Přihlásit se Registrace
Smlouvy Dotace Platy Úřady Zakázky Sponzoři & firmy PastVina 
❤ Podpořte nás Přihlásit se Registrace
Hledat v Hlídači státu
Nápověda jak vyhledávat Snadné hledání
  1. Hlídač Státu
  2. Hlídač Webů
  3. Detailní analýza HTTPs pro Ministerstvo obrany (na gov.cz)

Hlídač Ministerstvo obrany (na gov.cz) Detailní analýza HTTPs pro Ministerstvo obrany (na gov.cz)

Ministerstvo obrany (na gov.cz)
https://mo.gov.cz

Ministerstvo obrany na nové doméne gov.cz.

Zabezpečení komunikace

A+
Certifikát expiruje za 163 dní.

Výsledek analýzy HTTPS na mo.gov.cz ze dne 30.06.2026

Všechno je v nejlepším pořádku a web se drží doporučených postupů.

Detailní analýza

Detailní report z HTTPs analýzy pomocí nástroje testssl.sh

server mo.gov.cz/194.50.64.66
pre_128cipher INFO { 
No 128 cipher limit bug
}
SSLv2 OK { 
not offered
}
SSLv3 OK { 
not offered
}
TLS1 INFO { 
not offered
}
TLS1_1 INFO { 
not offered
}
TLS1_2 INFO { 
not offered
}
TLS1_3 OK { 
offered with final
}
NPN INFO { 
not offered
}
ALPN INFO { 
not offered
}
cipherlist_NULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_aNULL
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_EXPORT
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_LOW
zranitelnosti: CWE-327
OK { 
not offered
}
cipherlist_3DES_IDEA
zranitelnosti: CWE-310
INFO { 
not offered
}
cipherlist_AVERAGE
zranitelnosti: CWE-310
INFO { 
not offered
}
cipherlist_GOOD INFO { 
not offered
}
cipherlist_STRONG OK { 
offered
}
cipher_order INFO { 
server (TLS 1.3)
}
protocol_negotiated OK { 
Default protocol TLS1.3
}
cipher_negotiated OK { 
TLS_AES_256_GCM_SHA384, 256 bit ECDH (P-256)
}
cipher-tls1_3_x1302 OK { 
TLSv1.3   x1302   TLS_AES_256_GCM_SHA384            ECDH 256   AESGCM      256      TLS_AES_256_GCM_SHA384
}
cipher-tls1_3_x1301 OK { 
TLSv1.3   x1301   TLS_AES_128_GCM_SHA256            ECDH 256   AESGCM      128      TLS_AES_128_GCM_SHA256
}
cipher-tls1_3_x1304 OK { 
TLSv1.3   x1304   TLS_AES_128_CCM_SHA256            ECDH 256   AESCCM      128      TLS_AES_128_CCM_SHA256
}
cipherorder_TLSv1_3 INFO { 
TLS_AES_256_GCM_SHA384 TLS_AES_128_GCM_SHA256 TLS_AES_128_CCM_SHA256
}
FS OK { 
offered
}
FS_ciphers INFO { 
TLS_AES_256_GCM_SHA384 TLS_AES_128_GCM_SHA256 TLS_AES_128_CCM_SHA256
}
FS_ECDHE_curves OK { 
prime256v1 secp384r1 secp521r1
}
DH_groups OK { 
ffdhe2048 ffdhe3072 ffdhe4096 ffdhe6144 ffdhe8192
}
TLS_extensions INFO { 
'supported versions/#43' 'key share/#51' 'server name/#0' 'status request/#5' 'renegotiation info/#65281' 'max fragment length/#1' 'EC point formats/#11' 'application layer protocol negotiation/#16' 'extended master secret/#23'
}
TLS_session_ticket INFO { 
no -- no lifetime advertised
}
SSL_sessionID_support INFO { 
yes
}
sessionresumption_ticket INFO { 
not supported
}
sessionresumption_ID WARN { 
check failed because of connect problem
}
TLS_timestamp INFO { 
random
}
certificate_compression INFO { 
none
}
clientAuth INFO { 
none
}
cert_numbers INFO { 
1
}
cert_signatureAlgorithm OK { 
SHA256 with RSA
}
cert_keySize OK { 
RSA 4096 bits (exponent is 65537)
}
cert_keyUsage INFO { 
Digital Signature, Key Encipherment
}
cert_extKeyUsage INFO { 
TLS Web Server Authentication
}
cert_serialNumber INFO { 
09395C062AE068D0AA341DC5EEBBD31A
}
cert_serialNumberLen INFO { 
16
}
cert_fingerprintSHA1 INFO { 
2903AAB4A9B748A74F55332856374DF8C7C48882
}
cert_fingerprintSHA256 INFO { 
337FCC5FF4EE35C2607FBD0EBC16AC72BB6C4B3DCCEB501FA938C2FBE01B5C93
}
cert INFO { 
-----BEGIN CERTIFICATE----- MIIHzDCCBrSgAwIBAgIQCTlcBirgaNCqNB3F7rvTGjANBgkqhkiG9w0BAQsFADBZ MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypE aWdpQ2VydCBHbG9iYWwgRzIgVExTIFJTQSBTSEEyNTYgMjAyMCBDQTEwHhcNMjUx MTIwMDAwMDAwWhcNMjYxMjExMjM1OTU5WjBRMQswCQYDVQQGEwJDWjEOMAwGA1UE BxMFUHJhaGExHDAaBgNVBAoTE01pbmlzdHJ5IG9mIERlZmVuY2UxFDASBgNVBAMM CyoubW8uZ292LmN6MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3npA 14518bAxPo1tBvRr4YXRZJSLwip9tGWupkpNb/eHtwS0A/BSw7zZrnC92pULmRnE AvVW7FKE+gDPl27gkARqleTm+nIeizJq7gtjv8hGXb0POHk/gDlf1FAbxHghmgru 7Wfgz612y28Pkg5T4VJGl+5MEU0FthILH/ow6mIMlVOwdkCW2kLF+WD0DrZMhIX3 ohcA6hiCVaPl78CbKy4CF6sKN5H6yO8S5ikbX+Zdv13IwRuOkDImyeVmIop6sQuF CiIq7czSHtTVN1v7hqxr8Fs6jngMey7XWLZSrjYKqnNHPA7Y9ZCEv9ezCdo9s7FR vBE83WPUows7OjTnpssbe086rgstNUokK2QBTYvcLvZhm64b7rZncz6nEtB0DlUV 7v4y9gG7l+CyL7JZKDRPfdBPsCiJqLuA7UgzPM5g/60UrQoazCL7cyoL+7XhxR2Y 3qbI+aQYfXZ/VkACc2CwrRkpy8RFOs12xalf44sWvnRff56kBaERIk5JQq7UVrBJ WOMAAwlfpwfDV1g277liDKeLmZToqxaUkLSwuuj7Qh599EKUN38VWvPt6uwLt0WA gAEzsraJ9UWYtcg6Cap1IVKmIG/1CpEK1aH9xmkvNW8CI6fd3fsZVBIWN9eHb+pA 2ey0cU37fxIBTGhCTKCGmpvQfd5Ne3lOGBt5ve0CAwEAAaOCA5YwggOSMB8GA1Ud IwQYMBaAFHSFgMBmx9833s+9KTeqAx2+7c0XMB0GA1UdDgQWBBQ2yXM+bGWfUl72 V9sqRIK2rSwGFzAwBgNVHREEKTAnggsqLm1vLmdvdi5jeoIJbW8uZ292LmN6gg13 d3cubW8uZ292LmN6MD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEW G2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwEwYD VR0lBAwwCgYIKwYBBQUHAwEwgZ8GA1UdHwSBlzCBlDBIoEagRIZCaHR0cDovL2Ny bDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsRzJUTFNSU0FTSEEyNTYyMDIw Q0ExLTEuY3JsMEigRqBEhkJodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNl cnRHbG9iYWxHMlRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcmwwgYcGCCsGAQUFBwEB BHsweTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFEGCCsG AQUFBzAChkVodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9i YWxHMlRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcnQwDAYDVR0TAQH/BAIwADCCAX0G CisGAQQB1nkCBAIEggFtBIIBaQFnAHYA2AlVO5RPev/IFhlvlE+Fq7D4/F6HVSYP FdEucrtFSxQAAAGaoV/FMQAABAMARzBFAiEA1o1Id5kzw4gleGXbWsbdTAcqnFiG vICkDM+LqHO5QoQCIDlO6ZlhlDlJlXpd1i2SCSs2HCdhaOjEeXc9NMPaBSTQAHYA wjF+V0UZo0XufzjespBB68fCIVoiv3/Vta12mtkOUs0AAAGaoV/FTQAABAMARzBF AiEAu3I71FK5iGWhfqZlU6h8HVyPWFcM2yNL5r4J1eRj2k4CIHrVUOad8WtRETA5 Kjskt70ClKKPutber3T1YS7212+XAHUAlE5Dh/rswe+B8xkkJqgYZQHH0184AgE/ cmd9VTcuGdgAAAGaoV/FUAAABAMARjBEAiAxU3UjdyJIiVeDoyDobjC/M07v5gW9 D5MuzfXRVX+PAAIgQ9jBsfUHFKy4zbrDrWh6041UFb2FcasbsQjQBy9xnb0wDQYJ KoZIhvcNAQELBQADggEBAAcGpJJ7StP0xeClWx3skgRrsQaGZDdSk/ZcV/unMVp2 qd+bOKmWa8DQm+VjKrXR7pZzc8i8hDIb8xHlOKbLXvmQliRNfeIlujbMmO1AHoj7 3uEPbnzyH70+JPs+M8fTqwsvNtiDcBDkgRGM9vnXcUugt1eieUQKeSaTWYhLSPB3 fDgRG63t17hfUo7GOGm2iFV3JznSh0dtN0hsAyLI8pXmDF4vkISMDlT6zwoaFmMw t+WUo7QuX3T7Krx2GIqAUrd2FElgPFcBEpl6hvggNluFJoHvn5+0yoSNn7AMhg+p ZZqFI/5lO2xwqzQqIogzFyQ1lm3chXFRpxI0NCSrvYw= -----END CERTIFICATE-----
}
cert_commonName OK { 
*.mo.gov.cz
}
cert_commonName_wo_SNI INFO { 
*.army.cz
}
cert_subjectAltName INFO { 
*.mo.gov.cz mo.gov.cz www.mo.gov.cz
}
cert_trust OK { 
Ok via SAN (SNI mandatory)
}
cert_chain_of_trust OK { 
passed.
}
cert_certificatePolicies_EV INFO { 
no
}
cert_expirationStatus OK { 
164 >= 60 days
}
cert_notBefore INFO { 
2025-11-20 00:00
}
cert_notAfter OK { 
2026-12-11 23:59
}
cert_extlifeSpan OK { 
certificate has no extended life time according to browser forum
}
cert_eTLS INFO { 
not present
}
cert_crlDistributionPoints INFO { 
http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
}
cert_ocspURL INFO { 
http://ocsp.digicert.com
}
OCSP_stapling OK { 
offered
}
cert_ocspRevoked OK { 
not revoked
}
cert_mustStapleExtension INFO { 
--
}
DNS_CAArecord OK { 
issue=digicert.com, issuewild=digicert.com
}
certificate_transparency OK { 
yes (certificate extension)
}
certs_countServer INFO { 
2
}
certs_list_ordering_problem INFO { 
no
}
cert_caIssuers INFO { 
DigiCert Global G2 TLS RSA SHA256 2020 CA1 (DigiCert Inc from US)
}
intermediate_cert <#1> INFO { 
-----BEGIN CERTIFICATE----- MIIEyDCCA7CgAwIBAgIQDPW9BitWAvR6uFAsI8zwZjANBgkqhkiG9w0BAQsFADBh MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH MjAeFw0yMTAzMzAwMDAwMDBaFw0zMTAzMjkyMzU5NTlaMFkxCzAJBgNVBAYTAlVT MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxMzAxBgNVBAMTKkRpZ2lDZXJ0IEdsb2Jh bCBHMiBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMz3EGJPprtjb+2QUlbFbSd7ehJWivH0+dbn4Y+9lavyYEEV cNsSAPonCrVXOFt9slGTcZUOakGUWzUb+nv6u8W+JDD+Vu/E832X4xT1FE3LpxDy FuqrIvAxIhFhaZAmunjZlx/jfWardUSVc8is/+9dCopZQ+GssjoP80j812s3wWPc 3kbW20X+fSP9kOhRBx5Ro1/tSUZUfyyIxfQTnJcVPAPooTncaQwywa8WV0yUR0J8 osicfebUTVSvQpmowQTCd5zWSOTOEeAqgJnwQ3DPP3Zr0UxJqyRewg2C/Uaoq2yT zGJSQnWS+Jr6Xl6ysGHlHx+5fwmY6D36g39HaaECAwEAAaOCAYIwggF+MBIGA1Ud EwEB/wQIMAYBAf8CAQAwHQYDVR0OBBYEFHSFgMBmx9833s+9KTeqAx2+7c0XMB8G A1UdIwQYMBaAFE4iVCAYlebjbuYP+vq5Eu0GF485MA4GA1UdDwEB/wQEAwIBhjAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdgYIKwYBBQUHAQEEajBoMCQG CCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wQAYIKwYBBQUHMAKG NGh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RH Mi5jcnQwQgYDVR0fBDswOTA3oDWgM4YxaHR0cDovL2NybDMuZGlnaWNlcnQuY29t L0RpZ2lDZXJ0R2xvYmFsUm9vdEcyLmNybDA9BgNVHSAENjA0MAsGCWCGSAGG/WwC ATAHBgVngQwBATAIBgZngQwBAgEwCAYGZ4EMAQICMAgGBmeBDAECAzANBgkqhkiG 9w0BAQsFAAOCAQEAkPFwyyiXaZd8dP3A+iZ7U6utzWX9upwGnIrXWkOH7U1MVl+t wcW1BSAuWdH/SvWgKtiwla3JLko716f2b4gp/DA/JIS7w7d7kwcsr4drdjPtAFVS slme5LnQ89/nD/7d+MS5EHKBCQRfz5eeLjJ1js+aWNJXMX43AYGyZm0pGrFmCW3R bpD0ufovARTFXFZkAdl9h6g4U5+LXUZtXMYnhIHUfoyMo5tS58aI7Dd8KvvwVVo4 chDYABPPTHPbqjc1qCmBaZx2vN4Ye5DUys/vZwP9BFohFrH/6j/f3IL16/RZkiMN JCqVJUzKoZHm1Lesh3Sz8W2jmdv51b2EQJ8HmA== -----END CERTIFICATE-----
}
intermediate_cert_fingerprintSHA256 <#1> INFO { 
C8025F9FC65FDFC95B3CA8CC7867B9A587B5277973957917463FC813D0B625A9
}
intermediate_cert_notBefore <#1> INFO { 
2021-03-30 00:00
}
intermediate_cert_notAfter <#1> OK { 
2031-03-29 23:59
}
intermediate_cert_expiration <#1> OK { 
ok > 40 days
}
intermediate_cert_chain <#1> INFO { 
DigiCert Global G2 TLS RSA SHA256 2020 CA1 <-- DigiCert Global Root G2
}
intermediate_cert_badOCSP OK { 
intermediate certificate(s) is/are ok
}
HTTP_status_code WARN { 
HTTP header reply empty
}
HTTP_status_code WARN { 
No HTTP status code
}
scanProblem WARN { 
HTTP header was repeatedly zero.
}
heartbleed
zranitelnosti: CVE-2014-0160 CWE-119
OK { 
not vulnerable, no heartbeat extension
}
CCS
zranitelnosti: CVE-2014-0224 CWE-310
OK { 
not vulnerable
}
ticketbleed
zranitelnosti: CVE-2016-9244 CWE-200
OK { 
no session ticket extension
}
ROBOT
zranitelnosti: CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168 CWE-203
OK { 
not vulnerable, no RSA key transport cipher
}
secure_renego
zranitelnosti: CWE-310
OK { 
TLS 1.3 only server
}
secure_client_renego
zranitelnosti: CVE-2011-1473 CWE-310
OK { 
not vulnerable, TLS 1.3 only
}
HTTP_clock_skew
zranitelnosti: CVE-2012-4929 CWE-310
OK { 
TLS 1.3 only server
}
BREACH
zranitelnosti: CVE-2013-3587 CWE-310
WARN { 
Test failed as first HTTP request stalled and was terminated
}
POODLE_SSL
zranitelnosti: CVE-2014-3566 CWE-310
OK { 
not vulnerable, no SSLv3
}
fallback_SCSV OK { 
only TLS 1.3 supported
}
HTTP_clock_skew
zranitelnosti: CVE-2016-2183 CVE-2016-6329 CWE-327
OK { 
not vulnerable
}
FREAK
zranitelnosti: CVE-2015-0204 CWE-310
OK { 
not vulnerable
}
DROWN
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
OK { 
not vulnerable on this host and port
}
DROWN_hint
zranitelnosti: CVE-2016-0800 CVE-2016-0703 CWE-310
INFO { 
Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=337FCC5FF4EE35C2607FBD0EBC16AC72BB6C4B3DCCEB501FA938C2FBE01B5C93
}
LOGJAM
zranitelnosti: CVE-2015-4000 CWE-310
OK { 
not vulnerable, no DH EXPORT ciphers,
}
LOGJAM-common_primes
zranitelnosti: CVE-2015-4000 CWE-310
OK { 
no DH key with <= TLS 1.2
}
BEAST
zranitelnosti: CVE-2011-3389 CWE-20
OK { 
not vulnerable, no SSL3 or TLS1
}
LUCKY13
zranitelnosti: CVE-2013-0169 CWE-310
OK { 
not vulnerable, TLS 1.3 only
}
winshock
zranitelnosti: CVE-2014-6321 CWE-94
OK { 
not vulnerable
}
RC4
zranitelnosti: CVE-2013-2566 CVE-2015-2808 CWE-310
OK { 
not vulnerable, TLS 1.3 only
}
clientsimulation-android_442 INFO { 
No connection
}
clientsimulation-android_500 INFO { 
No connection
}
clientsimulation-android_60 INFO { 
TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256
}
clientsimulation-android_70 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-android_81 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-android_90 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-android_X INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-chrome_74_win10 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-chrome_79_win10 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-firefox_66_win81 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-firefox_71_win10 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-ie_6_xp INFO { 
No connection
}
clientsimulation-ie_8_win7 INFO { 
No connection
}
clientsimulation-ie_8_xp INFO { 
No connection
}
clientsimulation-ie_11_win7 INFO { 
TLSv1.2 DHE-RSA-AES256-GCM-SHA384
}
clientsimulation-ie_11_win81 INFO { 
TLSv1.2 DHE-RSA-AES256-GCM-SHA384
}
clientsimulation-ie_11_winphone81 INFO { 
No connection
}
clientsimulation-ie_11_win10 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-edge_15_win10 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-edge_17_win10 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-opera_66_win10 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-safari_9_ios9 INFO { 
No connection
}
clientsimulation-safari_9_osx1011 INFO { 
No connection
}
clientsimulation-safari_10_osx1012 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-safari_121_ios_122 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-safari_130_osx_10146 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-apple_ats_9_ios9 INFO { 
No connection
}
clientsimulation-java_6u45 INFO { 
No connection
}
clientsimulation-java_7u25 INFO { 
No connection
}
clientsimulation-java_8u161 INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-java1102 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-java1201 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-openssl_102e INFO { 
No connection
}
clientsimulation-openssl_110l INFO { 
TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
}
clientsimulation-openssl_111d INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
clientsimulation-thunderbird_68_3_1 INFO { 
TLSv1.3 TLS_AES_256_GCM_SHA384
}
rating_spec INFO { 
SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)
}
rating_doc INFO { 
https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide
}
protocol_support_score INFO { 
100
}
protocol_support_score_weighted INFO { 
30
}
key_exchange_score INFO { 
100
}
key_exchange_score_weighted INFO { 
30
}
cipher_strength_score INFO { 
90
}
cipher_strength_score_weighted INFO { 
36
}
final_score INFO { 
96
}
overall_grade OK { 
A+
}
scanTime INFO { 
73
}