Přihlásit se Registrace
Smlouvy Dotace Platy Úřady Zakázky Sponzoři & firmy PastVina 
❤ Podpořte nás Přihlásit se Registrace
Hledat v Hlídači státu
Nápověda jak vyhledávat Snadné hledání
  1. Hlídač Státu
  2. Hlídač Webů
  3. Detailní analýza HTTPs pro STATUTÁRNÍ MĚSTO LIBEREC

Hlídač STATUTÁRNÍ MĚSTO LIBEREC Detailní analýza HTTPs pro STATUTÁRNÍ MĚSTO LIBEREC

STATUTÁRNÍ MĚSTO LIBEREC
https://www.liberec.cz/cz/

STATUTÁRNÍ MĚSTO LIBEREC STATUTÁRNÍ MĚSTO LIBEREC - webové stránky města

Zabezpečení komunikace

A+
Certifikát expiruje za 130 dní.

Výsledek analýzy HTTPS na www.liberec.cz ze dne 30.06.2026

Všechno je v nejlepším pořádku a web se drží doporučených postupů.

Detailní analýza

Detailní report z HTTPs analýzy pomocí nástroje testssl.sh

server www.liberec.cz/93.99.138.147
pre_128cipher INFO { 
No 128 cipher limit bug
}
SSLv2 OK { 
not offered
}
SSLv3 OK { 
not offered
}
TLS1 INFO { 
not offered
}
TLS1_1 INFO { 
not offered
}
TLS1_2 OK { 
offered
}
TLS1_3 OK { 
offered with final
}
NPN INFO { 
not offered
}
ALPN_HTTP2 OK { 
h2
}
cipherlist_NULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_aNULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_EXPORT
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_LOW
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_3DES_IDEA
zranitelnosti: CWE-310
INFO { 
not offered
}
cipherlist_AVERAGE
zranitelnosti: CWE-310
LOW { 
offered
}
cipherlist_GOOD INFO { 
not offered
}
cipherlist_STRONG OK { 
offered
}
cipher_order HIGH { 
NOT a cipher order configured
}
protocol_negotiated OK { 
Default protocol TLS1.3
}
cipher_negotiated OK { 
TLS_AES_256_GCM_SHA384, 253 bit ECDH (X25519)  (limited sense as client will pick)
}
cipher-tls1_2_xc030 OK { 
TLSv1.2   xc030   ECDHE-RSA-AES256-GCM-SHA384       ECDH 521   AESGCM      256      TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_xc028 LOW { 
TLSv1.2   xc028   ECDHE-RSA-AES256-SHA384           ECDH 521   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
}
cipher-tls1_2_xc014 LOW { 
TLSv1.2   xc014   ECDHE-RSA-AES256-SHA              ECDH 521   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_2_xc02f OK { 
TLSv1.2   xc02f   ECDHE-RSA-AES128-GCM-SHA256       ECDH 521   AESGCM      128      TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_xc027 LOW { 
TLSv1.2   xc027   ECDHE-RSA-AES128-SHA256           ECDH 521   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
}
cipher-tls1_2_xc013 LOW { 
TLSv1.2   xc013   ECDHE-RSA-AES128-SHA              ECDH 521   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
}
supportedciphers_TLSv1_2 INFO { 
ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA
}
cipher-tls1_3_x1302 OK { 
TLSv1.3   x1302   TLS_AES_256_GCM_SHA384            ECDH 253   AESGCM      256      TLS_AES_256_GCM_SHA384
}
cipher-tls1_3_x1303 OK { 
TLSv1.3   x1303   TLS_CHACHA20_POLY1305_SHA256      ECDH 253   ChaCha20    256      TLS_CHACHA20_POLY1305_SHA256
}
cipher-tls1_3_x1301 OK { 
TLSv1.3   x1301   TLS_AES_128_GCM_SHA256            ECDH 253   AESGCM      128      TLS_AES_128_GCM_SHA256
}
supportedciphers_TLSv1_3 INFO { 
TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 TLS_AES_128_GCM_SHA256
}
FS OK { 
offered
}
FS_ciphers INFO { 
TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA TLS_AES_128_GCM_SHA256 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA
}
FS_ECDHE_curves OK { 
prime256v1 secp384r1 secp521r1 X25519 X448
}
DH_groups OK { 
ffdhe2048 ffdhe3072 ffdhe4096 ffdhe6144 ffdhe8192
}
TLS_extensions INFO { 
'session ticket/#35' 'renegotiation info/#65281' 'supported versions/#43' 'key share/#51' 'supported_groups/#10' 'max fragment length/#1' 'application layer protocol negotiation/#16' 'extended master secret/#23'
}
TLS_session_ticket INFO { 
valid for 86400 seconds only (<daily)
}
SSL_sessionID_support INFO { 
yes
}
sessionresumption_ticket INFO { 
not supported
}
sessionresumption_ID INFO { 
not supported
}
TLS_timestamp INFO { 
random
}
certificate_compression INFO { 
none
}
clientAuth INFO { 
none
}
cert_numbers INFO { 
1
}
cert_signatureAlgorithm OK { 
SHA256 with RSA
}
cert_keySize INFO { 
RSA 2048 bits (exponent is 65537)
}
cert_keyUsage INFO { 
Digital Signature, Key Encipherment
}
cert_extKeyUsage INFO { 
TLS Web Server Authentication, TLS Web Client Authentication
}
cert_serialNumber INFO { 
A932306BDE7FB276E70EA91429777C6D
}
cert_serialNumberLen INFO { 
16
}
cert_fingerprintSHA1 INFO { 
AD3E3A3A3F9C2C0B7801CE652A9110FF957E28B9
}
cert_fingerprintSHA256 INFO { 
28FCBD8624E1AD442EFB69AF372CEA80DDE1B1AFE2F67C42BCBA70975E0EA747
}
cert INFO { 
-----BEGIN CERTIFICATE----- MIIGFzCCBH+gAwIBAgIRAKkyMGvef7J25w6pFCl3fG0wDQYJKoZIhvcNAQELBQAw RjELMAkGA1UEBhMCQ1oxFjAUBgNVBAoTDUFscGlybyBzLnIuby4xHzAdBgNVBAMT FkFscGlybyBSU0EgRFYgU1NMIENBIDIwHhcNMjUxMDA5MDAwMDAwWhcNMjYxMTA4 MjM1OTU5WjAXMRUwEwYDVQQDDAwqLmxpYmVyZWMuY3owggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQCWgoAugCzWmu2vwa9sMQi/T0zpBkbO+RlXEWtDxoLK 6a3FOdi5xTX2fiul/7rybg1Coi0beqAjQC7rClzmZuv9mdh9YdI4cHJ3Iwcjqo/+ 0RPIuKGJJd/d//yqLfp0DtvvdYap+31vQPvbBLpn53X7gz1sIA8F2maCjrDbtVRI lCAHY7eeVK7vA60l/+xG+683U4qRJEArrOyNWkwPqvS5e0ZJYMnYwcEyicuy7eoz fbvnRWopogDwsJS3pZ4tGoAkoblLNE11ehWtOGjuFvkSBw6Sm2DngSjguUkAdqwB 0rexGHQaQ1UZ3m77Jf/JXM5QAV84fBF9z2OLWqdaTNSXAgMBAAGjggKtMIICqTAf BgNVHSMEGDAWgBR1CNT4yIybtYpS46aNIt7KR4u2fTAdBgNVHQ4EFgQUGD7oEy4h kUTJOMC2DyiiiS3KsGgwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBMGA1UdIAQMMAowCAYGZ4EMAQIB MG0GCCsGAQUFBwEBBGEwXzA4BggrBgEFBQcwAoYsaHR0cDovL2NydC5zZWN0aWdv LmNvbS9BbHBpcm9SU0FEVlNTTENBMi5jcnQwIwYIKwYBBQUHMAGGF2h0dHA6Ly9v Y3NwLnNlY3RpZ28uY29tMCMGA1UdEQQcMBqCDCoubGliZXJlYy5jeoIKbGliZXJl Yy5jejCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHcA2AlVO5RPev/IFhlvlE+F q7D4/F6HVSYPFdEucrtFSxQAAAGZx7tGXAAABAMASDBGAiEA5ZCRq2IfvhAV6D/g KRGkvWg4reWg/anoxwX7527YPosCIQCvG2yEct6qErYF8b4PY6ezbVpTjskRdEpJ knm3MW4hcgB2AK9niDtXsE7dj6bZfvYuqOuBCsdxYPAkXlXWDC/nhYc6AAABmce7 RvAAAAQDAEcwRQIgW6+qjjmVK8D8OO37NNVdtPZ0z/+0p/TP3cJP7jBrP18CIQCM FJuQimnADTzap31kKuAJNjC3wwRMaMYDWukuE3DuSwB2AKyrMHBs6+yEMfQT0vSR XxEeQiRDsfKmjE88KzunHgLDAAABmce7RfAAAAQDAEcwRQIhAPyILjsoJXlT4uJo IWY342tOkh1jrCXV7opGiaRolRN9AiATd/pC7lhaGF3Vn6QnzU+WDY1WYcdDt3Xz tKUKdwpCpDANBgkqhkiG9w0BAQsFAAOCAYEAmb/8sbVUllsw40LSO+EJ5sW1hQJc Ln9gamWcqaTfI4NrbWKJavVOeJ84yYbdbf7yghxVe1igZ1Typ9rDmQ1mWY5yQ0LX gjpJpbXE3CuCyelwMXAi6LDvmH5uWTVjy9rB9MlJshHOIM4Ur4a6u00EiFj/jRT1 rkim3kaEzaNDGEYeqKOEhVJsT23XDQRR1zSe5Azk4FXgoLqjO/bl+W65HRQq67u3 K+8gEhl4lrN6n1eP7v7KTIQ1xb20lJvTIzKblkR0BhXHo7ddiD+5zygOAetM82cP mWtveGc9bOM272+ScPbf1H4ZcQRjhOdqp20cJ1aVR3/69m1h0c6M5KBFaD7rMcp7 8fxTxHlS80lUBPoNx6TPID0O9AWdwG7GwOhqaijQlo0BEfkBw5kmMRKsJejms8+h 9JO4984D7x5rTLQJeB5TnvjC1VSXYuZXgr9+N4RTk+qVpB1Nx+tKiEx9LharlYXL Bh6hJ5oeHm5APy+8/QoMDSz0TaBU9+/QUipI -----END CERTIFICATE-----
}
cert_commonName OK { 
*.liberec.cz
}
cert_commonName_wo_SNI INFO { 
*.liberec.cz
}
cert_subjectAltName INFO { 
*.liberec.cz liberec.cz
}
cert_trust OK { 
Ok via SAN wildcard and CN wildcard (same w/o SNI)
}
cert_chain_of_trust OK { 
passed.
}
cert_certificatePolicies_EV INFO { 
no
}
cert_expirationStatus OK { 
131 >= 60 days
}
cert_notBefore INFO { 
2025-10-09 00:00
}
cert_notAfter OK { 
2026-11-08 23:59
}
cert_extlifeSpan OK { 
certificate has no extended life time according to browser forum
}
cert_eTLS INFO { 
not present
}
cert_crlDistributionPoints INFO { 
--
}
cert_ocspURL INFO { 
http://ocsp.sectigo.com
}
OCSP_stapling LOW { 
not offered
}
cert_mustStapleExtension INFO { 
--
}
DNS_CAArecord LOW { 
--
}
certificate_transparency OK { 
yes (certificate extension)
}
certs_countServer INFO { 
4
}
certs_list_ordering_problem INFO { 
no
}
cert_caIssuers INFO { 
Alpiro RSA DV SSL CA 2 (Alpiro s.r.o. from CZ)
}
intermediate_cert <#1> INFO { 
-----BEGIN CERTIFICATE----- MIIGITCCBAmgAwIBAgIRAKZyV9GJog2rQ/Aa84oDN+AwDQYJKoZIhvcNAQEMBQAw XzELMAkGA1UEBhMCR0IxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE2MDQGA1UE AxMtU2VjdGlnbyBQdWJsaWMgU2VydmVyIEF1dGhlbnRpY2F0aW9uIFJvb3QgUjQ2 MB4XDTI1MDMyNzAwMDAwMFoXDTM1MDMyNjIzNTk1OVowRjELMAkGA1UEBhMCQ1ox FjAUBgNVBAoTDUFscGlybyBzLnIuby4xHzAdBgNVBAMTFkFscGlybyBSU0EgRFYg U1NMIENBIDIwggGiMA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQDUx47MPW7Y BVt2znX2Y8FbnYTLLajF9b4WYVcBK3IojDSeNONXkVvjMIi4koo570V4DBlrhugp XKB6YFj4X9zJ25vXNOG5KckxIwXEHAQCgxm2yE04abViDCIMIrQvJO04dCgfrqwE kdyGxyOT0Mt2YHUGeBUlsUg3Pnp8fuVc9bCk6CsPkQ/WdaRWnHP5uOG7VQBXpa58 ZIQYAmJTh4AwLGGRT3mnMlvXDICDJP6SiHISGzYEmq2Z/WdQuKP3G9z4tHOKcjo6 AGNCRs+pDaFyqLHZjc9w/ksrypUh6XYA4xGsmReRFYOppVVdj77O2w9b1tAucpe6 p1GFXAYcHwtEkEznV+skxFG3VCn96gK0AMiSfvF2kOSok8g+0n4eFOnyz4U7hM3n JLIh3dxJeax3IAZb/FLJHxMu+0Bb/6LIFv7kRmM3YMIWY9fQAZ3qwVBA1OQjmDNs ZqQ4Bcjuf7b6462ingkX2LscilNBPmQl3iRVflzvc+uPYblwd249uPkCAwEAAaOC AW8wggFrMB8GA1UdIwQYMBaAFFZzWGSV+ZIasBIqBGJ5oUAViCFJMB0GA1UdDgQW BBR1CNT4yIybtYpS46aNIt7KR4u2fTAOBgNVHQ8BAf8EBAMCAYYwEgYDVR0TAQH/ BAgwBgEB/wIBADATBgNVHSUEDDAKBggrBgEFBQcDATATBgNVHSAEDDAKMAgGBmeB DAECATBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8vY3JsLnNlY3RpZ28uY29tL1Nl Y3RpZ29QdWJsaWNTZXJ2ZXJBdXRoZW50aWNhdGlvblJvb3RSNDYuY3JsMIGEBggr BgEFBQcBAQR4MHYwTwYIKwYBBQUHMAKGQ2h0dHA6Ly9jcnQuc2VjdGlnby5jb20v U2VjdGlnb1B1YmxpY1NlcnZlckF1dGhlbnRpY2F0aW9uUm9vdFI0Ni5wN2MwIwYI KwYBBQUHMAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMA0GCSqGSIb3DQEBDAUA A4ICAQBQPX41avzHSSAVaFJPCr6GLxgeqj5XSl5GflqEZYnUMi11ZFb5R0DBEHIE ec/Og7pgUi3ehKt1OZ4hbjhrkhdNqYY260Go4Jf5XxmVLSHz1k1A6q+biCLo2eh1 w8/TeTLus4opPh7VQHzYAYvHopiaof/QPoJlZFGvquzlnSA94Ffukse1fV+c3Xhz niz3wcf/bkTETz3C3cq2/0GJi0SIIoYMVbL0bLrZvO4REvYKk9dfozMBijIo1NDd sYQR79DplE3jzycMcGoVsJa2FFRF9N9qCkmFQ4x5BjRYR0NcJXqupV/aFU80ud39 H0ZZOHNAQryjw+3YTK2gh6YT1iklUbtX2hNL4PwSnu0LPipyzK9smCY9P6BlSOd+ gj6pUW/7d7I6hBnwpyk+/iZNFH4ViOMrmOJGiY5lJbH6TOP9e/FbiK51NTK4NPoE RvxyaKDpbIfZgi7AZGmAG3vQW2h+kugixbhK7z7qTkKOG9JTuHV7Px/xqIB6Wgse ddqZCVdZQamPCMtwdtZe7zG9Y7F8VBH5/78hsI7yqn3MRH1JPhlOrth17fyxR+dK iLg2lctsv/v2MpDcR/rhASt3TUbTDjT/VnS9/+xPoxl352FHBnME4D7puZWCt+d1 OING0BUMXPhKecUb3wu27AtmJ06Cfuinj3ifnqfqP4xh5ZFEWQ== -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#1> INFO { 
CDFBB47882818B694AAD818CD8040DD11050197F51DDBF3C2EB09812E4A25DF5
}
intermediate_cert_notBefore <#1> INFO { 
2025-03-27 00:00
}
intermediate_cert_notAfter <#1> OK { 
2035-03-26 23:59
}
intermediate_cert_expiration <#1> OK { 
ok > 40 days
}
intermediate_cert_chain <#1> INFO { 
Alpiro RSA DV SSL CA 2 <-- Sectigo Public Server Authentication Root R46
}
intermediate_cert <#2> INFO { 
-----BEGIN CERTIFICATE----- MIIGlTCCBH2gAwIBAgIRANJ/u8HeNZ5SFq1hSVhgmcQwDQYJKoZIhvcNAQEMBQAw gYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5MRQwEgYDVQQHEwtK ZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMS4wLAYD VQQDEyVVU0VSVHJ1c3QgUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTIx MDMyMjAwMDAwMFoXDTM4MDExODIzNTk1OVowXzELMAkGA1UEBhMCR0IxGDAWBgNV BAoTD1NlY3RpZ28gTGltaXRlZDE2MDQGA1UEAxMtU2VjdGlnbyBQdWJsaWMgU2Vy dmVyIEF1dGhlbnRpY2F0aW9uIFJvb3QgUjQ2MIICIjANBgkqhkiG9w0BAQEFAAOC Ag8AMIICCgKCAgEAk77VNlJ12AEjoBxHQknuY7a3If3EldVIKyZ8FFMQ2nn9K7ct pNQs+uoy3UnCub0PSD17WphUr55dMXRPB/xQId2kz2hPGxJjbSWZTCqZ80gwYfqB fB6nCErcPiscHxhMcao1jK34bug7StnllALWiYQTqm3ITzPMUJY3kjPcX4jnn1TZ SPCYQ9Zm/Z8XOEPFAVEL1+MjDxRdWxTnS77d9MjaAzfR1jmhIVEwg7Bt1zBOlluR 8HAkq79FgWRDDb0hOi886Z4NyyC1QifM2m+b7mQwkDnNk2WBITG1I1AzNyLjOO34 MTDMRf5i+dFdMnlCh99qzFYZQE3Oqrv5tXZJlPEn+JGlg+UGs2MOgNzgElWApjtm tDmHLcjw0NEU6eQNTQ72XVdyxTscR1ad4tX7gWGMzE2AkDRbt9cUddzYBEifwMEo iLTpHMqnsfFWt3tJTFnlIBWohAIp+jiUaZpJBo/NH3kUFxIMg3reH7GX7vmXeCik yESS6X0mBaZYcpt5E9gRX67FOGI0aLKGMI74kGGeMmz1BzbNokxu7Io27fLmmRVE cMN8vJw5wLTha/eDJSNX2RKA5UnwdQ/vjescm1QotCE8/HwK/+97a3X/ix2gGQWr +vgrgULoOLq7+6r9PeDzyt9Ol5cp7fMYVumllqy9w5CYsuD5otSmR0N8bc8CAwEA AaOCASAwggEcMB8GA1UdIwQYMBaAFFN5v1qqK0rPVIDh2JvAnfKyA2bLMB0GA1Ud DgQWBBRWc1hklfmSGrASKgRieaFAFYghSTAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0T AQH/BAUwAwEB/zAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwEQYDVR0g BAowCDAGBgRVHSAAMFAGA1UdHwRJMEcwRaBDoEGGP2h0dHA6Ly9jcmwudXNlcnRy dXN0LmNvbS9VU0VSVHJ1c3RSU0FDZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNybDA1 BggrBgEFBQcBAQQpMCcwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnVzZXJ0cnVz dC5jb20wDQYJKoZIhvcNAQEMBQADggIBADpvBIlq7bMU0cFDT/9P9+BsgCkRgQs0 S6Bf7vJSlWMHwby0VGvxCS0hrbi0K2BINZbEbsVsgpQq04431yyoVn3Hldorgq24 RldRDOOipEZDTFB9wC9HYt1thHF00XeG2C8KC1plwoEzKAIhPvefI/C3cT0CfTXJ uFjUbKIgSwjNjw6YHtLgoy/hd5+JLUlLco/gzFX/qWbT7tEquOMYpsNKWZj8TLqP q6zMiG4Na6feEZte6YPXGrMWlTWN341vDedc+yxQqSug79HJUQcOZs7KyDWztmae QxsPE49UV/8XwrfZtZaYyrs4FpD94Z4Q8dzXGL8+qEJjxgcza7W6PROaClubavd1 VKPm8+aCW77u7SxpR2TFGL6kPdxsKyFijpcunR5V79sUyROfNdzjrAcFWZXK8sbb 9FlnwuVG677JLv+ZVTX5AxLvW5OB4zt5uS+zB62wJ/Wv+jXGAttSAcJec4iFgCWH Rvdi/jJoSzRLa3nEzx6pFIzclSCnh0u1xCeLcUBypSiPga8W+6PkuoyQq8U9qs9E oxG5NvrvlyshwUS9yvcZRGw7Ljlx4jJH/BhIPR8kIBCQj1vna9TziZOrw1Of8hDU bHKFG9Pm8Dp2vbjz/2JH39qvxshPKVllGfq+5klPm7yZRUYTiCMAbqwNdL/nsqF2 Rnnyp58XRStJ -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#2> INFO { 
92F351BF3D54164DFA8DD8F9E1139D3150349786485D2B9EECD00E2971C1E6C5
}
intermediate_cert_notBefore <#2> INFO { 
2021-03-22 00:00
}
intermediate_cert_notAfter <#2> OK { 
2038-01-18 23:59
}
intermediate_cert_expiration <#2> OK { 
ok > 40 days
}
intermediate_cert_chain <#2> INFO { 
Sectigo Public Server Authentication Root R46 <-- USERTrust RSA Certification Authority
}
intermediate_cert <#3> INFO { 
-----BEGIN CERTIFICATE----- MIIF3jCCA8agAwIBAgIQAf1tMPyjylGoG7xkDjUDLTANBgkqhkiG9w0BAQwFADCB iDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0pl cnNleSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNV BAMTJVVTRVJUcnVzdCBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTAw MjAxMDAwMDAwWhcNMzgwMTE4MjM1OTU5WjCBiDELMAkGA1UEBhMCVVMxEzARBgNV BAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNleSBDaXR5MR4wHAYDVQQKExVU aGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMTJVVTRVJUcnVzdCBSU0EgQ2Vy dGlmaWNhdGlvbiBBdXRob3JpdHkwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK AoICAQCAEmUXNg7D2wiz0KxXDXbtzSfTTK1Qg2HiqiBNCS1kCdzOiZ/MPans9s/B 3PHTsdZ7NygRK0faOca8Ohm0X6a9fZ2jY0K2dvKpOyuR+OJv0OwWIJAJPuLodMkY tJHUYmTbf6MG8YgYapAiPLz+E/CHFHv25B+O1ORRxhFnRghRy4YUVD+8M/5+bJz/ Fp0YvVGONaanZshyZ9shZrHUm3gDwFA66Mzw3LyeTP6vBZY1H1dat//O+T23LLb2 VN3I5xI6Ta5MirdcmrS3ID3KfyI0rn47aGYBROcBTkZTmzNg95S+UzeQc0PzMsNT 79uq/nROacdrjGCT3sTHDN/hMq7MkztReJVni+49Vv4M0GkPGw/zJSZrM233bkf6 c0Plfg6lZrEpfDKEY1WJxA3Bk1QwGROs0303p+tdOmw1XNtB1xLaqUkL39iAigmT Yo61Zs8liM2EuLE/pDkP2QKe6xJMlXzzawWpXhaDzLhn4ugTncxbgtNMs+1b/97l c6wjOy0AvzVVdAlJ2ElYGn+SNuZRkg7zJn0cTRe8yexDJtC/QV9AqURE9JnnV4ee UB9XVKg+/XRjL7FQZQnmWEIuQxpMtPAlR1n6BB6T1CZGSlCBst6+eLf8ZxXhyVeE Hg9j1uliutZfVS7qXMYoCAQlObgOK6nyTJccBz8NUvXt7y+CDwIDAQABo0IwQDAd BgNVHQ4EFgQUU3m/WqorSs9UgOHYm8Cd8rIDZsswDgYDVR0PAQH/BAQDAgEGMA8G A1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEMBQADggIBAFzUfA3P9wF9QZllDHPF Up/L+M+ZBn8b2kMVn54CVVeWFPFSPCeHlCjtHzoBN6J2/FNQwISbxmtOuowhT6KO VWKR82kV2LyI48SqC/3vqOlLVSoGIG1VeCkZ7l8wXEskEVX/JJpuXior7gtNn3/3 ATiUFJVDBwn7YKnuHKsSjKCaXqeYalltiz8I+8jRRa8YFWSQEg9zKC7F4iRO/Fjs 8PRF/iKz6y+O0tlFYQXBl2+odnKPi4w2r78NBc5xjeambx9spnFixdjQg3IM8WcR iQycE0xyNN+81XHfqnHd4blsjDwSXWXavVcStkNr/+XeTWYRUc+ZruwXtuhxkYze Sf7dNXGiFSeUHM9h4ya7b6NnJSFd5t0dCy5oGzuCr+yDZ4XUmFF0sbmZgIn/f3gZ XHlKYC6SQK5MNyosycdiyA5d9zZbyuAlJQG03RoHnHcAP9Dc1ew91Pq7P8yF1m9/ qS3fuQL39ZeatTXaw2ewh0qpKJ4jjv9cJ2vhsE/zB+4ALtRZh8tSQZXq9EfX7mRB VXyNWQKV3WKdwrnuWih0hKWbt5DHDAff9Yk2dDLWKMGwsAvgnEzDHNb842m1R0aB L6KCq9NjRHDEjf8tM7qtj3u1cIiuPhnPQCjY/MiQu12ZIvVS5ljFH4gxQ+6IHdfG jjxDah2nGN59PRbxYvnKkKj9 -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#3> INFO { 
E793C9B02FD8AA13E21C31228ACCB08119643B749C898964B1746D46C3D4CBD2
}
intermediate_cert_notBefore <#3> INFO { 
2010-02-01 00:00
}
intermediate_cert_notAfter <#3> OK { 
2038-01-18 23:59
}
intermediate_cert_expiration <#3> OK { 
ok > 40 days
}
intermediate_cert_chain <#3> INFO { 
USERTrust RSA Certification Authority <-- USERTrust RSA Certification Authority
}
intermediate_cert_badOCSP OK { 
intermediate certificate(s) is/are ok
}
HTTP_status_code INFO { 
302  ('/')
}
HTTP_clock_skew INFO { 
0 seconds from localtime
}
HTTP_headerTime INFO { 
1782850938
}
HSTS_time OK { 
365 days (=31536000 seconds) > 15552000 seconds
}
HSTS_subdomains OK { 
includes subdomains
}
HSTS_preload INFO { 
domain is NOT marked for preloading
}
HPKP INFO { 
No support for HTTP Public Key Pinning
}
banner_server INFO { 
unknown
}
banner_application INFO { 
No application banner found
}
cookie_count INFO { 
1 at '/' (30x detected, better try target URL of 30x)
}
cookie_secure OK { 
All (1) at '/' marked as secure
}
cookie_httponly OK { 
All (1) at '/' marked as HttpOnly (30x detected, better try target URL of 30x)
}
X-Frame-Options OK { 
SAMEORIGIN
}
X-Content-Type-Options OK { 
nosniff
}
Content-Security-Policy OK { 
default-src 'none'; script-src https: blob: data: 'unsafe-inline' 'unsafe-eval' *.disqus.com c.disquscdn.com; worker-src https: blob:; child-src https: blob:; style-src https: data: 'unsafe-inline' 'unsafe-eval' c.disquscdn.com; img-src https: data: 'unsafe-inline'; font-src https: data:; object-src blob: 'self'; base-uri 'none'; frame-ancestors 'self' portal-tst.liberec.cz portal.liberec.cz; connect-src blob: 'self' *.openstreetmap.org *.disqus.com *.pixabay.com pixabay.com *.leady.com www.google-analytics.com region1.analytics.google.com stats.g.doubleclick.net; frame-src 'self' www.liberec.cz *.youtube.com *.vimeo.com docs.google.com disqus.com *.disqus.com oiapp.liberec.cz marushkapub.liberec.cz mapy.liberec.cz www.facebook.com; media-src https:;
}
X-XSS-Protection INFO { 
1; mode=block
}
Referrer-Policy INFO { 
same-origin
}
Cache-Control INFO { 
no-cache, no-store, max-age=0, must-revalidate
}
Pragma INFO { 
no-cache
}
banner_reverseproxy
zranitelnosti: CWE-200
INFO { 
--
}
heartbleed
zranitelnosti: CVE-2014-0160 CWE-119
OK { 
not vulnerable, no heartbeat extension
}
CCS
zranitelnosti: CVE-2014-0224 CWE-310
OK { 
not vulnerable
}
ticketbleed
zranitelnosti: CVE-2016-9244 CWE-200
OK { 
not vulnerable
}
ROBOT
zranitelnosti: CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168 CWE-203
OK { 
not vulnerable, no RSA key transport cipher
}
secure_renego
zranitelnosti: CWE-310
OK { 
supported
}
secure_client_renego
zranitelnosti: CVE-2011-1473 CWE-310
OK { 
likely not vulnerable (timed out)
}
CRIME_TLS
zranitelnosti: CVE-2012-4929 CWE-310
OK { 
not vulnerable
}
BREACH
zranitelnosti: CVE-2013-3587 CWE-310
OK { 
not vulnerable, no gzip/deflate/compress/br HTTP compression  - only supplied '/' tested
}
POODLE_SSL
zranitelnosti: CVE-2014-3566 CWE-310
OK { 
not vulnerable, no SSLv3
}
fallback_SCSV OK { 
no protocol below TLS 1.2 offered
}
SWEET32
zranitelnosti: CVE-2016-2183 CVE-2016-6329 CWE-327
OK { 
not vulnerable
}
FREAK
zranitelnosti: CVE-2015-0204 CWE-310
OK { 
not vulnerable
}
DROWN
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
OK { 
not vulnerable on this host and port
}
DROWN_hint
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
INFO { 
Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=28FCBD8624E1AD442EFB69AF372CEA80DDE1B1AFE2F67C42BCBA70975E0EA747
}
LOGJAM
zranitelnosti: CVE-2015-4000 CWE-310
OK { 
not vulnerable, no DH EXPORT ciphers,
}
LOGJAM-common_primes
zranitelnosti: CVE-2015-4000 CWE-310
OK { 
no DH key with <= TLS 1.2
}
BEAST
zranitelnosti: CVE-2011-3389 CWE-20
OK { 
not vulnerable, no SSL3 or TLS1
}
LUCKY13
zranitelnosti: CVE-2013-0169 CWE-310
LOW { 
potentially vulnerable, uses TLS CBC ciphers
}
winshock
zranitelnosti: CVE-2014-6321 CWE-94
OK { 
not vulnerable
}
RC4
zranitelnosti: CVE-2013-2566 CVE-2015-2808 CWE-310
OK { 
not vulnerable
}
clientsimulation-android_442 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-android_500 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA
}
clientsimulation-android_60 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-android_70 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-android_81 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-android_90 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-android_X INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-chrome_74_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-chrome_79_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-firefox_66_win81 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-firefox_71_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-ie_6_xp INFO { 
No connection
}
clientsimulation-ie_8_win7 INFO { 
No connection
}
clientsimulation-ie_8_xp INFO { 
No connection
}
clientsimulation-ie_11_win7 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA384
}
clientsimulation-ie_11_win81 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA384
}
clientsimulation-ie_11_winphone81 INFO { 
TLSv1.2 ECDHE-RSA-AES128-SHA256
}
clientsimulation-ie_11_win10 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-edge_15_win10 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-edge_17_win10 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-opera_66_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-safari_9_ios9 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-safari_9_osx1011 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-safari_10_osx1012 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-safari_121_ios_122 INFO { 
TLSv1.3 TLS_CHACHA20_POLY1305_SHA256
}
clientsimulation-safari_130_osx_10146 INFO { 
TLSv1.3 TLS_CHACHA20_POLY1305_SHA256
}
clientsimulation-apple_ats_9_ios9 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-java_6u45 INFO { 
No connection
}
clientsimulation-java_7u25 INFO { 
No connection
}
clientsimulation-java_8u161 INFO { 
TLSv1.2 ECDHE-RSA-AES256-SHA384
}
clientsimulation-java1102 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-java1201 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-openssl_102e INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-openssl_110l INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-openssl_111d INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-thunderbird_68_3_1 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
rating_spec INFO { 
SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)
}
rating_doc INFO { 
https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide
}
protocol_support_score INFO { 
100
}
protocol_support_score_weighted INFO { 
30
}
key_exchange_score INFO { 
90
}
key_exchange_score_weighted INFO { 
27
}
cipher_strength_score INFO { 
90
}
cipher_strength_score_weighted INFO { 
36
}
final_score INFO { 
93
}
overall_grade OK { 
A+
}
scanTime INFO { 
94
}