90
}
key_exchange_score_weighted INFO { 
27
}
cipher_strength_score INFO { 
90
}
cipher_strength_score_weighted INFO { 
36
}
final_score INFO { 
93
}
overall_grade OK { 
A+
}
scanTime INFO { 
76
}