Přihlásit se Registrace
Smlouvy Dotace Platy Úřady Zakázky Sponzoři & firmy Kauzy, analýzy
❤ Podpořte nás Přihlásit se Registrace
Hledat v Hlídači státu
Nápověda jak vyhledávat Snadné hledání
  1. Hlídač Státu
  2. Hlídač Webů
  3. Detailní analýza HTTPs pro Liberecký kraj

Hlídač Liberecký kraj Detailní analýza HTTPs pro Liberecký kraj

Liberecký kraj
https://www.kraj-lbc.cz/

Liberecký kraj Liberecký kraj - webové stránky kraje

Zabezpečení komunikace

A+
Certifikát expiruje za 89 dní.

Výsledek analýzy HTTPS na www.kraj-lbc.cz ze dne 13.11.2026

Všechno je v nejlepším pořádku a web se drží doporučených postupů.

Detailní analýza

Detailní report z HTTPs analýzy pomocí nástroje testssl.sh

server www.kraj-lbc.cz/185.89.116.20
pre_128cipher INFO { 
No 128 cipher limit bug
}
SSLv2 OK { 
not offered
}
SSLv3 OK { 
not offered
}
TLS1 INFO { 
not offered
}
TLS1_1 INFO { 
not offered
}
TLS1_2 OK { 
offered
}
TLS1_3 OK { 
offered with final
}
NPN INFO { 
not offered
}
ALPN_HTTP2 OK { 
h2
}
ALPN INFO { 
http/1.1
}
cipherlist_NULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_aNULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_EXPORT
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_LOW
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_3DES_IDEA
zranitelnosti: CWE-310
INFO { 
not offered
}
cipherlist_AVERAGE
zranitelnosti: CWE-310
INFO { 
not offered
}
cipherlist_GOOD INFO { 
not offered
}
cipherlist_STRONG OK { 
offered
}
cipher_order OK { 
server
}
protocol_negotiated OK { 
Default protocol TLS1.3
}
cipher_negotiated OK { 
TLS_AES_256_GCM_SHA384, 253 bit ECDH (X25519)
}
cipher-tls1_2_xc02c OK { 
TLSv1.2   xc02c   ECDHE-ECDSA-AES256-GCM-SHA384     ECDH 256   AESGCM      256      TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
}
cipher-tls1_2_xc02b OK { 
TLSv1.2   xc02b   ECDHE-ECDSA-AES128-GCM-SHA256     ECDH 256   AESGCM      128      TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
}
cipherorder_TLSv1_2 INFO { 
ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES128-GCM-SHA256
}
cipher-tls1_3_x1302 OK { 
TLSv1.3   x1302   TLS_AES_256_GCM_SHA384            ECDH 253   AESGCM      256      TLS_AES_256_GCM_SHA384
}
cipher-tls1_3_x1301 OK { 
TLSv1.3   x1301   TLS_AES_128_GCM_SHA256            ECDH 253   AESGCM      128      TLS_AES_128_GCM_SHA256
}
cipher-tls1_3_x1303 OK { 
TLSv1.3   x1303   TLS_CHACHA20_POLY1305_SHA256      ECDH 253   ChaCha20    256      TLS_CHACHA20_POLY1305_SHA256
}
cipherorder_TLSv1_3 INFO { 
TLS_AES_256_GCM_SHA384 TLS_AES_128_GCM_SHA256 TLS_CHACHA20_POLY1305_SHA256
}
prioritize_chacha_TLSv1_3 INFO { 
false
}
FS OK { 
offered
}
FS_ciphers INFO { 
TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 ECDHE-ECDSA-AES256-GCM-SHA384 TLS_AES_128_GCM_SHA256 ECDHE-ECDSA-AES128-GCM-SHA256
}
FS_ECDHE_curves OK { 
prime256v1 secp384r1 secp521r1 X25519 X448
}
TLS_extensions INFO { 
'renegotiation info/#65281' 'EC point formats/#11' 'supported versions/#43' 'key share/#51' 'supported_groups/#10' 'extended master secret/#23' 'application layer protocol negotiation/#16'
}
TLS_session_ticket INFO { 
no -- no lifetime advertised
}
SSL_sessionID_support INFO { 
yes
}
sessionresumption_ticket INFO { 
not supported
}
sessionresumption_ID INFO { 
supported
}
TLS_timestamp INFO { 
random
}
certificate_compression INFO { 
none
}
clientAuth INFO { 
none
}
cert_numbers INFO { 
1
}
cert_signatureAlgorithm OK { 
ECDSA with SHA384
}
cert_keySize OK { 
EC 256 bits (curve P-256)
}
cert_keyUsage INFO { 
Digital Signature
}
cert_extKeyUsage INFO { 
TLS Web Server Authentication
}
cert_serialNumber INFO { 
05311DF59B596616CCEBD619FDF2562127F8
}
cert_serialNumberLen INFO { 
18
}
cert_fingerprintSHA1 INFO { 
9361996C1F10FA487057FFE4BCCDED5281B65A73
}
cert_fingerprintSHA256 INFO { 
4DC03A996978FAFA1151AE0A9305AA57D6D100C982E5DF2E3A79EABFC16B40A4
}
cert INFO { 
-----BEGIN CERTIFICATE----- MIIJpTCCCSqgAwIBAgISBTEd9ZtZZhbM69YZ/fJWISf4MAoGCCqGSM49BAMDMDMx CzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQDEwNZ RTEwHhcNMjYxMTEzMTIwMjM3WhcNMjcwMjExMTIwMjM2WjAdMRswGQYDVQQDExJw cm94eTMua3Jhai1sYmMuY3owWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQVny6q XOOqD509L8J0zAC/hAkMn0b4hEVoleD8ppTglWTd8l87OBi2Obn6kqNXR4KIbZ2a Rf0Ib/C3NeAFxa94o4IIMjCCCC4wDgYDVR0PAQH/BAQDAgeAMBMGA1UdJQQMMAoG CCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPmmX097qelQEoNY70VU ye8OishCMB8GA1UdIwQYMBaAFLsgykcL/tflnPmPCSqjjDdFsbzYMDMGCCsGAQUF BwEBBCcwJTAjBggrBgEFBQcwAoYXaHR0cDovL3llMS5pLmxlbmNyLm9yZy8wggYs BgNVHREEggYjMIIGH4IYYWRtaW4tZG90YWNlLmtyYWotbGJjLmN6ghlhZG1pbi1o ZWp0bWFuLmtyYWotbGJjLmN6ghphZG1pbi1qaXJpdWx2ci5rcmFqLWxiYy5jeoIb YWRtaW4ta25paGFyb2t1LmtyYWotbGJjLmN6giFhZG1pbi1rdmV0YXZpbmtsYXRv dmEua3Jhai1sYmMuY3qCG2FkbWluLW1hdGVyaWFseS5rcmFqLWxiYy5jeoIVYWRt aW4tb29wLmtyYWotbGJjLmN6ghphZG1pbi1wcm9qZWt0eS5rcmFqLWxiYy5jeoIX YWRtaW4tdHVyb3cua3Jhai1sYmMuY3qCGmFkbWluLXVrcmFqaW5hLmtyYWotbGJj LmN6giFhZG1pbi12bGFkaW1pcnJpY2h0ZXIua3Jhai1sYmMuY3qCEWFkbWluLmty YWotbGJjLmN6ghxhbm5hcHJvdmF6bmlrb3ZhLmtyYWotbGJjLmN6ghdkYW5pZWxk YXZpZC5rcmFqLWxiYy5jeoIbZGF0YWJhemVsb3ppc2VrLmtyYWotbGJjLmN6gh9k b3ByYXZuaS1vYnNsdXpub3N0LmtyYWotbGJjLmN6ghJkb3RhY2Uua3Jhai1sYmMu Y3qCGmVkdmFyZGtvenVzbmlrLmtyYWotbGJjLmN6ghxla29ub21pY2t5LW9kYm9y LmtyYWotbGJjLmN6ghRleHRyYW5ldC5rcmFqLWxiYy5jeoITaGVqdG1hbi5rcmFq LWxiYy5jeoIXaW5mb3JtYXRpa2Eua3Jhai1sYmMuY3qCGWludGVybmktYXVkaXQu a3Jhai1sYmMuY3qCHGludmVzdGljZS1zcHJhdmEua3Jhai1sYmMuY3qCF2ppcmlr bGFwc3RlLmtyYWotbGJjLmN6ghRqaXJpdWx2ci5rcmFqLWxiYy5jeoIZaml0a2Fz a2FsaWNrYS5rcmFqLWxiYy5jeoIUa2FsZW5kYXIua3Jhai1sYmMuY3qCHWthbmNl bGFyLWhlanRtYW5hLmtyYWotbGJjLmN6gh1rYW5jZWxhci1yZWRpdGVsZS5rcmFq LWxiYy5jeoIVa25paGFyb2t1LmtyYWotbGJjLmN6ggtrcmFqLWxiYy5jeoIYa3Jh anNreS11cmFkLmtyYWotbGJjLmN6ghNrdWx0dXJhLmtyYWotbGJjLmN6ghtrdmV0 YXZpbmtsYXRvdmEua3Jhai1sYmMuY3qCGmxpYmVyZWNreS1rcmFqLmtyYWotbGJj LmN6ghNtYWdhemluLmtyYWotbGJjLmN6ghhtYXBhaW52ZXN0aWMua3Jhai1sYmMu Y3qCFW1hdGVyaWFseS5rcmFqLWxiYy5jeoIUb2Nrb3Zhbmkua3Jhai1sYmMuY3qC Gm9kYm9yLWtvbnRyb2x5LmtyYWotbGJjLmN6ghpvZGJvci1zb2NpYWxuaS5rcmFq LWxiYy5jeoIPb29wLmtyYWotbGJjLmN6ghFvdXBzci5rcmFqLWxiYy5jeoIScG9y dGFsLmtyYWotbGJjLmN6ghhwcmF2bmktb2Rib3Iua3Jhai1sYmMuY3qCFHByb2pl a3R5LmtyYWotbGJjLmN6ghJwcm94eTMua3Jhai1sYmMuY3qCHXJlZ2lvbmFsbmkt cm96dm9qLmtyYWotbGJjLmN6giBzZWtyZXRhcmlhdC1yZWRpdGVsZS5rcmFqLWxi Yy5jeoIhc2lsbmljbmktaG9zcG9kYXJzdHZpLmtyYWotbGJjLmN6ghRza29sc3R2 aS5rcmFqLWxiYy5jeoIZc3ByYXZuaS1vZGJvci5rcmFqLWxiYy5jeoIRdHVyb3cu a3Jhai1sYmMuY3qCFHVrcmFqaW5hLmtyYWotbGJjLmN6ght2ZXJlam5lLXpha2F6 a3kua3Jhai1sYmMuY3qCG3ZsYWRpbWlycmljaHRlci5rcmFqLWxiYy5jeoIUd3d3 LWFwcHMua3Jhai1sYmMuY3qCD3d3dy5rcmFqLWxiYy5jeoIZemRyYXZvdG5pY3R2 aS5rcmFqLWxiYy5jeoIdeml2b3RuaS1wcm9zdHJlZGkua3Jhai1sYmMuY3owEwYD VR0gBAwwCjAIBgZngQwBAgEwLwYDVR0fBCgwJjAkoCKgIIYeaHR0cDovL3llMS5j LmxlbmNyLm9yZy8xMjEuY3JsMIIBDAYKKwYBBAHWeQIEAgSB/QSB+gD4AHYATGPc mOWcHauI9h6KPd6uj6tEozd7X5uUw/uhnPzBviYAAAGh1P9ePQAABAMARzBFAiEA zsXC78WIXR4J137WIA16aJhI8GUqg0Q0TGQJfoxJHkMCIEOUybdCmrmsAGXVN3Y0 kBcOxGUw8oRKN0UNRo1/TRPBAH4AjspHC6zeavOiBrCkeoS3Rv4fxr+VPiXmm07k AkjzxugAAAGh1P9hXwAIAAAFAEajfrwEAwBHMEUCIGcHAYB6rzqoCJmhV609UQeG VKuZ0s3CXs98Z4p6qSwEAiEA1TGWtQQUE/ju7k/JTW85E0aWa4ZJV14v0eBHJRj1 ICYwCgYIKoZIzj0EAwMDaQAwZgIxAPNU+ZoUtKkfSFmrNQ7OVMFY2FQ+b6E3YLlM HHRgL/MQ/HpVBRSw/4IU2r26SQekeQIxAMdM4DA8JctnTh0l03LCe7Lq+k2hvHrE DCajvGMNcgyUXKcYug0RZPMLbuYRw2uQFw== -----END CERTIFICATE-----
}
cert_commonName OK { 
proxy3.kraj-lbc.cz
}
cert_commonName_wo_SNI INFO { 
proxy3.kraj-lbc.cz
}
cert_subjectAltName INFO { 
admin-dotace.kraj-lbc.cz admin-hejtman.kraj-lbc.cz admin-jiriulvr.kraj-lbc.cz admin-kniharoku.kraj-lbc.cz admin-kvetavinklatova.kraj-lbc.cz admin-materialy.kraj-lbc.cz admin-oop.kraj-lbc.cz admin-projekty.kraj-lbc.cz admin-turow.kraj-lbc.cz admin-ukrajina.kraj-lbc.cz admin-vladimirrichter.kraj-lbc.cz admin.kraj-lbc.cz annaprovaznikova.kraj-lbc.cz danieldavid.kraj-lbc.cz databazelozisek.kraj-lbc.cz dopravni-obsluznost.kraj-lbc.cz dotace.kraj-lbc.cz edvardkozusnik.kraj-lbc.cz ekonomicky-odbor.kraj-lbc.cz extranet.kraj-lbc.cz hejtman.kraj-lbc.cz informatika.kraj-lbc.cz interni-audit.kraj-lbc.cz investice-sprava.kraj-lbc.cz jiriklapste.kraj-lbc.cz jiriulvr.kraj-lbc.cz jitkaskalicka.kraj-lbc.cz kalendar.kraj-lbc.cz kancelar-hejtmana.kraj-lbc.cz kancelar-reditele.kraj-lbc.cz kniharoku.kraj-lbc.cz kraj-lbc.cz krajsky-urad.kraj-lbc.cz kultura.kraj-lbc.cz kvetavinklatova.kraj-lbc.cz liberecky-kraj.kraj-lbc.cz magazin.kraj-lbc.cz mapainvestic.kraj-lbc.cz materialy.kraj-lbc.cz ockovani.kraj-lbc.cz odbor-kontroly.kraj-lbc.cz odbor-socialni.kraj-lbc.cz oop.kraj-lbc.cz oupsr.kraj-lbc.cz portal.kraj-lbc.cz pravni-odbor.kraj-lbc.cz projekty.kraj-lbc.cz proxy3.kraj-lbc.cz regionalni-rozvoj.kraj-lbc.cz sekretariat-reditele.kraj-lbc.cz silnicni-hospodarstvi.kraj-lbc.cz skolstvi.kraj-lbc.cz spravni-odbor.kraj-lbc.cz turow.kraj-lbc.cz ukrajina.kraj-lbc.cz verejne-zakazky.kraj-lbc.cz vladimirrichter.kraj-lbc.cz www-apps.kraj-lbc.cz www.kraj-lbc.cz zdravotnictvi.kraj-lbc.cz zivotni-prostredi.kraj-lbc.cz
}
cert_trust OK { 
Ok via SAN (same w/o SNI)
}
cert_chain_of_trust OK { 
passed.
}
cert_certificatePolicies_EV INFO { 
no
}
cert_expirationStatus OK { 
89 >= 30 days
}
cert_notBefore INFO { 
2026-11-13 12:02
}
cert_notAfter OK { 
2027-02-11 12:02
}
cert_extlifeSpan OK { 
certificate has no extended life time according to browser forum
}
cert_eTLS INFO { 
not present
}
cert_crlDistributionPoints INFO { 
http://ye1.c.lencr.org/121.crl
}
cert_ocspURL INFO { 
--
}
OCSP_stapling INFO { 
not offered
}
cert_mustStapleExtension INFO { 
--
}
DNS_CAArecord OK { 
issue=digicert.com, issue=letsencrypt.org, issuewild=letsencrypt.org, issuewild=thawte.com
}
certificate_transparency OK { 
yes (certificate extension)
}
certs_countServer INFO { 
4
}
certs_list_ordering_problem INFO { 
no
}
cert_caIssuers INFO { 
YE1 (Let's Encrypt from US)
}
intermediate_cert <#1> INFO { 
-----BEGIN CERTIFICATE----- MIICizCCAhGgAwIBAgIQXd1w3TH4AchcGGp6BLgK/jAKBggqhkjOPQQDAzAuMQsw CQYDVQQGEwJVUzENMAsGA1UEChMESVNSRzEQMA4GA1UEAxMHUm9vdCBZRTAeFw0y NTA5MDMwMDAwMDBaFw0yODA5MDIyMzU5NTlaMDMxCzAJBgNVBAYTAlVTMRYwFAYD VQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQDEwNZRTEwdjAQBgcqhkjOPQIBBgUr gQQAIgNiAAQHZVB1/mimla2hfSurylScjPMZaOJXLz/NnAc2sylm8WDyhU9Ccp+z ASQi5vSwGGJjSGklkD9fdPR8GpyDIOIjCEfrnbt/v+ZSEPLLEGbaM6EccDbN7p9x teIm2Avf+ryjge4wgeswDgYDVR0PAQH/BAQDAgGGMBMGA1UdJQQMMAoGCCsGAQUF BwMBMBIGA1UdEwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFLsgykcL/tflnPmPCSqj jDdFsbzYMB8GA1UdIwQYMBaAFKPIJlqOoUzQNWP8myPIOq5W809WMDIGCCsGAQUF BwEBBCYwJDAiBggrBgEFBQcwAoYWaHR0cDovL3llLmkubGVuY3Iub3JnLzATBgNV HSAEDDAKMAgGBmeBDAECATAnBgNVHR8EIDAeMBygGqAYhhZodHRwOi8veWUuYy5s ZW5jci5vcmcvMAoGCCqGSM49BAMDA2gAMGUCMQDgjUEahFT/h3DRakqiPZpLvPgf Zwkt6K2EOMmh1nvEzl83eMLYcod4GCl3b0J1Nn0CMBNYmEQJb4CEG5WoOe7aRn/L VKu6saHmHEynI7ysIPd8zQsK1HdmhlHKlw9Z5GpGvA== -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#1> INFO { 
A2372D06431E9716365EEED47EC020351497D182FCC038E457E58168A03CAC07
}
intermediate_cert_notBefore <#1> INFO { 
2025-09-03 00:00
}
intermediate_cert_notAfter <#1> OK { 
2028-09-02 23:59
}
intermediate_cert_expiration <#1> OK { 
ok > 40 days
}
intermediate_cert_chain <#1> INFO { 
YE1 <-- Root YE
}
intermediate_cert <#2> INFO { 
-----BEGIN CERTIFICATE----- MIICpjCCAiugAwIBAgIRAIchZfw0tuX7qK3Vs3BftTowCgYIKoZIzj0EAwMwTzEL MAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2VhcmNo IEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDIwHhcNMjYwNTEzMDAwMDAwWhcN MzIwOTAyMjM1OTU5WjAuMQswCQYDVQQGEwJVUzENMAsGA1UEChMESVNSRzEQMA4G A1UEAxMHUm9vdCBZRTB2MBAGByqGSM49AgEGBSuBBAAiA2IABDwS/6vhrcVqcbBo +wgdI3fwn9x7DNJJOY/lTOti0vkwuRN87RhEhTH17E7XyFjWsPYhIPt/wzOqxTd2 b+4ZJNy9ID04YywF9U5zasDVyGSNErVNtz8uSGh5izW87j77GaOB6zCB6DAOBgNV HQ8BAf8EBAMCAQYwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUo8gmWo6hTNA1Y/ybI8g6rlbzT1YwHwYDVR0jBBgwFoAUfEKW rt5LSDv6kviejM9ti6lyN5UwMgYIKwYBBQUHAQEEJjAkMCIGCCsGAQUFBzAChhZo dHRwOi8veDIuaS5sZW5jci5vcmcvMBMGA1UdIAQMMAowCAYGZ4EMAQIBMCcGA1Ud HwQgMB4wHKAaoBiGFmh0dHA6Ly94Mi5jLmxlbmNyLm9yZy8wCgYIKoZIzj0EAwMD aQAwZgIxAMU19WCtmxVND8UHBZRoma49Z7jPs64Dma0eTu1OChVbB/2J7GV3nvYK Ax54uk1G9QIxAO0miLVJu8PLNiXXXkiE/gsK3CTRTF/aeo4bMX42Zw40csRU6AC2 6hSW1/IWaas6dg== -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#2> INFO { 
0FC0901CCA2BAE9E9FDBB02D50D02F1094F7B36672086991B9E897626DC485F0
}
intermediate_cert_notBefore <#2> INFO { 
2026-05-13 00:00
}
intermediate_cert_notAfter <#2> OK { 
2032-09-02 23:59
}
intermediate_cert_expiration <#2> OK { 
ok > 40 days
}
intermediate_cert_chain <#2> INFO { 
Root YE <-- ISRG Root X2
}
intermediate_cert <#3> INFO { 
-----BEGIN CERTIFICATE----- MIIEcDCCAligAwIBAgIQbI8dxyfHEX97r4U6yYD5zTANBgkqhkiG9w0BAQsFADBP MQswCQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJuZXQgU2VjdXJpdHkgUmVzZWFy Y2ggR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBYMTAeFw0yNjA1MTMwMDAwMDBa Fw0zMjA5MDIyMzU5NTlaME8xCzAJBgNVBAYTAlVTMSkwJwYDVQQKEyBJbnRlcm5l dCBTZWN1cml0eSBSZXNlYXJjaCBHcm91cDEVMBMGA1UEAxMMSVNSRyBSb290IFgy MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEzZvVn4CDCuwJSvMWSj5cz3es3mcFDR0H ttwW+1qLFNvicWDEukWVEYmO6gbf9yoWHKS5xcUy4APgHoIYOIvXRdgKam7mAHf7 AlF9ItgKbppbd9/w+kHsOdx1ymgHDB/qo4H1MIHyMA4GA1UdDwEB/wQEAwIBBjAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDwYDVR0TAQH/BAUwAwEB/zAd BgNVHQ4EFgQUfEKWrt5LSDv6kviejM9ti6lyN5UwHwYDVR0jBBgwFoAUebRZ5nu2 5eQBc4AIiMgaWPbpm24wMgYIKwYBBQUHAQEEJjAkMCIGCCsGAQUFBzAChhZodHRw Oi8veDEuaS5sZW5jci5vcmcvMBMGA1UdIAQMMAowCAYGZ4EMAQIBMCcGA1UdHwQg MB4wHKAaoBiGFmh0dHA6Ly94MS5jLmxlbmNyLm9yZy8wDQYJKoZIhvcNAQELBQAD ggIBAD2/e9frmMxNpCV03qUHegg+MV2wz9644YoXdqtH8RyWYcBO7xfjjGEXdU1e /o0OkEFiynUCOSIk/vLLo7ttz6CPAeNlWfC0XNkoGeWgK6jjXvozBaGuGH5n0Ufo shMeWTuURqNN5G00sSXDTBrpp2+mgvdZQjb8K11TYMA25QA+YHNfbIEL0BniAhKS 2gsnJjSzrdZLI+EZ7SEyqdR2rkjd1KutLDU+n3TFyxjniZVGur4YlhMP3mY/dV95 IruAkkjOZier6hGBdEgZXXvaCz9u9iVEadsIE75pAGL8oHV5vxdARDiotRpul1IN /UZwzAbrfUFcw1HkAcYD/mlZfnQ2ieCF2MS7j3Vhv7JPDKp45fmykmzYNSrumRW0 upFFKDBOoF7hsOb7oLyHS+Uft6jOUfOrogj8YUx38hKb2K20r42OgsSdDdxdeYWc MS3Sb6mwJeSZEYxJ2gaXnDSPaKhhrNkYwljyVQyr4Nq+MEJytXNTnHqaAcrNwZlV pcJL1KBnMrMjP7eanvUwL3FYj3cF17jtboLt7gLoi4+2rWZFvn+w54jmd/FIuhhZ cEaU/wvU6BUNMtcVquVGHp7itQeDth5j+XL3j4WJ2SABwzUl6OeYdgpIt/ITZa+p TT0mQ/r5XyA4MEAiabn7XJjvCERlF2dcn2wqJw+CreTkkQ2R -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#3> INFO { 
EE5F7ABD6981BB0255632CD8F49283451B4B18844D12040B44EE00F07B8FE2C6
}
intermediate_cert_notBefore <#3> INFO { 
2026-05-13 00:00
}
intermediate_cert_notAfter <#3> OK { 
2032-09-02 23:59
}
intermediate_cert_expiration <#3> OK { 
ok > 40 days
}
intermediate_cert_chain <#3> INFO { 
ISRG Root X2 <-- ISRG Root X1
}
intermediate_cert_badOCSP OK { 
intermediate certificate(s) is/are ok
}
HTTP_status_code INFO { 
200 OK ('/')
}
HTTP_clock_skew INFO { 
0 seconds from localtime
}
HTTP_headerTime INFO { 
1794605015
}
HSTS_time OK { 
730 days (=63072000 seconds) > 15552000 seconds
}
HSTS_subdomains OK { 
includes subdomains
}
HSTS_preload OK { 
domain IS marked for preloading
}
HPKP INFO { 
No support for HTTP Public Key Pinning
}
banner_server INFO { 
nginx
}
banner_application INFO { 
X-Powered-By: Firon 4
}
cookie_count INFO { 
2 at '/'
}
cookie_secure OK { 
All (2) at '/' marked as secure
}
cookie_httponly OK { 
All (2) at '/' marked as HttpOnly
}
X-Frame-Options_multiple MEDIUM { 
Multiple X-Frame-Options headers. Using first header: SAMEORIGIN
}
X-Frame-Options OK { 
SAMEORIGIN
}
X-Content-Type-Options_multiple MEDIUM { 
Multiple X-Content-Type-Options headers. Using first header: nosniff
}
X-Content-Type-Options OK { 
nosniff
}
Content-Security-Policy OK { 
default-src 'self' https://*.googleapis.com/ https://www.google-analytics.com/ https://*.google-analytics.com/ https://www.googletagmanager.com/ https://*.google.com/ https://*.youtube.com/ https://*.gstatic.com/ https://*.cloudflare.com/ https://*.bootstrapcdn.com/ https://*.klicenka.uvm.cz/ https://*.doubleclick.net/ https://*.mapy.cz/ https://connect.facebook.net/ https://*.facebook.com/ https://cdn.jsdelivr.net/ https://camstreamer.com/ https://*.infogram.com/ https://*.clarity.ms/ https://*.bing.com/ https://portal.multima.ai/ https://youtu.be/ https://www.youtube.com/ ; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.googleapis.com/ https://www.google-analytics.com/ https://*.google-analytics.com/ https://www.googletagmanager.com/ https://*.google.com/ https://*.youtube.com/ https://*.gstatic.com/ https://*.cloudflare.com/ https://*.bootstrapcdn.com/ https://*.klicenka.uvm.cz/ https://*.doubleclick.net/ https://*.mapy.cz/ https://connect.facebook.net/ https://*.facebook.com/ https://cdn.jsdelivr.net/ https://camstreamer.com/ https://*.infogram.com/ https://*.clarity.ms/ https://*.bing.com/ https://portal.multima.ai/ https://youtu.be/ https://www.youtube.com/ ; connect-src 'self' https://*.googleapis.com/ https://www.google-analytics.com/ https://*.google-analytics.com/ https://www.googletagmanager.com/ https://*.google.com/ https://*.youtube.com/ https://*.gstatic.com/ https://*.cloudflare.com/ https://*.bootstrapcdn.com/ https://*.klicenka.uvm.cz/ https://*.doubleclick.net/ https://*.mapy.cz/ https://connect.facebook.net/ https://*.facebook.com/ https://cdn.jsdelivr.net/ https://camstreamer.com/ https://*.infogram.com/ https://*.clarity.ms/ https://*.bing.com/ https://portal.multima.ai/ https://youtu.be/ https://www.youtube.com/ ; img-src 'self' data: blob: 'unsafe-inline' https://*.googleapis.com/ https://www.google-analytics.com/ https://*.google-analytics.com/ https://www.googletagmanager.com/ https://*.google.com/ https://*.youtube.com/ https://*.gstatic.com/ https://*.cloudflare.com/ https://*.bootstrapcdn.com/ https://*.klicenka.uvm.cz/ https://*.doubleclick.net/ https://*.mapy.cz/ https://connect.facebook.net/ https://*.facebook.com/ https://cdn.jsdelivr.net/ https://camstreamer.com/ https://*.infogram.com/ https://*.clarity.ms/ https://*.bing.com/ https://portal.multima.ai/ https://youtu.be/ https://www.youtube.com/ ; font-src 'self' data: https://*.googleapis.com/ https://www.google-analytics.com/ https://*.google-analytics.com/ https://www.googletagmanager.com/ https://*.google.com/ https://*.youtube.com/ https://*.gstatic.com/ https://*.cloudflare.com/ https://*.bootstrapcdn.com/ https://*.klicenka.uvm.cz/ https://*.doubleclick.net/ https://*.mapy.cz/ https://connect.facebook.net/ https://*.facebook.com/ https://cdn.jsdelivr.net/ https://camstreamer.com/ https://*.infogram.com/ https://*.clarity.ms/ https://*.bing.com/ https://portal.multima.ai/ https://youtu.be/ https://www.youtube.com/ ; style-src 'self' 'unsafe-inline' https://*.googleapis.com/ https://www.google-analytics.com/ https://*.google-analytics.com/ https://www.googletagmanager.com/ https://*.google.com/ https://*.youtube.com/ https://*.gstatic.com/ https://*.cloudflare.com/ https://*.bootstrapcdn.com/ https://*.klicenka.uvm.cz/ https://*.doubleclick.net/ https://*.mapy.cz/ https://connect.facebook.net/ https://*.facebook.com/ https://cdn.jsdelivr.net/ https://camstreamer.com/ https://*.infogram.com/ https://*.clarity.ms/ https://*.bing.com/ https://portal.multima.ai/ https://youtu.be/ https://www.youtube.com/ ; frame-src 'self' https://*.googleapis.com/ https://www.google-analytics.com/ https://*.google-analytics.com/ https://www.googletagmanager.com/ https://*.google.com/ https://*.youtube.com/ https://*.gstatic.com/ https://*.cloudflare.com/ https://*.bootstrapcdn.com/ https://*.klicenka.uvm.cz/ https://*.doubleclick.net/ https://*.mapy.cz/ https://connect.facebook.net/ https://*.facebook.com/ https://cdn.jsdelivr.net/ https://camstreamer.com/ https://*.infogram.com/ https://*.clarity.ms/ https://*.bing.com/ https://portal.multima.ai/ https://youtu.be/ https://www.youtube.com/
}
Permissions-Policy OK { 
geolocation=(), microphone=(), camera=()
}
X-XSS-Protection_multiple MEDIUM { 
Multiple X-XSS-Protection headers. Using first header: 1; mode=block
}
X-XSS-Protection INFO { 
1; mode=block
}
Referrer-Policy_multiple MEDIUM { 
Multiple Referrer-Policy headers. Using first header: no-referrer-when-downgrade
}
Referrer-Policy INFO { 
no-referrer-when-downgrade
}
Cache-Control INFO { 
no-store, no-cache, must-revalidate
}
Pragma INFO { 
no-cache
}
banner_reverseproxy
zranitelnosti: CWE-200
INFO { 
--
}
heartbleed
zranitelnosti: CVE-2014-0160 CWE-119
OK { 
not vulnerable, no heartbeat extension
}
CCS
zranitelnosti: CVE-2014-0224 CWE-310
OK { 
not vulnerable
}
ticketbleed
zranitelnosti: CVE-2016-9244 CWE-200
OK { 
no session ticket extension
}
ROBOT
zranitelnosti: CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168 CWE-203
OK { 
not vulnerable, no RSA key transport cipher
}
secure_renego
zranitelnosti: CWE-310
OK { 
supported
}
secure_client_renego
zranitelnosti: CVE-2011-1473 CWE-310
OK { 
not vulnerable
}
CRIME_TLS
zranitelnosti: CVE-2012-4929 CWE-310
OK { 
not vulnerable
}
BREACH
zranitelnosti: CVE-2013-3587 CWE-310
MEDIUM { 
potentially VULNERABLE, gzip HTTP compression detected  - only supplied '/' tested
}
POODLE_SSL
zranitelnosti: CVE-2014-3566 CWE-310
OK { 
not vulnerable, no SSLv3
}
fallback_SCSV OK { 
no protocol below TLS 1.2 offered
}
SWEET32
zranitelnosti: CVE-2016-2183 CVE-2016-6329 CWE-327
OK { 
not vulnerable
}
FREAK
zranitelnosti: CVE-2015-0204 CWE-310
OK { 
not vulnerable
}
DROWN
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
OK { 
not vulnerable on this host and port
}
DROWN_hint
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
INFO { 
no RSA certificate, can't be used with SSLv2 elsewhere
}
LOGJAM
zranitelnosti: CVE-2015-4000 CWE-310
OK { 
not vulnerable, no DH EXPORT ciphers,
}
LOGJAM-common_primes
zranitelnosti: CVE-2015-4000 CWE-310
OK { 
no DH key with <= TLS 1.2
}
BEAST
zranitelnosti: CVE-2011-3389 CWE-20
OK { 
not vulnerable, no SSL3 or TLS1
}
LUCKY13
zranitelnosti: CVE-2013-0169 CWE-310
OK { 
not vulnerable
}
winshock
zranitelnosti: CVE-2014-6321 CWE-94
OK { 
not vulnerable
}
RC4
zranitelnosti: CVE-2013-2566 CVE-2015-2808 CWE-310
OK { 
not vulnerable
}
clientsimulation-android_442 INFO { 
TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
}
clientsimulation-android_500 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_60 INFO { 
TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
}
clientsimulation-android_70 INFO { 
TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
}
clientsimulation-android_81 INFO { 
TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
}
clientsimulation-android_90 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-android_X INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-chrome_74_win10 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-chrome_79_win10 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-firefox_66_win81 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-firefox_71_win10 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-ie_6_xp INFO { 
No connection
}
clientsimulation-ie_8_win7 INFO { 
No connection
}
clientsimulation-ie_8_xp INFO { 
No connection
}
clientsimulation-ie_11_win7 INFO { 
TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
}
clientsimulation-ie_11_win81 INFO { 
TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
}
clientsimulation-ie_11_winphone81 INFO { 
TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
}
clientsimulation-ie_11_win10 INFO { 
TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
}
clientsimulation-edge_15_win10 INFO { 
TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
}
clientsimulation-edge_17_win10 INFO { 
TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
}
clientsimulation-opera_66_win10 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-safari_9_ios9 INFO { 
TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
}
clientsimulation-safari_9_osx1011 INFO { 
TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
}
clientsimulation-safari_10_osx1012 INFO { 
TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
}
clientsimulation-safari_121_ios_122 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-safari_130_osx_10146 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-apple_ats_9_ios9 INFO { 
TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
}
clientsimulation-java_6u45 INFO { 
No connection
}
clientsimulation-java_7u25 INFO { 
No connection
}
clientsimulation-java_8u161 INFO { 
TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
}
clientsimulation-java1102 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-java1201 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-openssl_102e INFO { 
TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
}
clientsimulation-openssl_110l INFO { 
TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
}
clientsimulation-openssl_111d INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-thunderbird_68_3_1 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
rating_spec INFO { 
SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)
}
rating_doc INFO { 
https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide
}
protocol_support_score INFO { 
100
}
protocol_support_score_weighted INFO { 
30
}
key_exchange_score INFO { 
100
}
key_exchange_score_weighted INFO { 
30
}
cipher_strength_score INFO { 
90
}
cipher_strength_score_weighted INFO { 
36
}
final_score INFO { 
96
}
overall_grade OK { 
A+
}
scanTime INFO { 
142
}