Přihlásit se Registrace
Smlouvy Dotace Platy Úřady Zakázky Sponzoři & firmy PastVina 
❤ Podpořte nás Přihlásit se Registrace
Hledat v Hlídači státu
Nápověda jak vyhledávat Snadné hledání
  1. Hlídač Státu
  2. Hlídač Webů
  3. Detailní analýza HTTPs pro Kraj Vysočina

Hlídač Kraj Vysočina Detailní analýza HTTPs pro Kraj Vysočina

Kraj Vysočina
https://www.kr-vysocina.cz/

Kraj Vysočina Kraj Vysočina - webové stránky kraje

Zabezpečení komunikace

T
Certifikát expiruje za 142 dní.

Výsledek analýzy HTTPS na www.kr-vysocina.cz ze dne 30.06.2026

Služba je chráněna certifikátem od certifikační autority, kterou hlavní prohlížeče neznají nebo jí nedůvěřují. V českých podmínkách to znamená nejspíše certifikáty vydané našimi vnitrostátními autoritami (ICA, PostSignum a eIdentity), které sice stát zákonem prohlásil za důvěryhodné, ale které nesplňují mezinárodní podmínky nutné proto, aby je za důvěryhodné pokládali i autoři prohlížečů.

Detailní analýza

Detailní report z HTTPs analýzy pomocí nástroje testssl.sh

server www.kr-vysocina.cz/195.93.216.191
pre_128cipher INFO { 
No 128 cipher limit bug
}
SSLv2 OK { 
not offered
}
SSLv3 OK { 
not offered
}
TLS1 INFO { 
not offered
}
TLS1_1 INFO { 
not offered
}
TLS1_2 OK { 
offered
}
TLS1_3 OK { 
offered with final
}
NPN INFO { 
not offered
}
ALPN INFO { 
not offered
}
cipherlist_NULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_aNULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_EXPORT
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_LOW
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_3DES_IDEA
zranitelnosti: CWE-310
INFO { 
not offered
}
cipherlist_AVERAGE
zranitelnosti: CWE-310
LOW { 
offered
}
cipherlist_GOOD OK { 
offered
}
cipherlist_STRONG OK { 
offered
}
cipher_order OK { 
server
}
protocol_negotiated OK { 
Default protocol TLS1.3
}
cipher_negotiated OK { 
TLS_AES_128_GCM_SHA256, 256 bit ECDH (P-256)
}
cipher-tls1_2_xc02f OK { 
TLSv1.2   xc02f   ECDHE-RSA-AES128-GCM-SHA256       ECDH 256   AESGCM      128      TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_xc013 LOW { 
TLSv1.2   xc013   ECDHE-RSA-AES128-SHA              ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_2_xc027 LOW { 
TLSv1.2   xc027   ECDHE-RSA-AES128-SHA256           ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
}
cipher-tls1_2_xc030 OK { 
TLSv1.2   xc030   ECDHE-RSA-AES256-GCM-SHA384       ECDH 256   AESGCM      256      TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_xc014 LOW { 
TLSv1.2   xc014   ECDHE-RSA-AES256-SHA              ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_2_xc028 LOW { 
TLSv1.2   xc028   ECDHE-RSA-AES256-SHA384           ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
}
cipher-tls1_2_x9c OK { 
TLSv1.2   x9c     AES128-GCM-SHA256                 RSA        AESGCM      128      TLS_RSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_x2f LOW { 
TLSv1.2   x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_2_x3c LOW { 
TLSv1.2   x3c     AES128-SHA256                     RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA256
}
cipher-tls1_2_x9d OK { 
TLSv1.2   x9d     AES256-GCM-SHA384                 RSA        AESGCM      256      TLS_RSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_x35 LOW { 
TLSv1.2   x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_2_x3d LOW { 
TLSv1.2   x3d     AES256-SHA256                     RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA256
}
cipher-tls1_2_x41 LOW { 
TLSv1.2   x41     CAMELLIA128-SHA                   RSA        Camellia    128      TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
}
cipher-tls1_2_x84 LOW { 
TLSv1.2   x84     CAMELLIA256-SHA                   RSA        Camellia    256      TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
}
cipher-tls1_2_x9e OK { 
TLSv1.2   x9e     DHE-RSA-AES128-GCM-SHA256         DH 2048    AESGCM      128      TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
}
cipher-tls1_2_x33 LOW { 
TLSv1.2   x33     DHE-RSA-AES128-SHA                DH 2048    AES         128      TLS_DHE_RSA_WITH_AES_128_CBC_SHA
}
cipher-tls1_2_x67 LOW { 
TLSv1.2   x67     DHE-RSA-AES128-SHA256             DH 2048    AES         128      TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
}
cipher-tls1_2_x9f OK { 
TLSv1.2   x9f     DHE-RSA-AES256-GCM-SHA384         DH 2048    AESGCM      256      TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_x39 LOW { 
TLSv1.2   x39     DHE-RSA-AES256-SHA                DH 2048    AES         256      TLS_DHE_RSA_WITH_AES_256_CBC_SHA
}
cipher-tls1_2_x6b LOW { 
TLSv1.2   x6b     DHE-RSA-AES256-SHA256             DH 2048    AES         256      TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
}
cipher-tls1_2_x45 LOW { 
TLSv1.2   x45     DHE-RSA-CAMELLIA128-SHA           DH 2048    Camellia    128      TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
}
cipher-tls1_2_x88 LOW { 
TLSv1.2   x88     DHE-RSA-CAMELLIA256-SHA           DH 2048    Camellia    256      TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
}
cipherorder_TLSv1_2 INFO { 
ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES256-SHA384 AES128-GCM-SHA256 AES128-SHA AES128-SHA256 AES256-GCM-SHA384 AES256-SHA AES256-SHA256 CAMELLIA128-SHA CAMELLIA256-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA DHE-RSA-AES128-SHA256 DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA DHE-RSA-AES256-SHA256 DHE-RSA-CAMELLIA128-SHA DHE-RSA-CAMELLIA256-SHA
}
cipher-tls1_3_x1301 OK { 
TLSv1.3   x1301   TLS_AES_128_GCM_SHA256            ECDH 256   AESGCM      128      TLS_AES_128_GCM_SHA256
}
cipher-tls1_3_x1302 OK { 
TLSv1.3   x1302   TLS_AES_256_GCM_SHA384            ECDH 256   AESGCM      256      TLS_AES_256_GCM_SHA384
}
cipher-tls1_3_x1304 OK { 
TLSv1.3   x1304   TLS_AES_128_CCM_SHA256            ECDH 256   AESCCM      128      TLS_AES_128_CCM_SHA256
}
cipher-tls1_3_x1305 OK { 
TLSv1.3   x1305   TLS_AES_128_CCM_8_SHA256          ECDH 256   AESCCM8     128      TLS_AES_128_CCM_8_SHA256
}
cipherorder_TLSv1_3 INFO { 
TLS_AES_128_GCM_SHA256 TLS_AES_256_GCM_SHA384 TLS_AES_128_CCM_SHA256 TLS_AES_128_CCM_8_SHA256
}
FS OK { 
offered
}
FS_ciphers INFO { 
TLS_AES_256_GCM_SHA384 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA TLS_AES_128_GCM_SHA256 TLS_AES_128_CCM_SHA256 TLS_AES_128_CCM_8_SHA256 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA
}
FS_ECDHE_curves OK { 
prime256v1 secp384r1
}
DH_groups OK { 
ffdhe3072 ffdhe4096
}
TLS_extensions INFO { 
'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'key share/#51' 'supported versions/#43' 'extended master secret/#23'
}
TLS_session_ticket INFO { 
no -- no lifetime advertised
}
SSL_sessionID_support INFO { 
yes
}
sessionresumption_ticket INFO { 
not supported
}
sessionresumption_ID INFO { 
supported
}
TLS_timestamp INFO { 
random
}
certificate_compression INFO { 
none
}
clientAuth INFO { 
none
}
cert_numbers INFO { 
1
}
cert_signatureAlgorithm OK { 
SHA256 with RSA
}
cert_keySize OK { 
RSA 3072 bits (exponent is 65537)
}
cert_keyUsage INFO { 
Digital Signature, Key Encipherment
}
cert_extKeyUsage INFO { 
TLS Web Client Authentication, TLS Web Server Authentication
}
cert_serialNumber INFO { 
41837B49AF96A98BE66768797141C2A9
}
cert_serialNumberLen INFO { 
16
}
cert_fingerprintSHA1 INFO { 
603C96DAF799AFE9470CCB36530037CC6D4349AA
}
cert_fingerprintSHA256 INFO { 
BCAA5568138D111D6D13B9A5DD4E2767697D4A906C1C18ACC1BCB0540796B92B
}
cert INFO { 
-----BEGIN CERTIFICATE----- MIILDTCCCXWgAwIBAgIQQYN7Sa+WqYvmZ2h5cUHCqTANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJl c2VhcmNoIEluc3RpdHV0aW9ucyBDQTEYMBYGA1UEAwwPR0VBTlQgVExTIFJTQSAx MB4XDTI1MTEyMTA5NTE1M1oXDTI2MTEyMTA5NTE1M1owajELMAkGA1UEBhMCQ1ox FzAVBgNVBAgMDktyYWogVnlzb8SNaW5hMRAwDgYDVQQHDAdKaWhsYXZhMRcwFQYD VQQKDA5LcmFqIFZ5c2/EjWluYTEXMBUGA1UEAwwOa3Itdnlzb2NpbmEuY3owggGi MA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQDm/27m52EGQkCYTi2k1w7QU91F e/fVPfSm35kvq1ePOA3vin0HFDEMiIckQ7PO2jQdbAEjs5VbuWDwz0eT4PySuJJT O02Se3s5tCYBbAobRlKrT0CJfPUyMkqUrBViEyzlLp8dbxVMphc3krj9E6IpEuxV 47odW+A0qCxQ7jrw6ET8Bn206cl+dMmbvhQydKKEcag1zcRqYlwid3s2qBu/0oyP Twq0WWnQ4MYJdqhx6phb24znYdbj5Mw8h6En78+g/3758RhmYDik15SCpF8Ix0AG SuVpmlhvHE3aCWGrievaxgvLowyPlJRL32IIiAo873oQiftuKDmHn0TpHxBh+g1f ey7MqecF3OePk7U9uHrwiQc41k1rInQUy0NP5L1INbWd05WIXrWefLojmck6Kmd8 9JVkwCZKL34HX708YS6FPsVt6h6cyIfo7H5iecBg+3idt4WBrvQd61IK5VlLF/Lc JgF1XOiKkAuWZhWw+UDqgyk3PUxWf6owfMgS8HMCAwEAAaOCBrcwggazMB8GA1Ud IwQYMBaAFIYBcj+MqXDiMQZTFs4BX1t5yDw7MG8GCCsGAQUFBwEBBGMwYTA4Bggr BgEFBQcwAoYsaHR0cDovL2NydC5oYXJpY2EuZ3IvSEFSSUNBLUdFQU5ULVRMUy1S MS5jZXIwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLXRscy5oYXJpY2EuZ3IwggPd BgNVHREEggPUMIID0IIOa3Itdnlzb2NpbmEuY3qCHXd3dy5iZXpwZWNub3N0Lmty LXZ5c29jaW5hLmN6ght3d3cudWtyYWppbmEua3Itdnlzb2NpbmEuY3qCFGxkYXY0 LmtyLXZ5c29jaW5hLmN6ghZtYXBhdmR2LmtyLXZ5c29jaW5hLmN6gg1wcnV2b2Rj ZTR1LmN6ghliZXpwZWNub3N0LmtyLXZ5c29jaW5hLmN6ghd1a3JhamluYS5rci12 eXNvY2luYS5jeoIZdmVyZWpuYWRvcHJhdmF2eXNvY2lueS5jeoIYd3d3LmxkYXY0 LmtyLXZ5c29jaW5hLmN6ghNvY2tvdmFuaXZ5c29jaW5hLmN6gglpZHN2ZHYuY3qC GHd3dy5tYWcyMS5rci12eXNvY2luYS5jeoIVbWxhZGV6LmtyLXZ5c29jaW5hLmN6 ghdub3ZpbmFyaS5rci12eXNvY2luYS5jeoIbZm9uZHZ5c29jaW55LmtyLXZ5c29j aW5hLmN6ggl2ZHZpZHMuY3qCFmt1bHR1cmEua3Itdnlzb2NpbmEuY3qCGXd3dy5h cmNoaXYua3Itdnlzb2NpbmEuY3qCHXd3dy5vcmdhbml6YWNlLmtyLXZ5c29jaW5h LmN6ghBtLmtyLXZ5c29jaW5hLmN6ghJkdG0ua3Itdnlzb2NpbmEuY3qCHHd3dy56 YWhyYW5pY2kua3Itdnlzb2NpbmEuY3qCDXd3dy52ZHZpZHMuY3qCF3d3dy5vY2tv dmFuaXZ5c29jaW5hLmN6gh13d3cudmVyZWpuYWRvcHJhdmF2eXNvY2lueS5jeoIV YXJjaGl2LmtyLXZ5c29jaW5hLmN6gh93d3cuZm9uZHZ5c29jaW55LmtyLXZ5c29j aW5hLmN6ghRtYWcyMS5rci12eXNvY2luYS5jeoIYemFocmFuaWNpLmtyLXZ5c29j aW5hLmN6ghl3d3cubWxhZGV6LmtyLXZ5c29jaW5hLmN6ghZkaXNrdXplLmtyLXZ5 c29jaW5hLmN6ghJ3d3cua3Itdnlzb2NpbmEuY3qCDXd3dy5pZHN2ZHYuY3qCEXd3 dy5wcnV2b2RjZTR1LmN6ghZ3d3cuZHRtLmtyLXZ5c29jaW5hLmN6ghp3d3cua3Vs dHVyYS5rci12eXNvY2luYS5jeoIad3d3LmRpc2t1emUua3Itdnlzb2NpbmEuY3qC GW9yZ2FuaXphY2Uua3Itdnlzb2NpbmEuY3qCG3d3dy5ub3ZpbmFyaS5rci12eXNv Y2luYS5jeoIUd3d3Lm0ua3Itdnlzb2NpbmEuY3owLQYDVR0gBCYwJDAIBgZngQwB AgIwCAYGBACPegEHMA4GDCsGAQQBgc8RAQEBAjAdBgNVHSUEFjAUBggrBgEFBQcD AgYIKwYBBQUHAwEwPQYDVR0fBDYwNDAyoDCgLoYsaHR0cDovL2NybC5oYXJpY2Eu Z3IvSEFSSUNBLUdFQU5ULVRMUy1SMS5jcmwwHQYDVR0OBBYEFAyvvb3TDJ3I/xif GaK2y9sYBkPFMA4GA1UdDwEB/wQEAwIFoDCCAYAGCisGAQQB1nkCBAIEggFwBIIB bAFqAHYAlE5Dh/rswe+B8xkkJqgYZQHH0184AgE/cmd9VTcuGdgAAAGapdz+hwAA BAMARzBFAiBfBaROFlLFc1It9avMFu92ZmY+LJngtV16/G953ihPZwIhAIHOi7+A HqTJl9/Sa8tM3Mw9aTyuQ2NVzahva4EdqpsfAHcA2AlVO5RPev/IFhlvlE+Fq7D4 /F6HVSYPFdEucrtFSxQAAAGapdz+UwAABAMASDBGAiEApEkftq4tZ4M94hNl2Xi2 lGilRjkgqNopjXTv5xDmMTsCIQDIsx+wnKIzZ7jhcxGy64EPdGltL6plT40tDR8w Jai4OwB3AKyrMHBs6+yEMfQT0vSRXxEeQiRDsfKmjE88KzunHgLDAAABmqXc/oUA AAQDAEgwRgIhAPt2YCt4BmF4rCXFRUog/gwna2LbP9DO6pG7dN52IoViAiEAr2om Q2YOekMYYvedVeCMNe4EuCFalC/ZTm6TDJzHM4IwDQYJKoZIhvcNAQELBQADggGB AEOEZYV5AE8ibzcUvEYjGogv2Nu/6xVLXaB3AAq4gOOWohSJc6ZPTQ9r24QrK57P v4jPHSdPq3Ah6IC+AchfSaWIRa/Qqi7vWncjSUVD0QROjrjEYtOvzfLPH1/jPbQf WneOUSyb1sRqqZpyFWt4BuockEbj5D+7i+IeSgXCrqZm4U+fl/4xZTtumbDmB/PR WesDcvTTauvPPheCwrbqbar8wXvYq7p34WwO4KnYSdj9yyXCwzDE3zhJM+0iVYoX 0ajQGLkmAk6qJK5DRGCBaKwxoLGz4IXoQGY38PFNKfdxPBaUjdq5oMQtWIibPTqc VUiWGaH66UHH0SzmI+HoSXfBxrlMHqEkf7yJLU1JSuEwDLKMzs7wP0p6r9M67NY4 AzWzs71SXuodDxRr8Hyqus5wnLspLZo0aiSP/RHq9Z+4ZJEHITBCwh0WwDVCbxNg gif6aAtODcEC9stmKwgm+7S2i+kzul7xIdqfXk0K/0SA8a7fDxx8FmIo2PH4xTsL JA== -----END CERTIFICATE-----
}
cert_commonName OK { 
kr-vysocina.cz
}
cert_commonName_wo_SNI INFO { 
kr-vysocina.cz
}
cert_subjectAltName INFO { 
kr-vysocina.cz www.bezpecnost.kr-vysocina.cz www.ukrajina.kr-vysocina.cz ldav4.kr-vysocina.cz mapavdv.kr-vysocina.cz pruvodce4u.cz bezpecnost.kr-vysocina.cz ukrajina.kr-vysocina.cz verejnadopravavysociny.cz www.ldav4.kr-vysocina.cz ockovanivysocina.cz idsvdv.cz www.mag21.kr-vysocina.cz mladez.kr-vysocina.cz novinari.kr-vysocina.cz fondvysociny.kr-vysocina.cz vdvids.cz kultura.kr-vysocina.cz www.archiv.kr-vysocina.cz www.organizace.kr-vysocina.cz m.kr-vysocina.cz dtm.kr-vysocina.cz www.zahranici.kr-vysocina.cz www.vdvids.cz www.ockovanivysocina.cz www.verejnadopravavysociny.cz archiv.kr-vysocina.cz www.fondvysociny.kr-vysocina.cz mag21.kr-vysocina.cz zahranici.kr-vysocina.cz www.mladez.kr-vysocina.cz diskuze.kr-vysocina.cz www.kr-vysocina.cz www.idsvdv.cz www.pruvodce4u.cz www.dtm.kr-vysocina.cz www.kultura.kr-vysocina.cz www.diskuze.kr-vysocina.cz organizace.kr-vysocina.cz www.novinari.kr-vysocina.cz www.m.kr-vysocina.cz
}
cert_trust OK { 
Ok via SAN (same w/o SNI)
}
cert_chain_of_trust CRITICAL { 
failed (chain incomplete).
}
cert_certificatePolicies_EV INFO { 
no
}
cert_expirationStatus OK { 
143 >= 60 days
}
cert_notBefore INFO { 
2025-11-21 09:51
}
cert_notAfter OK { 
2026-11-21 09:51
}
cert_extlifeSpan OK { 
certificate has no extended life time according to browser forum
}
cert_eTLS INFO { 
not present
}
cert_crlDistributionPoints INFO { 
http://crl.harica.gr/HARICA-GEANT-TLS-R1.crl
}
cert_ocspURL INFO { 
http://ocsp-tls.harica.gr
}
OCSP_stapling LOW { 
not offered
}
cert_mustStapleExtension INFO { 
--
}
DNS_CAArecord LOW { 
--
}
certificate_transparency OK { 
yes (certificate extension)
}
certs_countServer INFO { 
2
}
certs_list_ordering_problem INFO { 
no
}
cert_caIssuers INFO { 
GEANT TLS RSA 1 (Hellenic Academic and Research Institutions CA from GR)
}
intermediate_cert <#1> INFO { 
-----BEGIN CERTIFICATE----- MIIGBTCCA+2gAwIBAgIQFNV782kiKCGaVWf6kWUbIjANBgkqhkiG9w0BAQsFADBs MQswCQYDVQQGEwJHUjE3MDUGA1UECgwuSGVsbGVuaWMgQWNhZGVtaWMgYW5kIFJl c2VhcmNoIEluc3RpdHV0aW9ucyBDQTEkMCIGA1UEAwwbSEFSSUNBIFRMUyBSU0Eg Um9vdCBDQSAyMDIxMB4XDTI1MDEwMzExMTUwMFoXDTM5MTIzMTExMTQ1OVowYDEL MAkGA1UEBhMCR1IxNzA1BgNVBAoMLkhlbGxlbmljIEFjYWRlbWljIGFuZCBSZXNl YXJjaCBJbnN0aXR1dGlvbnMgQ0ExGDAWBgNVBAMMD0dFQU5UIFRMUyBSU0EgMTCC AaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBAKEEaZSzEzznAPk8IEa17GSG yJzPTj4cwRY7/vcq2BPT5+IRGxQtaCdgLXIEl2cdPdIkj2eyakFmgMjAtyeju8V8 dRayQCD/bWjJ7thDlowgLljQaXirxnYbT8bzRHAhCZqBakYgi5KWw9dANLyDHGpX UdY259ab0lWEaFE5Uu6IzQSMJOAy4l/Twym8GUiy0qMDEBFSlm31C9BXpdHKKAlh vIjMiKoDeTWl5vZaLB2MMRGY1yW2ftPgIP0/MkX1uFITlvHmmMTngxplH1nybEIJ FiwHg1KiLk1TprcZgeO2gxE5Lz3wTFWrsUlAzrh5xWmscWkjNi/4BpeuiT5+NExF czboLnXOfjuci/7bsnPi1/aZN/iKNbJRnngFoLaKVMmqCS7Xo34f+BITatryQZFE u2oDKExQGlxDBCfYMLgLucX/onpLzUSgeQITNLx6i5tGGbUYH+9Dy3GI66L/5tPj qzlOsydki8ZYGE5SBJeWCZ2IrhUe0WzZ2b6Zhk6JAQIDAQABo4IBLTCCASkwEgYD VR0TAQH/BAgwBgEB/wIBADAfBgNVHSMEGDAWgBQKSCOmYKSSCjPqk1vFV+olTb0S 7jBNBggrBgEFBQcBAQRBMD8wPQYIKwYBBQUHMAKGMWh0dHA6Ly9jcnQuaGFyaWNh LmdyL0hBUklDQS1UTFMtUm9vdC0yMDIxLVJTQS5jZXIwEQYDVR0gBAowCDAGBgRV HSAAMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATBCBgNVHR8EOzA5MDeg NaAzhjFodHRwOi8vY3JsLmhhcmljYS5nci9IQVJJQ0EtVExTLVJvb3QtMjAyMS1S U0EuY3JsMB0GA1UdDgQWBBSGAXI/jKlw4jEGUxbOAV9becg8OzAOBgNVHQ8BAf8E BAMCAYYwDQYJKoZIhvcNAQELBQADggIBABkssjQzYrOo4GMsKegaChP16yNe6Sck cWBymM455R2rMeuQ3zlxUNOEt+KUfgueOA2urp4j6TlPbs/XxpwuN3I1f09Luk5b +ZgRXM7obE6ZLTerVQWKoTShyl34R2XlK8pEy7+67Ht4lcJzt+K6K5gEuoPSGQDP ef+fUfmXrFcgBMcMbtfDb9dubFKNZZxo5nAXiqhFMOIyByag3H+tOTuH8zuId9pH RDsUpAIHJ9/W2WBfLcKav7IKRlNBRD/sPBy903J9WHPKwl8kQSDA+aa7XCYk7bJt Eyf+7GM9F5cZ7+YyknXqnv/rtQEkTKZdQo5Us18VFe9qqj94tXbLdk7PejJYNB4O Zlli44Ld7rtqfFlUych7gIxFOmiyxMQQYrYmUi+74lEZvfoNhuref0CupuKpz6O3 dLv6kO9T10uNdDBoBQTkge3UzHafTIe3R2o3ujXKUGPwyc9m7/FETyKLUCwSU/5O AVOeBCU8QtkKKjM8AmbpKpe3pHWcyq3R7B3LmIALkMPTydyDfxen65IDqREbVq8N xjhkJThUz40JqOlN6uqKqeDISj/IoucYwsqW24AlO7ZzNmohQmMi8ep23H4hBSh0 GBTe2XvkuzaNf92syK8l2HzO+13GLCjzYLTPvXTO9UpK8DGyfGZOuamuwbAnbNpE 3RfjV9IaUQGJ -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#1> INFO { 
5B678DC44095A52895B63B31F27227F4B36C3E347491BF2BFA691837A5FB8C79
}
intermediate_cert_notBefore <#1> INFO { 
2025-01-03 11:15
}
intermediate_cert_notAfter <#1> OK { 
2039-12-31 11:14
}
intermediate_cert_expiration <#1> OK { 
ok > 40 days
}
intermediate_cert_chain <#1> INFO { 
GEANT TLS RSA 1 <-- HARICA TLS RSA Root CA 2021
}
intermediate_cert_badOCSP OK { 
intermediate certificate(s) is/are ok
}
heartbleed
zranitelnosti: CVE-2014-0160 CWE-119
OK { 
not vulnerable, no heartbeat extension
}
CCS
zranitelnosti: CVE-2014-0224 CWE-310
OK { 
not vulnerable
}
ticketbleed
zranitelnosti: CVE-2016-9244 CWE-200
INFO { 
not applicable, not HTTP
}
ROBOT
zranitelnosti: CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168 CWE-203
OK { 
not vulnerable
}
secure_renego
zranitelnosti: CWE-310
OK { 
supported
}
secure_client_renego
zranitelnosti: CVE-2011-1473 CWE-310
OK { 
not vulnerable
}
CRIME_TLS
zranitelnosti: CVE-2012-4929 CWE-310
OK { 
not vulnerable (not using HTTP anyway)
}
POODLE_SSL
zranitelnosti: CVE-2014-3566 CWE-310
OK { 
not vulnerable, no SSLv3
}
fallback_SCSV OK { 
no protocol below TLS 1.2 offered
}
SWEET32
zranitelnosti: CVE-2016-2183 CVE-2016-6329 CWE-327
OK { 
not vulnerable
}
FREAK
zranitelnosti: CVE-2015-0204 CWE-310
OK { 
not vulnerable
}
DROWN
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
OK { 
not vulnerable on this host and port
}
DROWN_hint
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
INFO { 
Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=BCAA5568138D111D6D13B9A5DD4E2767697D4A906C1C18ACC1BCB0540796B92B
}
LOGJAM-common_primes
zranitelnosti: CVE-2015-4000 CWE-310
INFO { 
RFC7919/ffdhe2048
}
LOGJAM
zranitelnosti: CVE-2015-4000 CWE-310
OK { 
not vulnerable, no DH EXPORT ciphers,
}
BEAST
zranitelnosti: CVE-2011-3389 CWE-20
OK { 
not vulnerable, no SSL3 or TLS1
}
LUCKY13
zranitelnosti: CVE-2013-0169 CWE-310
LOW { 
potentially vulnerable, uses TLS CBC ciphers
}
winshock
zranitelnosti: CVE-2014-6321 CWE-94
OK { 
not vulnerable
}
RC4
zranitelnosti: CVE-2013-2566 CVE-2015-2808 CWE-310
OK { 
not vulnerable
}
clientsimulation-android_442 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-android_500 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-android_60 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-android_70 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-android_81 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-android_90 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-android_X INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-chrome_74_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-chrome_79_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-firefox_66_win81 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-firefox_71_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-ie_6_xp INFO { 
No connection
}
clientsimulation-ie_8_win7 INFO { 
No connection
}
clientsimulation-ie_8_xp INFO { 
No connection
}
clientsimulation-ie_11_win7 INFO { 
TLSv1.2 ECDHE-RSA-AES128-SHA
}
clientsimulation-ie_11_win81 INFO { 
TLSv1.2 ECDHE-RSA-AES128-SHA
}
clientsimulation-ie_11_winphone81 INFO { 
TLSv1.2 ECDHE-RSA-AES128-SHA
}
clientsimulation-ie_11_win10 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-edge_15_win10 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-edge_17_win10 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-opera_66_win10 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-safari_9_ios9 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-safari_9_osx1011 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-safari_10_osx1012 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-safari_121_ios_122 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-safari_130_osx_10146 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-apple_ats_9_ios9 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-java_6u45 INFO { 
No connection
}
clientsimulation-java_7u25 INFO { 
No connection
}
clientsimulation-java_8u161 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-java1102 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-java1201 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-openssl_102e INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-openssl_110l INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-openssl_111d INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
clientsimulation-thunderbird_68_3_1 INFO { 
TLSv1.3 TLS_AES_128_GCM_SHA256
}
rating_spec INFO { 
SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)
}
rating_doc INFO { 
https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide
}
protocol_support_score INFO { 
0
}
protocol_support_score_weighted INFO { 
0
}
key_exchange_score INFO { 
0
}
key_exchange_score_weighted INFO { 
0
}
cipher_strength_score INFO { 
0
}
cipher_strength_score_weighted INFO { 
0
}
final_score INFO { 
0
}
overall_grade CRITICAL { 
T
}
grade_cap_reason_1 INFO { 
Grade capped to T. Issues with the chain of trust (chain incomplete)
}
scanTime INFO { 
109
}