"id","fqdn/ip","port","severity","finding","cve","cwe" "service","testssl.sh/81.169.235.32","443","INFO","HTTP","","" "pre_128cipher","testssl.sh/81.169.235.32","443","INFO","No 128 cipher limit bug","","" "SSLv2","testssl.sh/81.169.235.32","443","OK","not offered","","" "SSLv3","testssl.sh/81.169.235.32","443","OK","not offered","","" "TLS1","testssl.sh/81.169.235.32","443","INFO","not offered","","" "TLS1_1","testssl.sh/81.169.235.32","443","INFO","not offered","","" "TLS1_2","testssl.sh/81.169.235.32","443","OK","offered","","" "TLS1_3","testssl.sh/81.169.235.32","443","OK","offered with final","","" "QUIC","testssl.sh/81.169.235.32","443","WARN","not tested due to lack of local OpenSSL support","","" "NPN","testssl.sh/81.169.235.32","443","INFO","not offered","","" "ALPN_HTTP2","testssl.sh/81.169.235.32","443","OK","h2","","" "ALPN","testssl.sh/81.169.235.32","443","INFO","http/1.1","","" "cipherlist_NULL","testssl.sh/81.169.235.32","443","OK","not offered","","CWE-327" "cipherlist_aNULL","testssl.sh/81.169.235.32","443","OK","not offered","","CWE-327" "cipherlist_EXPORT","testssl.sh/81.169.235.32","443","OK","not offered","","CWE-327" "cipherlist_LOW","testssl.sh/81.169.235.32","443","OK","not offered","","CWE-327" "cipherlist_3DES_IDEA","testssl.sh/81.169.235.32","443","INFO","not offered","","CWE-310" "cipherlist_OBSOLETED","testssl.sh/81.169.235.32","443","LOW","offered","","CWE-310" "cipherlist_STRONG_NOFS","testssl.sh/81.169.235.32","443","OK","offered","","" "cipherlist_STRONG_FS","testssl.sh/81.169.235.32","443","OK","offered","","" "cipher_order-tls1_2","testssl.sh/81.169.235.32","443","OK","server","","" "cipher-tls1_2_xc030","testssl.sh/81.169.235.32","443","OK","TLSv1.2 xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 253 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","","" "cipher-tls1_2_xcca8","testssl.sh/81.169.235.32","443","OK","TLSv1.2 xcca8 ECDHE-RSA-CHACHA20-POLY1305 ECDH 253 ChaCha20 256 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","","" "cipher-tls1_2_xc061","testssl.sh/81.169.235.32","443","OK","TLSv1.2 xc061 ECDHE-ARIA256-GCM-SHA384 ECDH 253 ARIAGCM 256 TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384","","" "cipher-tls1_2_xc02f","testssl.sh/81.169.235.32","443","OK","TLSv1.2 xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 253 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","","" "cipher-tls1_2_xc060","testssl.sh/81.169.235.32","443","OK","TLSv1.2 xc060 ECDHE-ARIA128-GCM-SHA256 ECDH 253 ARIAGCM 128 TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256","","" "cipher-tls1_2_xc028","testssl.sh/81.169.235.32","443","LOW","TLSv1.2 xc028 ECDHE-RSA-AES256-SHA384 ECDH 253 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384","","" "cipher-tls1_2_xc077","testssl.sh/81.169.235.32","443","LOW","TLSv1.2 xc077 ECDHE-RSA-CAMELLIA256-SHA384 ECDH 253 Camellia 256 TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384","","" "cipher-tls1_2_xc027","testssl.sh/81.169.235.32","443","LOW","TLSv1.2 xc027 ECDHE-RSA-AES128-SHA256 ECDH 253 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256","","" "cipher-tls1_2_xc076","testssl.sh/81.169.235.32","443","LOW","TLSv1.2 xc076 ECDHE-RSA-CAMELLIA128-SHA256 ECDH 253 Camellia 128 TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256","","" "cipher-tls1_2_xc014","testssl.sh/81.169.235.32","443","LOW","TLSv1.2 xc014 ECDHE-RSA-AES256-SHA ECDH 253 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA","","" "cipher-tls1_2_xc013","testssl.sh/81.169.235.32","443","LOW","TLSv1.2 xc013 ECDHE-RSA-AES128-SHA ECDH 253 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA","","" "cipher-tls1_2_x9d","testssl.sh/81.169.235.32","443","OK","TLSv1.2 x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384","","" "cipher-tls1_2_xc09d","testssl.sh/81.169.235.32","443","OK","TLSv1.2 xc09d AES256-CCM RSA AESCCM 256 TLS_RSA_WITH_AES_256_CCM","","" "cipher-tls1_2_xc051","testssl.sh/81.169.235.32","443","OK","TLSv1.2 xc051 ARIA256-GCM-SHA384 RSA ARIAGCM 256 TLS_RSA_WITH_ARIA_256_GCM_SHA384","","" "cipher-tls1_2_x9c","testssl.sh/81.169.235.32","443","OK","TLSv1.2 x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256","","" "cipher-tls1_2_xc09c","testssl.sh/81.169.235.32","443","OK","TLSv1.2 xc09c AES128-CCM RSA AESCCM 128 TLS_RSA_WITH_AES_128_CCM","","" "cipher-tls1_2_xc050","testssl.sh/81.169.235.32","443","OK","TLSv1.2 xc050 ARIA128-GCM-SHA256 RSA ARIAGCM 128 TLS_RSA_WITH_ARIA_128_GCM_SHA256","","" "cipher-tls1_2_x3d","testssl.sh/81.169.235.32","443","LOW","TLSv1.2 x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256","","" "cipher-tls1_2_xc0","testssl.sh/81.169.235.32","443","LOW","TLSv1.2 xc0 CAMELLIA256-SHA256 RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256","","" "cipher-tls1_2_x3c","testssl.sh/81.169.235.32","443","LOW","TLSv1.2 x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256","","" "cipher-tls1_2_xba","testssl.sh/81.169.235.32","443","LOW","TLSv1.2 xba CAMELLIA128-SHA256 RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256","","" "cipher-tls1_2_x35","testssl.sh/81.169.235.32","443","LOW","TLSv1.2 x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA","","" "cipher-tls1_2_x84","testssl.sh/81.169.235.32","443","LOW","TLSv1.2 x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA","","" "cipher-tls1_2_x2f","testssl.sh/81.169.235.32","443","LOW","TLSv1.2 x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA","","" "cipher-tls1_2_x41","testssl.sh/81.169.235.32","443","LOW","TLSv1.2 x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA","","" "cipherorder_TLSv1_2","testssl.sh/81.169.235.32","443","INFO","ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-CHACHA20-POLY1305 ECDHE-ARIA256-GCM-SHA384 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-ARIA128-GCM-SHA256 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-CAMELLIA256-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-CAMELLIA128-SHA256 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA AES256-GCM-SHA384 AES256-CCM ARIA256-GCM-SHA384 AES128-GCM-SHA256 AES128-CCM ARIA128-GCM-SHA256 AES256-SHA256 CAMELLIA256-SHA256 AES128-SHA256 CAMELLIA128-SHA256 AES256-SHA CAMELLIA256-SHA AES128-SHA CAMELLIA128-SHA","","" "prioritize_chacha_TLSv1_2","testssl.sh/81.169.235.32","443","INFO","false","","" "cipher_order-tls1_3","testssl.sh/81.169.235.32","443","OK","server","","" "cipher-tls1_3_x1302","testssl.sh/81.169.235.32","443","OK","TLSv1.3 x1302 TLS_AES_256_GCM_SHA384 ECDH/MLKEM AESGCM 256 TLS_AES_256_GCM_SHA384","","" "cipher-tls1_3_x1303","testssl.sh/81.169.235.32","443","OK","TLSv1.3 x1303 TLS_CHACHA20_POLY1305_SHA256 ECDH/MLKEM ChaCha20 256 TLS_CHACHA20_POLY1305_SHA256","","" "cipher-tls1_3_x1301","testssl.sh/81.169.235.32","443","OK","TLSv1.3 x1301 TLS_AES_128_GCM_SHA256 ECDH/MLKEM AESGCM 128 TLS_AES_128_GCM_SHA256","","" "cipherorder_TLSv1_3","testssl.sh/81.169.235.32","443","INFO","TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 TLS_AES_128_GCM_SHA256","","" "prioritize_chacha_TLSv1_3","testssl.sh/81.169.235.32","443","INFO","false","","" "cipher_order","testssl.sh/81.169.235.32","443","OK","server","","" "FS","testssl.sh/81.169.235.32","443","OK","offered","","" "FS_ciphers","testssl.sh/81.169.235.32","443","INFO","TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-RSA-CHACHA20-POLY1305 ECDHE-RSA-CAMELLIA256-SHA384 ECDHE-ARIA256-GCM-SHA384 TLS_AES_128_GCM_SHA256 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-CAMELLIA128-SHA256 ECDHE-ARIA128-GCM-SHA256","","" "FS_KEMs","testssl.sh/81.169.235.32","443","OK","X25519MLKEM768","","" "FS_ECDHE_curves","testssl.sh/81.169.235.32","443","OK","prime256v1 secp384r1 secp521r1 X25519 X448","","" "DH_groups","testssl.sh/81.169.235.32","443","OK","ffdhe2048 ffdhe3072","","" "FS_TLS12_sig_algs","testssl.sh/81.169.235.32","443","INFO","RSA-PSS-RSAE+SHA256 RSA-PSS-RSAE+SHA384 RSA-PSS-RSAE+SHA512 RSA+SHA256 RSA+SHA384 RSA+SHA512 RSA+SHA224","","" "FS_TLS13_sig_algs","testssl.sh/81.169.235.32","443","INFO","RSA-PSS-RSAE+SHA256 RSA-PSS-RSAE+SHA384 RSA-PSS-RSAE+SHA512","","" "HTTP_status_code","testssl.sh/81.169.235.32","443","INFO","200 OK ('/')","","" "HTTP_clock_skew","testssl.sh/81.169.235.32","443","INFO","-14 seconds from localtime","","" "HTTP_headerTime","testssl.sh/81.169.235.32","443","INFO","1759910311","","" "HSTS_time","testssl.sh/81.169.235.32","443","OK","362 days (=31337000 seconds) > 15552000 seconds","","" "HSTS_subdomains","testssl.sh/81.169.235.32","443","INFO","only for this domain","","" "HSTS_preload","testssl.sh/81.169.235.32","443","INFO","domain is NOT marked for preloading","","" "HPKP","testssl.sh/81.169.235.32","443","INFO","No support for HTTP Public Key Pinning","","" "banner_server","testssl.sh/81.169.235.32","443","INFO","Never trust a banner","","" "banner_application","testssl.sh/81.169.235.32","443","INFO","X-Powered-By: A portion of humor","","" "cookie_count","testssl.sh/81.169.235.32","443","INFO","0 at '/'","","" "X-Frame-Options","testssl.sh/81.169.235.32","443","OK","DENY","","" "X-Content-Type-Options","testssl.sh/81.169.235.32","443","OK","nosniff","","" "Content-Security-Policy","testssl.sh/81.169.235.32","443","OK","script-src 'unsafe-inline'; style-src 'unsafe-inline' 'self'; object-src 'self'; base-uri 'none'; img-src 'self' ; default-src 'self'; frame-ancestors 'self'; upgrade-insecure-requests; form-action 'none'","","" "Cross-Origin-Opener-Policy","testssl.sh/81.169.235.32","443","INFO","same-origin-allow-popups","","" "Cross-Origin-Resource-Policy","testssl.sh/81.169.235.32","443","INFO","same-site","","" "Cross-Origin-Embedder-Policy","testssl.sh/81.169.235.32","443","INFO","require-corp","","" "banner_reverseproxy","testssl.sh/81.169.235.32","443","INFO","--","","CWE-200" "heartbleed","testssl.sh/81.169.235.32","443","OK","not vulnerable, no heartbeat extension","CVE-2014-0160","CWE-119" "CCS","testssl.sh/81.169.235.32","443","OK","not vulnerable","CVE-2014-0224","CWE-310" "ticketbleed","testssl.sh/81.169.235.32","443","OK","not vulnerable","CVE-2016-9244","CWE-200" "opossum","testssl.sh/81.169.235.32","443","OK","not vulnerable","CVE-2025-49812","CWE-287" "ROBOT","testssl.sh/81.169.235.32","443","OK","not vulnerable","CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168","CWE-203" "secure_renego","testssl.sh/81.169.235.32","443","OK","supported","","CWE-310" "secure_client_renego","testssl.sh/81.169.235.32","443","OK","not vulnerable","CVE-2011-1473","CWE-310" "CRIME_TLS","testssl.sh/81.169.235.32","443","OK","not vulnerable","CVE-2012-4929","CWE-310" "BREACH","testssl.sh/81.169.235.32","443","OK","not vulnerable, no gzip/deflate/compress/br HTTP compression - only supplied '/' tested","CVE-2013-3587","CWE-310" "POODLE_SSL","testssl.sh/81.169.235.32","443","OK","not vulnerable, no SSLv3","CVE-2014-3566","CWE-310" "fallback_SCSV","testssl.sh/81.169.235.32","443","OK","no protocol below TLS 1.2 offered","","" "SWEET32","testssl.sh/81.169.235.32","443","OK","not vulnerable","CVE-2016-2183 CVE-2016-6329","CWE-327" "FREAK","testssl.sh/81.169.235.32","443","OK","not vulnerable","CVE-2015-0204","CWE-310" "DROWN","testssl.sh/81.169.235.32","443","OK","not vulnerable on this host and port","CVE-2016-0800 CVE-2016-0703","CWE-310" "DROWN_hint","testssl.sh/81.169.235.32","443","INFO","Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=CEF29CDF03238FEAE612D6621AC10C12C77FBEC8DFA1C6413704D5497F2DA6AB","CVE-2016-0800 CVE-2016-0703","CWE-310" "LOGJAM","testssl.sh/81.169.235.32","443","OK","not vulnerable, no DH EXPORT ciphers,","CVE-2015-4000","CWE-310" "LOGJAM-common_primes","testssl.sh/81.169.235.32","443","OK","no DH key with <= TLS 1.2","CVE-2015-4000","CWE-310" "BEAST","testssl.sh/81.169.235.32","443","OK","not vulnerable, no SSL3 or TLS1","CVE-2011-3389","CWE-20" "LUCKY13","testssl.sh/81.169.235.32","443","LOW","potentially vulnerable, uses TLS CBC ciphers","CVE-2013-0169","CWE-310" "winshock","testssl.sh/81.169.235.32","443","OK","not vulnerable","CVE-2014-6321","CWE-94" "RC4","testssl.sh/81.169.235.32","443","OK","not vulnerable","CVE-2013-2566 CVE-2015-2808","CWE-310" "clientsimulation-android_70","testssl.sh/81.169.235.32","443","INFO","TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384","","" "clientsimulation-android_81","testssl.sh/81.169.235.32","443","INFO","TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384","","" "clientsimulation-android_90","testssl.sh/81.169.235.32","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" "clientsimulation-android_X","testssl.sh/81.169.235.32","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" "clientsimulation-android_11_12","testssl.sh/81.169.235.32","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" "clientsimulation-android_13_14","testssl.sh/81.169.235.32","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" "clientsimulation-android_15","testssl.sh/81.169.235.32","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" "clientsimulation-chrome_101_win10","testssl.sh/81.169.235.32","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" "clientsimulation-chromium_137_win11","testssl.sh/81.169.235.32","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" "clientsimulation-firefox_100_win10","testssl.sh/81.169.235.32","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" "clientsimulation-firefox_137_win11","testssl.sh/81.169.235.32","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" "clientsimulation-ie_8_win7","testssl.sh/81.169.235.32","443","INFO","No connection","","" "clientsimulation-ie_11_win7","testssl.sh/81.169.235.32","443","INFO","TLSv1.2 ECDHE-RSA-AES256-SHA384","","" "clientsimulation-ie_11_win81","testssl.sh/81.169.235.32","443","INFO","TLSv1.2 ECDHE-RSA-AES256-SHA384","","" "clientsimulation-ie_11_winphone81","testssl.sh/81.169.235.32","443","INFO","TLSv1.2 ECDHE-RSA-AES128-SHA256","","" "clientsimulation-ie_11_win10","testssl.sh/81.169.235.32","443","INFO","TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384","","" "clientsimulation-edge_15_win10","testssl.sh/81.169.235.32","443","INFO","TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384","","" "clientsimulation-edge_101_win10_21h2","testssl.sh/81.169.235.32","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" "clientsimulation-edge_133_win11_23h2","testssl.sh/81.169.235.32","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" "clientsimulation-safari_184_ios_184","testssl.sh/81.169.235.32","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" "clientsimulation-safari_154_osx_1231","testssl.sh/81.169.235.32","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" "clientsimulation-safari_184_osx_154","testssl.sh/81.169.235.32","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" "clientsimulation-java_7u25","testssl.sh/81.169.235.32","443","INFO","No connection","","" "clientsimulation-java_80442","testssl.sh/81.169.235.32","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" "clientsimulation-java_1102","testssl.sh/81.169.235.32","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" "clientsimulation-java_1703","testssl.sh/81.169.235.32","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" "clientsimulation-java_2106","testssl.sh/81.169.235.32","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" "clientsimulation-go_1178","testssl.sh/81.169.235.32","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" "clientsimulation-libressl_336","testssl.sh/81.169.235.32","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" "clientsimulation-openssl_102e","testssl.sh/81.169.235.32","443","INFO","TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384","","" "clientsimulation-openssl_111d","testssl.sh/81.169.235.32","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" "clientsimulation-openssl_315","testssl.sh/81.169.235.32","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" "clientsimulation-openssl_350","testssl.sh/81.169.235.32","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","","" "clientsimulation-apple_mail_16_0","testssl.sh/81.169.235.32","443","INFO","TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384","","" "clientsimulation-thunderbird_91_9","testssl.sh/81.169.235.32","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""