@@ -124,7 +124,7 @@ Ports
GetRequest, HTTPOptions:
HTTP/1.1 404 Not Found
- Date: Sun, 25 Sep 2022 01:37:06 GMT
+ Date: Wed, 28 Sep 2022 12:31:07 GMT
Content-Type: text/html
Content-Length: 15436
Connection: close
@@ -143,17 +143,9 @@ Ports
fingerprint-strings
- GetRequest:
- HTTP/1.1 404 Not Found
- Date: Sun, 25 Sep 2022 01:37:12 GMT
- Content-Type: text/html
- Content-Length: 15436
- Connection: close
- Content-Encoding: identity
- <!DOCTYPE html><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"><meta charset="utf-8"><meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"><meta content="width=device-width, initial-scale=1.0" name="viewport"><title>Application doesn't exist - Scalingo</title><style>html { height: 100%;}body { -webkit-transform-style: preserve-3d; transform-style: preserve-3d; text-align: center; height: 100%; margin: 0; padding: 0; background: -webkit-gradient(linear, left top, left bottom, from(#1864ab), to(#099ec9)) left top/100% 100% no-repeat #1864ab; background: linear-gradient(to bottom, #1864ab, #099ec9) left top/100% 100% no-repeat #1864ab; color: white;}#wrapper { position: relative; top: 40%; -webkit
- HTTPOptions:
+ GetRequest, HTTPOptions:
HTTP/1.1 404 Not Found
- Date: Sun, 25 Sep 2022 01:37:13 GMT
+ Date: Wed, 28 Sep 2022 12:31:13 GMT
Content-Type: text/html
Content-Length: 15436
Connection: close
@@ -178,7 +170,7 @@ Open Services
|
-| 109.232.236.90 - beta.gouv.fr |
+5.104.101.30 - beta.gouv.fr |
80 |
tcp |
http |
@@ -188,7 +180,7 @@ Open Services
|
-| 109.232.236.90 - beta.gouv.fr |
+5.104.101.30 - beta.gouv.fr |
443 |
tcp |
https |
diff --git a/results/aHR0cHM6Ly9iZXRhLmdvdXYuZnI=/nmapvuln.nmap b/results/aHR0cHM6Ly9iZXRhLmdvdXYuZnI=/nmapvuln.nmap
index 0f19bdc92f..c1321f238a 100644
--- a/results/aHR0cHM6Ly9iZXRhLmdvdXYuZnI=/nmapvuln.nmap
+++ b/results/aHR0cHM6Ly9iZXRhLmdvdXYuZnI=/nmapvuln.nmap
@@ -1,15 +1,15 @@
-# Nmap 7.92 scan initiated Sun Sep 25 01:36:51 2022 as: nmap -sV --script vulners --script-args mincvss=5.0 -oA /data/nmapvuln beta.gouv.fr
-Nmap scan report for beta.gouv.fr (109.232.236.90)
-Host is up (0.11s latency).
-Other addresses for beta.gouv.fr (not scanned): 5.104.101.30
-rDNS record for 109.232.236.90: ows-109-232-236-90.eu-west-2.compute.outscale.com
+# Nmap 7.92 scan initiated Wed Sep 28 12:30:53 2022 as: nmap -sV --script vulners --script-args mincvss=5.0 -oA /data/nmapvuln beta.gouv.fr
+Nmap scan report for beta.gouv.fr (5.104.101.30)
+Host is up (0.081s latency).
+Other addresses for beta.gouv.fr (not scanned): 109.232.236.90
+rDNS record for 5.104.101.30: ows-5-104-101-30.eu-west-2.compute.outscale.com
Not shown: 998 filtered tcp ports (no-response)
PORT STATE SERVICE VERSION
80/tcp open http
| fingerprint-strings:
| GetRequest, HTTPOptions:
| HTTP/1.1 404 Not Found
-| Date: Sun, 25 Sep 2022 01:37:06 GMT
+| Date: Wed, 28 Sep 2022 12:31:07 GMT
| Content-Type: text/html
| Content-Length: 15436
| Connection: close
@@ -17,17 +17,9 @@ PORT STATE SERVICE VERSION
|_ Application doesn't exist - Scalingo\n\n\n\n \n \n \n \n \n \n \n\n\n\n\n",
+ "ip": "109.232.236.90",
+ "timestamp": "2022-09-28T12:33:57.558934633Z",
+ "curl-command": "curl -X 'GET' -d '' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://beta.gouv.fr/admin/index.html'",
"matcher-status": true,
"matched-line": null
},
{
- "template": "exposed-panels/netlify-cms.yaml",
- "template-url": "https://github.com/projectdiscovery/nuclei-templates/blob/master/exposed-panels/netlify-cms.yaml",
- "template-id": "netlify-cms",
+ "template": "ssl/detect-ssl-issuer.yaml",
+ "template-url": "https://github.com/projectdiscovery/nuclei-templates/blob/master/ssl/detect-ssl-issuer.yaml",
+ "template-id": "detect-ssl-issuer",
"info": {
- "name": "Netlify CMS Admin Panel",
+ "name": "Detect SSL Certificate Issuer",
"author": [
- "sullo"
+ "lingtren"
],
"tags": [
- "panel",
- "netlify"
+ "ssl"
],
"reference": null,
"severity": "info"
},
- "type": "http",
+ "type": "ssl",
"host": "https://beta.gouv.fr",
- "matched-at": "https://beta.gouv.fr/admin/index.html",
- "request": "GET /admin/index.html HTTP/1.1\r\nHost: beta.gouv.fr\r\nUser-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)\r\nConnection: close\r\nAccept: */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip\r\n\r\n",
- "response": "HTTP/1.1 200 OK\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html\r\nDate: Sun, 25 Sep 2022 01:41:59 GMT\r\nEtag: W/\"632ef87f-26cc\"\r\nLast-Modified: Sat, 24 Sep 2022 12:30:55 GMT\r\nStrict-Transport-Security: max-age=31536000\r\nX-Request-Id: 36dacf75-5a46-4141-b97f-266dfdde22a9\r\n\r\n\n\n\n\n \n \n Content Manager\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n\n\n\n \n \n \n \n \n \n \n\n\n\n\n",
- "ip": "5.104.101.30",
- "timestamp": "2022-09-25T01:41:59.142002829Z",
- "curl-command": "curl -X 'GET' -d '' -H 'Accept: */*' -H 'Accept-Language: en' -H 'User-Agent: Nuclei - Open-source project (github.com/projectdiscovery/nuclei)' 'https://beta.gouv.fr/admin/index.html'",
+ "matched-at": "https://beta.gouv.fr",
+ "extracted-results": [
+ "Let's Encrypt"
+ ],
+ "ip": "109.232.236.90",
+ "timestamp": "2022-09-28T12:34:28.561233385Z",
"matcher-status": true,
"matched-line": null
},
@@ -850,23 +810,23 @@
"host": "https://beta.gouv.fr",
"matched-at": "https://beta.gouv.fr",
"extracted-results": [
- "dns18.ovh.net.",
- "ns18.ovh.net."
+ "ns18.ovh.net.",
+ "dns18.ovh.net."
],
- "request": ";; opcode: QUERY, status: NOERROR, id: 9353\n;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version 0; flags: ; udp: 4096\n\n;; QUESTION SECTION:\n;beta.gouv.fr.\tIN\t NS\n",
- "response": ";; opcode: QUERY, status: NOERROR, id: 9353\n;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version 0; flags: ; udp: 512\n\n;; QUESTION SECTION:\n;beta.gouv.fr.\tIN\t NS\n\n;; ANSWER SECTION:\nbeta.gouv.fr.\t10547\tIN\tNS\tdns18.ovh.net.\nbeta.gouv.fr.\t10547\tIN\tNS\tns18.ovh.net.\n",
- "timestamp": "2022-09-25T01:43:30.453372056Z",
+ "request": ";; opcode: QUERY, status: NOERROR, id: 63230\n;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version 0; flags: ; udp: 4096\n\n;; QUESTION SECTION:\n;beta.gouv.fr.\tIN\t NS\n",
+ "response": ";; opcode: QUERY, status: NOERROR, id: 63230\n;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version 0; flags: ; udp: 1232\n\n;; QUESTION SECTION:\n;beta.gouv.fr.\tIN\t NS\n\n;; ANSWER SECTION:\nbeta.gouv.fr.\t10800\tIN\tNS\tns18.ovh.net.\nbeta.gouv.fr.\t10800\tIN\tNS\tdns18.ovh.net.\n",
+ "timestamp": "2022-09-28T12:35:51.174054485Z",
"matcher-status": true,
"matched-line": null
},
{
- "template": "ssl/detect-ssl-issuer.yaml",
- "template-url": "https://github.com/projectdiscovery/nuclei-templates/blob/master/ssl/detect-ssl-issuer.yaml",
- "template-id": "detect-ssl-issuer",
+ "template": "ssl/ssl-dns-names.yaml",
+ "template-url": "https://github.com/projectdiscovery/nuclei-templates/blob/master/ssl/ssl-dns-names.yaml",
+ "template-id": "ssl-dns-names",
"info": {
- "name": "Detect SSL Certificate Issuer",
+ "name": "SSL DNS Names",
"author": [
- "lingtren"
+ "pdteam"
],
"tags": [
"ssl"
@@ -878,10 +838,50 @@
"host": "https://beta.gouv.fr",
"matched-at": "https://beta.gouv.fr",
"extracted-results": [
- "Let's Encrypt"
+ "beta.gouv.fr"
+ ],
+ "ip": "109.232.236.90",
+ "timestamp": "2022-09-28T12:36:58.146700751Z",
+ "matcher-status": true,
+ "matched-line": null
+ },
+ {
+ "template": "dns/mx-fingerprint.yaml",
+ "template-url": "https://github.com/projectdiscovery/nuclei-templates/blob/master/dns/mx-fingerprint.yaml",
+ "template-id": "mx-fingerprint",
+ "info": {
+ "name": "MX Record Detection",
+ "author": [
+ "pdteam"
+ ],
+ "tags": [
+ "dns",
+ "mx"
+ ],
+ "description": "An MX record was detected. MX records direct emails to a mail exchange server.",
+ "reference": [
+ "https://www.cloudflare.com/learning/dns/dns-records/dns-mx-record/",
+ "https://mxtoolbox.com/"
+ ],
+ "severity": "info",
+ "classification": {
+ "cve-id": null,
+ "cwe-id": [
+ "cwe-200"
+ ]
+ }
+ },
+ "type": "dns",
+ "host": "https://beta.gouv.fr",
+ "matched-at": "https://beta.gouv.fr",
+ "extracted-results": [
+ "100 mxb.ovh.net.",
+ "5 mx2.ovh.net.",
+ "1 mx1.ovh.net."
],
- "ip": "5.104.101.30",
- "timestamp": "2022-09-25T01:43:45.936491919Z",
+ "request": ";; opcode: QUERY, status: NOERROR, id: 24030\n;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version 0; flags: ; udp: 4096\n\n;; QUESTION SECTION:\n;beta.gouv.fr.\tIN\t MX\n",
+ "response": ";; opcode: QUERY, status: NOERROR, id: 24030\n;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1\n\n;; OPT PSEUDOSECTION:\n; EDNS: version 0; flags: ; udp: 1232\n\n;; QUESTION SECTION:\n;beta.gouv.fr.\tIN\t MX\n\n;; ANSWER SECTION:\nbeta.gouv.fr.\t10800\tIN\tMX\t1 mx1.ovh.net.\nbeta.gouv.fr.\t10800\tIN\tMX\t100 mxb.ovh.net.\nbeta.gouv.fr.\t10800\tIN\tMX\t5 mx2.ovh.net.\n",
+ "timestamp": "2022-09-28T12:36:58.643829705Z",
"matcher-status": true,
"matched-line": null
}
diff --git a/results/aHR0cHM6Ly9iZXRhLmdvdXYuZnI=/testssl.csv b/results/aHR0cHM6Ly9iZXRhLmdvdXYuZnI=/testssl.csv
index 1259292c3b..44c77dcc16 100644
--- a/results/aHR0cHM6Ly9iZXRhLmdvdXYuZnI=/testssl.csv
+++ b/results/aHR0cHM6Ly9iZXRhLmdvdXYuZnI=/testssl.csv
@@ -1,4 +1,157 @@
"id","fqdn/ip","port","severity","finding","cve","cwe"
+"service","beta.gouv.fr/109.232.236.90","443","INFO","HTTP","",""
+"pre_128cipher","beta.gouv.fr/109.232.236.90","443","INFO","No 128 cipher limit bug","",""
+"SSLv2","beta.gouv.fr/109.232.236.90","443","OK","not offered","",""
+"SSLv3","beta.gouv.fr/109.232.236.90","443","OK","not offered","",""
+"TLS1","beta.gouv.fr/109.232.236.90","443","INFO","not offered","",""
+"TLS1_1","beta.gouv.fr/109.232.236.90","443","INFO","not offered","",""
+"TLS1_2","beta.gouv.fr/109.232.236.90","443","OK","offered","",""
+"TLS1_3","beta.gouv.fr/109.232.236.90","443","OK","offered with final","",""
+"ALPN_HTTP2","beta.gouv.fr/109.232.236.90","443","OK","h2","",""
+"ALPN","beta.gouv.fr/109.232.236.90","443","INFO","http/1.1","",""
+"cipherlist_NULL","beta.gouv.fr/109.232.236.90","443","OK","not offered","","CWE-327"
+"cipherlist_aNULL","beta.gouv.fr/109.232.236.90","443","OK","not offered","","CWE-327"
+"cipherlist_EXPORT","beta.gouv.fr/109.232.236.90","443","OK","not offered","","CWE-327"
+"cipherlist_LOW","beta.gouv.fr/109.232.236.90","443","OK","not offered","","CWE-327"
+"cipherlist_3DES_IDEA","beta.gouv.fr/109.232.236.90","443","INFO","not offered","","CWE-310"
+"cipherlist_AVERAGE","beta.gouv.fr/109.232.236.90","443","LOW","offered","","CWE-310"
+"cipherlist_GOOD","beta.gouv.fr/109.232.236.90","443","INFO","not offered","",""
+"cipherlist_STRONG","beta.gouv.fr/109.232.236.90","443","OK","offered","",""
+"cipherorder_TLSv1_2","beta.gouv.fr/109.232.236.90","443","INFO","ECDHE-RSA-AES256-GCM-SHA384","",""
+"cipher_order","beta.gouv.fr/109.232.236.90","443","OK","server","",""
+"protocol_negotiated","beta.gouv.fr/109.232.236.90","443","OK","Default protocol TLS1.3","",""
+"cipher_negotiated","beta.gouv.fr/109.232.236.90","443","OK","TLS_AES_256_GCM_SHA384, 253 bit ECDH (X25519)","",""
+"FS","beta.gouv.fr/109.232.236.90","443","OK","offered","",""
+"FS_ciphers","beta.gouv.fr/109.232.236.90","443","INFO","DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384","",""
+"FS_ECDHE_curves","beta.gouv.fr/109.232.236.90","443","OK","prime256v1 secp384r1 secp521r1","",""
+"TLS_extensions","beta.gouv.fr/109.232.236.90","443","INFO","'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'session ticket/#35' 'supported versions/#43' 'key share/#51' 'supported_groups/#10' 'max fragment length/#1' 'application layer protocol negotiation/#16' 'encrypt-then-mac/#22' 'extended master secret/#23'","",""
+"TLS_session_ticket","beta.gouv.fr/109.232.236.90","443","INFO","valid for 300 seconds only (= 30 days","",""
+"cert_notBefore","beta.gouv.fr/109.232.236.90","443","INFO","2022-09-26 07:20","",""
+"cert_notAfter","beta.gouv.fr/109.232.236.90","443","OK","2022-12-25 07:20","",""
+"cert_extlifeSpan","beta.gouv.fr/109.232.236.90","443","OK","certificate has no extended life time according to browser forum","",""
+"cert_eTLS","beta.gouv.fr/109.232.236.90","443","INFO","not present","",""
+"cert_crlDistributionPoints","beta.gouv.fr/109.232.236.90","443","INFO","--","",""
+"cert_ocspURL","beta.gouv.fr/109.232.236.90","443","INFO","http://r3.o.lencr.org","",""
+"OCSP_stapling","beta.gouv.fr/109.232.236.90","443","LOW","not offered","",""
+"cert_mustStapleExtension","beta.gouv.fr/109.232.236.90","443","INFO","--","",""
+"DNS_CAArecord","beta.gouv.fr/109.232.236.90","443","LOW","--","",""
+"certificate_transparency","beta.gouv.fr/109.232.236.90","443","OK","yes (certificate extension)","",""
+"certs_countServer","beta.gouv.fr/109.232.236.90","443","INFO","3","",""
+"certs_list_ordering_problem","beta.gouv.fr/109.232.236.90","443","INFO","no","",""
+"cert_caIssuers","beta.gouv.fr/109.232.236.90","443","INFO","R3 (Let's Encrypt from US)","",""
+"intermediate_cert <#1>","beta.gouv.fr/109.232.236.90","443","INFO","-----BEGIN CERTIFICATE----- MIIFFjCCAv6gAwIBAgIRAJErCErPDBinU/bWLiWnX1owDQYJKoZIhvcNAQELBQAw TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMjAwOTA0MDAwMDAw WhcNMjUwOTE1MTYwMDAwWjAyMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNTGV0J3Mg RW5jcnlwdDELMAkGA1UEAxMCUjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC7AhUozPaglNMPEuyNVZLD+ILxmaZ6QoinXSaqtSu5xUyxr45r+XXIo9cP R5QUVTVXjJ6oojkZ9YI8QqlObvU7wy7bjcCwXPNZOOftz2nwWgsbvsCUJCWH+jdx sxPnHKzhm+/b5DtFUkWWqcFTzjTIUu61ru2P3mBw4qVUq7ZtDpelQDRrK9O8Zutm NHz6a4uPVymZ+DAXXbpyb/uBxa3Shlg9F8fnCbvxK/eG3MHacV3URuPMrSXBiLxg Z3Vms/EY96Jc5lP/Ooi2R6X/ExjqmAl3P51T+c8B5fWmcBcUr2Ok/5mzk53cU6cG /kiFHaFpriV1uxPMUgP17VGhi9sVAgMBAAGjggEIMIIBBDAOBgNVHQ8BAf8EBAMC AYYwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMBIGA1UdEwEB/wQIMAYB Af8CAQAwHQYDVR0OBBYEFBQusxe3WFbLrlAJQOYfr52LFMLGMB8GA1UdIwQYMBaA FHm0WeZ7tuXkAXOACIjIGlj26ZtuMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcw AoYWaHR0cDovL3gxLmkubGVuY3Iub3JnLzAnBgNVHR8EIDAeMBygGqAYhhZodHRw Oi8veDEuYy5sZW5jci5vcmcvMCIGA1UdIAQbMBkwCAYGZ4EMAQIBMA0GCysGAQQB gt8TAQEBMA0GCSqGSIb3DQEBCwUAA4ICAQCFyk5HPqP3hUSFvNVneLKYY611TR6W PTNlclQtgaDqw+34IL9fzLdwALduO/ZelN7kIJ+m74uyA+eitRY8kc607TkC53wl ikfmZW4/RvTZ8M6UK+5UzhK8jCdLuMGYL6KvzXGRSgi3yLgjewQtCPkIVz6D2QQz CkcheAmCJ8MqyJu5zlzyZMjAvnnAT45tRAxekrsu94sQ4egdRCnbWSDtY7kh+BIm lJNXoB1lBMEKIq4QDUOXoRgffuDghje1WrG9ML+Hbisq/yFOGwXD9RiX8F6sw6W4 avAuvDszue5L3sz85K+EC4Y/wFVDNvZo4TYXao6Z0f+lQKc0t8DQYzk1OXVu8rp2 yJMC6alLbBfODALZvYH7n7do1AZls4I9d1P4jnkDrQoxB3UqQ9hVl3LEKQ73xF1O yK5GhDDX8oVfGKF5u+decIsH4YaTw7mP3GFxJSqv3+0lUFJoi5Lc5da149p90Ids hCExroL1+7mryIkXPeFM5TgO9r0rvZaBFOvV2z0gp35Z0+L4WPlbuEjN/lxPFin+ HlUjr8gRsI3qfJOQFy/9rKIJR0Y/8Omwt/8oTWgy1mdeHmmjk7j1nYsvC9JSQ6Zv MldlTTKB3zhThV1+XWYp6rjd5JW1zbVWEkLNxE7GJThEUG3szgBVGP7pSWTUTsqX nLRbwHOoq7hHwg== -----END CERTIFICATE-----","",""
+"intermediate_cert_fingerprintSHA256 <#1>","beta.gouv.fr/109.232.236.90","443","INFO","67ADD1166B020AE61B8F5FC96813C04C2AA589960796865572A3C7E737613DFD","",""
+"intermediate_cert_notBefore <#1>","beta.gouv.fr/109.232.236.90","443","INFO","2020-09-04 00:00","",""
+"intermediate_cert_notAfter <#1>","beta.gouv.fr/109.232.236.90","443","OK","2025-09-15 16:00","",""
+"intermediate_cert_expiration <#1>","beta.gouv.fr/109.232.236.90","443","OK","ok > 40 days","",""
+"intermediate_cert_chain <#1>","beta.gouv.fr/109.232.236.90","443","INFO","R3 <-- ISRG Root X1","",""
+"intermediate_cert <#2>","beta.gouv.fr/109.232.236.90","443","INFO","-----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIQQAF3ITfU6UK47naqPGQKtzANBgkqhkiG9w0BAQsFADA/ MSQwIgYDVQQKExtEaWdpdGFsIFNpZ25hdHVyZSBUcnVzdCBDby4xFzAVBgNVBAMT DkRTVCBSb290IENBIFgzMB4XDTIxMDEyMDE5MTQwM1oXDTI0MDkzMDE4MTQwM1ow TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwggIiMA0GCSqGSIb3DQEB AQUAA4ICDwAwggIKAoICAQCt6CRz9BQ385ueK1coHIe+3LffOJCMbjzmV6B493XC ov71am72AE8o295ohmxEk7axY/0UEmu/H9LqMZshftEzPLpI9d1537O4/xLxIZpL wYqGcWlKZmZsj348cL+tKSIG8+TA5oCu4kuPt5l+lAOf00eXfJlII1PoOK5PCm+D LtFJV4yAdLbaL9A4jXsDcCEbdfIwPPqPrt3aY6vrFk/CjhFLfs8L6P+1dy70sntK 4EwSJQxwjQMpoOFTJOwT2e4ZvxCzSow/iaNhUd6shweU9GNx7C7ib1uYgeGJXDR5 bHbvO5BieebbpJovJsXQEOEO3tkQjhb7t/eo98flAgeYjzYIlefiN5YNNnWe+w5y sR2bvAP5SQXYgd0FtCrWQemsAXaVCg/Y39W9Eh81LygXbNKYwagJZHduRze6zqxZ Xmidf3LWicUGQSk+WT7dJvUkyRGnWqNMQB9GoZm1pzpRboY7nn1ypxIFeFntPlF4 FQsDj43QLwWyPntKHEtzBRL8xurgUBN8Q5N0s8p0544fAQjQMNRbcTa0B7rBMDBc SLeCO5imfWCKoqMpgsy6vYMEG6KDA0Gh1gXxG8K28Kh8hjtGqEgqiNx2mna/H2ql PRmP6zjzZN7IKw0KKP/32+IVQtQi0Cdd4Xn+GOdwiK1O5tmLOsbdJ1Fu/7xk9TND TwIDAQABo4IBRjCCAUIwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYw SwYIKwYBBQUHAQEEPzA9MDsGCCsGAQUFBzAChi9odHRwOi8vYXBwcy5pZGVudHJ1 c3QuY29tL3Jvb3RzL2RzdHJvb3RjYXgzLnA3YzAfBgNVHSMEGDAWgBTEp7Gkeyxx +tvhS5B1/8QVYIWJEDBUBgNVHSAETTBLMAgGBmeBDAECATA/BgsrBgEEAYLfEwEB ATAwMC4GCCsGAQUFBwIBFiJodHRwOi8vY3BzLnJvb3QteDEubGV0c2VuY3J5cHQu b3JnMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmwuaWRlbnRydXN0LmNvbS9E U1RST09UQ0FYM0NSTC5jcmwwHQYDVR0OBBYEFHm0WeZ7tuXkAXOACIjIGlj26Ztu MA0GCSqGSIb3DQEBCwUAA4IBAQAKcwBslm7/DlLQrt2M51oGrS+o44+/yQoDFVDC 5WxCu2+b9LRPwkSICHXM6webFGJueN7sJ7o5XPWioW5WlHAQU7G75K/QosMrAdSW 9MUgNTP52GE24HGNtLi1qoJFlcDyqSMo59ahy2cI2qBDLKobkx/J3vWraV0T9VuG WCLKTVXkcGdtwlfFRjlBz4pYg1htmf5X6DYO8A4jqv2Il9DjXA6USbW1FzXSLr9O he8Y4IWS6wY7bCkjCWDcRQJMEhg76fsO3txE+FiYruq9RUWhiF1myv4Q6W+CyBFC Dfvp7OOGAN6dEOM4+qR9sdjoSYKEBpsr6GtPAQw4dy753ec5 -----END CERTIFICATE-----","",""
+"intermediate_cert_fingerprintSHA256 <#2>","beta.gouv.fr/109.232.236.90","443","INFO","6D99FB265EB1C5B3744765FCBC648F3CD8E1BFFAFDC4C2F99B9D47CF7FF1C24F","",""
+"intermediate_cert_notBefore <#2>","beta.gouv.fr/109.232.236.90","443","INFO","2021-01-20 19:14","",""
+"intermediate_cert_notAfter <#2>","beta.gouv.fr/109.232.236.90","443","OK","2024-09-30 18:14","",""
+"intermediate_cert_expiration <#2>","beta.gouv.fr/109.232.236.90","443","OK","ok > 40 days","",""
+"intermediate_cert_chain <#2>","beta.gouv.fr/109.232.236.90","443","INFO","ISRG Root X1 <-- DST Root CA X3","",""
+"intermediate_cert_badOCSP","beta.gouv.fr/109.232.236.90","443","OK","intermediate certificate(s) is/are ok","",""
+"HTTP_status_code","beta.gouv.fr/109.232.236.90","443","INFO","200 OK ('/')","",""
+"HTTP_clock_skew","beta.gouv.fr/109.232.236.90","443","INFO","0 seconds from localtime","",""
+"HTTP_headerTime","beta.gouv.fr/109.232.236.90","443","INFO","1664368117","",""
+"HSTS_time","beta.gouv.fr/109.232.236.90","443","OK","365 days (=31536000 seconds) > 15552000 seconds","",""
+"HSTS_subdomains","beta.gouv.fr/109.232.236.90","443","INFO","only for this domain","",""
+"HSTS_preload","beta.gouv.fr/109.232.236.90","443","INFO","domain is NOT marked for preloading","",""
+"HPKP","beta.gouv.fr/109.232.236.90","443","INFO","No support for HTTP Public Key Pinning","",""
+"banner_server","beta.gouv.fr/109.232.236.90","443","INFO","No Server banner line in header, interesting!","",""
+"banner_application","beta.gouv.fr/109.232.236.90","443","INFO","No application banner found","",""
+"cookie_count","beta.gouv.fr/109.232.236.90","443","INFO","0 at '/'","",""
+"security_headers","beta.gouv.fr/109.232.236.90","443","MEDIUM","--","",""
+"banner_reverseproxy","beta.gouv.fr/109.232.236.90","443","INFO","--","","CWE-200"
+"heartbleed","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable, no heartbeat extension","CVE-2014-0160","CWE-119"
+"CCS","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable","CVE-2014-0224","CWE-310"
+"ticketbleed","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable","CVE-2016-9244","CWE-200"
+"ROBOT","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable, no RSA key transport cipher","CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168","CWE-203"
+"secure_renego","beta.gouv.fr/109.232.236.90","443","OK","supported","","CWE-310"
+"secure_client_renego","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable","CVE-2011-1473","CWE-310"
+"CRIME_TLS","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable","CVE-2012-4929","CWE-310"
+"BREACH","beta.gouv.fr/109.232.236.90","443","MEDIUM","potentially VULNERABLE, gzip HTTP compression detected - only supplied '/' tested","CVE-2013-3587","CWE-310"
+"POODLE_SSL","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable, no SSLv3","CVE-2014-3566","CWE-310"
+"fallback_SCSV","beta.gouv.fr/109.232.236.90","443","OK","no protocol below TLS 1.2 offered","",""
+"SWEET32","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable","CVE-2016-2183 CVE-2016-6329","CWE-327"
+"FREAK","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable","CVE-2015-0204","CWE-310"
+"DROWN","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable on this host and port","CVE-2016-0800 CVE-2016-0703","CWE-310"
+"DROWN_hint","beta.gouv.fr/109.232.236.90","443","INFO","Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=3CA1533EBD6EFA51D0AD9B0F344E6C107037756DF17DC75187F5F1785E52FFC9","CVE-2016-0800 CVE-2016-0703","CWE-310"
+"LOGJAM","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable, no DH EXPORT ciphers,","CVE-2015-4000","CWE-310"
+"LOGJAM-common_primes","beta.gouv.fr/109.232.236.90","443","OK","--","CVE-2015-4000","CWE-310"
+"BEAST","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable, no SSL3 or TLS1","CVE-2011-3389","CWE-20"
+"LUCKY13","beta.gouv.fr/109.232.236.90","443","LOW","potentially vulnerable, uses TLS CBC ciphers","CVE-2013-0169","CWE-310"
+"winshock","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable","CVE-2014-6321","CWE-94"
+"RC4","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable","CVE-2013-2566 CVE-2015-2808","CWE-310"
+"clientsimulation-android_60","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256","",""
+"clientsimulation-android_70","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384","",""
+"clientsimulation-android_81","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384","",""
+"clientsimulation-android_90","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
+"clientsimulation-android_X","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
+"clientsimulation-android_11","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
+"clientsimulation-android_12","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
+"clientsimulation-chrome_79_win10","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
+"clientsimulation-chrome_101_win10","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
+"clientsimulation-firefox_66_win81","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
+"clientsimulation-firefox_100_win10","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
+"clientsimulation-ie_6_xp","beta.gouv.fr/109.232.236.90","443","INFO","No connection","",""
+"clientsimulation-ie_8_win7","beta.gouv.fr/109.232.236.90","443","INFO","No connection","",""
+"clientsimulation-ie_8_xp","beta.gouv.fr/109.232.236.90","443","INFO","No connection","",""
+"clientsimulation-ie_11_win7","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.2 DHE-RSA-AES256-GCM-SHA384","",""
+"clientsimulation-ie_11_win81","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.2 DHE-RSA-AES256-GCM-SHA384","",""
+"clientsimulation-ie_11_winphone81","beta.gouv.fr/109.232.236.90","443","INFO","No connection","",""
+"clientsimulation-ie_11_win10","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384","",""
+"clientsimulation-edge_15_win10","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384","",""
+"clientsimulation-edge_101_win10_21h2","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
+"clientsimulation-safari_121_ios_122","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
+"clientsimulation-safari_130_osx_10146","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
+"clientsimulation-safari_154_osx_1231","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
+"clientsimulation-java_7u25","beta.gouv.fr/109.232.236.90","443","INFO","No connection","",""
+"clientsimulation-java_8u161","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384","",""
+"clientsimulation-java1102","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
+"clientsimulation-java1703","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
+"clientsimulation-go_1178","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
+"clientsimulation-libressl_283","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384","",""
+"clientsimulation-openssl_102e","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384","",""
+"clientsimulation-openssl_110l","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384","",""
+"clientsimulation-openssl_111d","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
+"clientsimulation-openssl_303","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
+"clientsimulation-apple_mail_16_0","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384","",""
+"clientsimulation-thunderbird_91_9","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
+"rating_spec","beta.gouv.fr/109.232.236.90","443","INFO","SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)","",""
+"rating_doc","beta.gouv.fr/109.232.236.90","443","INFO","https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide","",""
+"protocol_support_score","beta.gouv.fr/109.232.236.90","443","INFO","100","",""
+"protocol_support_score_weighted","beta.gouv.fr/109.232.236.90","443","INFO","30","",""
+"key_exchange_score","beta.gouv.fr/109.232.236.90","443","INFO","90","",""
+"key_exchange_score_weighted","beta.gouv.fr/109.232.236.90","443","INFO","27","",""
+"cipher_strength_score","beta.gouv.fr/109.232.236.90","443","INFO","60","",""
+"cipher_strength_score_weighted","beta.gouv.fr/109.232.236.90","443","INFO","24","",""
+"final_score","beta.gouv.fr/109.232.236.90","443","INFO","81","",""
+"overall_grade","beta.gouv.fr/109.232.236.90","443","OK","A+","",""
"service","beta.gouv.fr/5.104.101.30","443","INFO","HTTP","",""
"pre_128cipher","beta.gouv.fr/5.104.101.30","443","INFO","No 128 cipher limit bug","",""
"SSLv2","beta.gouv.fr/5.104.101.30","443","OK","not offered","",""
@@ -37,20 +190,20 @@
"cert_keySize","beta.gouv.fr/5.104.101.30","443","INFO","RSA 2048 bits (exponent is 65537)","",""
"cert_keyUsage","beta.gouv.fr/5.104.101.30","443","INFO","Digital Signature, Key Encipherment","",""
"cert_extKeyUsage","beta.gouv.fr/5.104.101.30","443","INFO","TLS Web Server Authentication, TLS Web Client Authentication","",""
-"cert_serialNumber","beta.gouv.fr/5.104.101.30","443","INFO","03F15CDC8ADAD80DAF169DBDB99618FD5268","",""
+"cert_serialNumber","beta.gouv.fr/5.104.101.30","443","INFO","048ECD66291B78CDE4208ADE24AE22F29A07","",""
"cert_serialNumberLen","beta.gouv.fr/5.104.101.30","443","INFO","18","",""
-"cert_fingerprintSHA1","beta.gouv.fr/5.104.101.30","443","INFO","523677A208CE136842AB0946FC88CA2CFEB09D2E","",""
-"cert_fingerprintSHA256","beta.gouv.fr/5.104.101.30","443","INFO","8210FE9F39292C597581BA730E23B9E105FD99158E8C82C198544C5F8134EA27","",""
-"cert","beta.gouv.fr/5.104.101.30","443","INFO","-----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISA/Fc3Ira2A2vFp29uZYY/VJoMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA3MjgwNzE5MTJaFw0yMjEwMjYwNzE5MTFaMBcxFTATBgNVBAMT DGJldGEuZ291di5mcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL6t 9nguohDzZafBTl1KL/YLqGSjxc3coEqqDEG5JqogfTMzgM1v2JvKlD93CO5Tym8G AsKWZ4POoRy+MIcmuntseX9SeYU185+PV+SKtX2FuPPNnDBB/9h+LNOKJYma+2pd xry/7mMx5WBLg2RUG3FDAWigS8X8XwwNzgdCK3kzHY8V3nDumHBT3+41dmN5jM35 m/R0OBCObMNcYr6T0u1N+GVBnJqBx0KANuY8d7q6Zpb8Lvj+00fAeA9Hp4bOxtkQ VlWokWBIlPXPq1OyQ3kZBtIMPJfMaAS1eHXbGgHIE2HH8kW4GxxyVf8rjcMRooiN Dc2nEw+WQA+Fg1yZIwsCAwEAAaOCAkcwggJDMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQUQxHVkOGLoyaokSXovvKGriY5oJ8wHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA 5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w FwYDVR0RBBAwDoIMYmV0YS5nb3V2LmZyMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5 cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYARqVV63X6kSAwtaKJafTz fREsQXS+/Um4havy/HD+bUcAAAGCQ+NlZAAABAMARzBFAiEAloaYvZpr5Q78W9do leM4fWKCSmpjqopziY5nhsLTjaYCIAPfvUygkxf6t5l5b/nT+6/N3vZpFsaTbcZe ++AIzLTcAHYAQcjKsd8iRkoQxqE6CUKHXk4xixsD6+tLx2jwkGKWBvYAAAGCQ+Nn jQAABAMARzBFAiEAoeGUyBLJ7xBeDwfGVZYuCnTRJbUMX7nS7k7LQLBT+mkCIFFQ 8saLyhRWaz5MnNoG7Pafwhvmyb1adL+17FgfOj3kMA0GCSqGSIb3DQEBCwUAA4IB AQAkzhvPQ6/xFOrj5Q/tvb+QtrrKgG7rTXGUchrY5GXrE+4CutZvrxvKEYZUtCp4 NyRL/9GOrJIT4PpQz36sril5JlqUga8Wqu/aVZX14YqCQaTwDcnnbzgHLQeHCpBg 9cHZ3f3u6wtPbg/7NbdD49prGc2z3JrbtiJG4N9TgmpOmCjE1jqLumL6R423VHiz pBl1mkVuCfZAoPxgl+5a4p65nJlrNGmYcEzPlzlG8wmVcTXsjmmdFtVYLBtybRe9 YgafsAuwTM8J/WbtOGXUkjXbguBURiNhD15IJQve9Tgk0Vv1mHTtcua7JOfYvE/N NbH4nCoAjfFJOFSeLskSY06O -----END CERTIFICATE-----","",""
+"cert_fingerprintSHA1","beta.gouv.fr/5.104.101.30","443","INFO","19B27FBB0871FF0E01BABC80E03E6B07A36BAA32","",""
+"cert_fingerprintSHA256","beta.gouv.fr/5.104.101.30","443","INFO","3CA1533EBD6EFA51D0AD9B0F344E6C107037756DF17DC75187F5F1785E52FFC9","",""
+"cert","beta.gouv.fr/5.104.101.30","443","INFO","-----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISBI7NZikbeM3kIIreJK4i8poHMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA5MjYwNzIwMThaFw0yMjEyMjUwNzIwMTdaMBcxFTATBgNVBAMT DGJldGEuZ291di5mcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKsH n9B65k+B9ryivszk5T/2iAq01dvCvUmgMLwd4cRmFThl41H07Lz4BrIyjGKTlx3m slL3M3HaHEyunXf0KmT2Ws6rb0z6neIMwZn6TTON4DqGDrvjTS9TWj6rNmByx/TA SLV3wWe7gVFn/mKNjN73wQ1kPOlzxrra5lTDyMSO2GDF35VdgR6fNfdN1QicYU22 aqlCcIrNXAlaOu995u5wMivZ7lSekUAph1hQXGyU3IBkCowyAuEWvewsWiQ6oaj8 z93804Sb28cNsFCcDg8GZdNZcGJi3OUWYqcs2NAQIoUdH19h8b4xyzKGPEVKZatX 31YbZhTojUBNAyD+FgMCAwEAAaOCAkcwggJDMA4GA1UdDwEB/wQEAwIFoDAdBgNV HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E FgQUy6Xib/FPOGiq/iPT+pKIyl6aVg8wHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA 5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMu by5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8w FwYDVR0RBBAwDoIMYmV0YS5nb3V2LmZyMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5 cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYARqVV63X6kSAwtaKJafTz fREsQXS+/Um4havy/HD+bUcAAAGDeOH5bAAABAMARzBFAiEAr1WXgmvDxWYPvhLF secmJdjqOBV4hIrOxSZa+m1U9l4CIHtk6bMydGwUNAzmWq+j/z07QuXzex6F5mMd q+KupEiEAHYA36Veq2iCTx9sre64X04+WurNohKkal6OOxLAIERcKnMAAAGDeOH7 KgAABAMARzBFAiAla4S0fB+bumJohvHafyrhkMVaZUvjixpnEVKcc7otSAIhAP37 vyqlrwHPRuc0TPucnOn1sBbXqyF4hYCSAeupBXKwMA0GCSqGSIb3DQEBCwUAA4IB AQAjRfa1unp1+czzPtJdANZeaLtm+XPEXRVOmNiQhdSkuexEDhWdIFytffV/GBbh uo+zeiSBAASfhdQsuIrfC6oUXilDQh2Sff050tY6qTEdFwVRXbQp3k1Qbx1T317S 2eD8cY5POoC69FDQwREddN/0FwcF3LC4XE0KqR6VoCu0Ncs7ExIgX3gLsULumYY2 2wljEXgh8Jc8OuvZ0zzxehmeZ7wA8G6x3O9wWrEC9tiT3LLHWkU8+1jF9MPdQq+q RpgYS6WGU8DXu1/RTqq3MaeBaiZWuc8sR44/U4K+Gzv5eutwrWmKBmL6b94H7qSO tKSjt1qFuqR1vyGpYALuRS0I -----END CERTIFICATE-----","",""
"cert_commonName","beta.gouv.fr/5.104.101.30","443","OK","beta.gouv.fr","",""
"cert_commonName_wo_SNI","beta.gouv.fr/5.104.101.30","443","INFO","*.osc-fr1.scalingo.io","",""
"cert_subjectAltName","beta.gouv.fr/5.104.101.30","443","INFO","beta.gouv.fr","",""
"cert_trust","beta.gouv.fr/5.104.101.30","443","OK","Ok via SAN and CN (SNI mandatory)","",""
"cert_chain_of_trust","beta.gouv.fr/5.104.101.30","443","OK","passed.","",""
"cert_certificatePolicies_EV","beta.gouv.fr/5.104.101.30","443","INFO","no","",""
-"cert_expirationStatus","beta.gouv.fr/5.104.101.30","443","OK","31 >= 30 days","",""
-"cert_notBefore","beta.gouv.fr/5.104.101.30","443","INFO","2022-07-28 07:19","",""
-"cert_notAfter","beta.gouv.fr/5.104.101.30","443","OK","2022-10-26 07:19","",""
+"cert_expirationStatus","beta.gouv.fr/5.104.101.30","443","OK","87 >= 30 days","",""
+"cert_notBefore","beta.gouv.fr/5.104.101.30","443","INFO","2022-09-26 07:20","",""
+"cert_notAfter","beta.gouv.fr/5.104.101.30","443","OK","2022-12-25 07:20","",""
"cert_extlifeSpan","beta.gouv.fr/5.104.101.30","443","OK","certificate has no extended life time according to browser forum","",""
"cert_eTLS","beta.gouv.fr/5.104.101.30","443","INFO","not present","",""
"cert_crlDistributionPoints","beta.gouv.fr/5.104.101.30","443","INFO","--","",""
@@ -77,7 +230,7 @@
"intermediate_cert_badOCSP","beta.gouv.fr/5.104.101.30","443","OK","intermediate certificate(s) is/are ok","",""
"HTTP_status_code","beta.gouv.fr/5.104.101.30","443","INFO","200 OK ('/')","",""
"HTTP_clock_skew","beta.gouv.fr/5.104.101.30","443","INFO","0 seconds from localtime","",""
-"HTTP_headerTime","beta.gouv.fr/5.104.101.30","443","INFO","1664069591","",""
+"HTTP_headerTime","beta.gouv.fr/5.104.101.30","443","INFO","1664368209","",""
"HSTS_time","beta.gouv.fr/5.104.101.30","443","OK","365 days (=31536000 seconds) > 15552000 seconds","",""
"HSTS_subdomains","beta.gouv.fr/5.104.101.30","443","INFO","only for this domain","",""
"HSTS_preload","beta.gouv.fr/5.104.101.30","443","INFO","domain is NOT marked for preloading","",""
@@ -100,7 +253,7 @@
"SWEET32","beta.gouv.fr/5.104.101.30","443","OK","not vulnerable","CVE-2016-2183 CVE-2016-6329","CWE-327"
"FREAK","beta.gouv.fr/5.104.101.30","443","OK","not vulnerable","CVE-2015-0204","CWE-310"
"DROWN","beta.gouv.fr/5.104.101.30","443","OK","not vulnerable on this host and port","CVE-2016-0800 CVE-2016-0703","CWE-310"
-"DROWN_hint","beta.gouv.fr/5.104.101.30","443","INFO","Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=8210FE9F39292C597581BA730E23B9E105FD99158E8C82C198544C5F8134EA27","CVE-2016-0800 CVE-2016-0703","CWE-310"
+"DROWN_hint","beta.gouv.fr/5.104.101.30","443","INFO","Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=3CA1533EBD6EFA51D0AD9B0F344E6C107037756DF17DC75187F5F1785E52FFC9","CVE-2016-0800 CVE-2016-0703","CWE-310"
"LOGJAM","beta.gouv.fr/5.104.101.30","443","OK","not vulnerable, no DH EXPORT ciphers,","CVE-2015-4000","CWE-310"
"LOGJAM-common_primes","beta.gouv.fr/5.104.101.30","443","OK","--","CVE-2015-4000","CWE-310"
"BEAST","beta.gouv.fr/5.104.101.30","443","OK","not vulnerable, no SSL3 or TLS1","CVE-2011-3389","CWE-20"
@@ -152,156 +305,3 @@
"cipher_strength_score_weighted","beta.gouv.fr/5.104.101.30","443","INFO","24","",""
"final_score","beta.gouv.fr/5.104.101.30","443","INFO","81","",""
"overall_grade","beta.gouv.fr/5.104.101.30","443","OK","A+","",""
-"service","beta.gouv.fr/109.232.236.90","443","INFO","HTTP","",""
-"pre_128cipher","beta.gouv.fr/109.232.236.90","443","INFO","No 128 cipher limit bug","",""
-"SSLv2","beta.gouv.fr/109.232.236.90","443","OK","not offered","",""
-"SSLv3","beta.gouv.fr/109.232.236.90","443","OK","not offered","",""
-"TLS1","beta.gouv.fr/109.232.236.90","443","INFO","not offered","",""
-"TLS1_1","beta.gouv.fr/109.232.236.90","443","INFO","not offered","",""
-"TLS1_2","beta.gouv.fr/109.232.236.90","443","OK","offered","",""
-"TLS1_3","beta.gouv.fr/109.232.236.90","443","OK","offered with final","",""
-"ALPN_HTTP2","beta.gouv.fr/109.232.236.90","443","OK","h2","",""
-"ALPN","beta.gouv.fr/109.232.236.90","443","INFO","http/1.1","",""
-"cipherlist_NULL","beta.gouv.fr/109.232.236.90","443","OK","not offered","","CWE-327"
-"cipherlist_aNULL","beta.gouv.fr/109.232.236.90","443","OK","not offered","","CWE-327"
-"cipherlist_EXPORT","beta.gouv.fr/109.232.236.90","443","OK","not offered","","CWE-327"
-"cipherlist_LOW","beta.gouv.fr/109.232.236.90","443","OK","not offered","","CWE-327"
-"cipherlist_3DES_IDEA","beta.gouv.fr/109.232.236.90","443","INFO","not offered","","CWE-310"
-"cipherlist_AVERAGE","beta.gouv.fr/109.232.236.90","443","LOW","offered","","CWE-310"
-"cipherlist_GOOD","beta.gouv.fr/109.232.236.90","443","INFO","not offered","",""
-"cipherlist_STRONG","beta.gouv.fr/109.232.236.90","443","OK","offered","",""
-"cipherorder_TLSv1_2","beta.gouv.fr/109.232.236.90","443","INFO","ECDHE-RSA-AES256-GCM-SHA384","",""
-"cipher_order","beta.gouv.fr/109.232.236.90","443","OK","server","",""
-"protocol_negotiated","beta.gouv.fr/109.232.236.90","443","OK","Default protocol TLS1.3","",""
-"cipher_negotiated","beta.gouv.fr/109.232.236.90","443","OK","TLS_AES_256_GCM_SHA384, 253 bit ECDH (X25519)","",""
-"FS","beta.gouv.fr/109.232.236.90","443","OK","offered","",""
-"FS_ciphers","beta.gouv.fr/109.232.236.90","443","INFO","DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384","",""
-"FS_ECDHE_curves","beta.gouv.fr/109.232.236.90","443","OK","prime256v1 secp384r1 secp521r1","",""
-"TLS_extensions","beta.gouv.fr/109.232.236.90","443","INFO","'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'session ticket/#35' 'supported versions/#43' 'key share/#51' 'supported_groups/#10' 'max fragment length/#1' 'application layer protocol negotiation/#16' 'encrypt-then-mac/#22' 'extended master secret/#23'","",""
-"TLS_session_ticket","beta.gouv.fr/109.232.236.90","443","INFO","valid for 300 seconds only (= 30 days","",""
-"cert_notBefore","beta.gouv.fr/109.232.236.90","443","INFO","2022-07-28 07:19","",""
-"cert_notAfter","beta.gouv.fr/109.232.236.90","443","OK","2022-10-26 07:19","",""
-"cert_extlifeSpan","beta.gouv.fr/109.232.236.90","443","OK","certificate has no extended life time according to browser forum","",""
-"cert_eTLS","beta.gouv.fr/109.232.236.90","443","INFO","not present","",""
-"cert_crlDistributionPoints","beta.gouv.fr/109.232.236.90","443","INFO","--","",""
-"cert_ocspURL","beta.gouv.fr/109.232.236.90","443","INFO","http://r3.o.lencr.org","",""
-"OCSP_stapling","beta.gouv.fr/109.232.236.90","443","LOW","not offered","",""
-"cert_mustStapleExtension","beta.gouv.fr/109.232.236.90","443","INFO","--","",""
-"DNS_CAArecord","beta.gouv.fr/109.232.236.90","443","LOW","--","",""
-"certificate_transparency","beta.gouv.fr/109.232.236.90","443","OK","yes (certificate extension)","",""
-"certs_countServer","beta.gouv.fr/109.232.236.90","443","INFO","3","",""
-"certs_list_ordering_problem","beta.gouv.fr/109.232.236.90","443","INFO","no","",""
-"cert_caIssuers","beta.gouv.fr/109.232.236.90","443","INFO","R3 (Let's Encrypt from US)","",""
-"intermediate_cert <#1>","beta.gouv.fr/109.232.236.90","443","INFO","-----BEGIN CERTIFICATE----- MIIFFjCCAv6gAwIBAgIRAJErCErPDBinU/bWLiWnX1owDQYJKoZIhvcNAQELBQAw TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMjAwOTA0MDAwMDAw WhcNMjUwOTE1MTYwMDAwWjAyMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNTGV0J3Mg RW5jcnlwdDELMAkGA1UEAxMCUjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC7AhUozPaglNMPEuyNVZLD+ILxmaZ6QoinXSaqtSu5xUyxr45r+XXIo9cP R5QUVTVXjJ6oojkZ9YI8QqlObvU7wy7bjcCwXPNZOOftz2nwWgsbvsCUJCWH+jdx sxPnHKzhm+/b5DtFUkWWqcFTzjTIUu61ru2P3mBw4qVUq7ZtDpelQDRrK9O8Zutm NHz6a4uPVymZ+DAXXbpyb/uBxa3Shlg9F8fnCbvxK/eG3MHacV3URuPMrSXBiLxg Z3Vms/EY96Jc5lP/Ooi2R6X/ExjqmAl3P51T+c8B5fWmcBcUr2Ok/5mzk53cU6cG /kiFHaFpriV1uxPMUgP17VGhi9sVAgMBAAGjggEIMIIBBDAOBgNVHQ8BAf8EBAMC AYYwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMBIGA1UdEwEB/wQIMAYB Af8CAQAwHQYDVR0OBBYEFBQusxe3WFbLrlAJQOYfr52LFMLGMB8GA1UdIwQYMBaA FHm0WeZ7tuXkAXOACIjIGlj26ZtuMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcw AoYWaHR0cDovL3gxLmkubGVuY3Iub3JnLzAnBgNVHR8EIDAeMBygGqAYhhZodHRw Oi8veDEuYy5sZW5jci5vcmcvMCIGA1UdIAQbMBkwCAYGZ4EMAQIBMA0GCysGAQQB gt8TAQEBMA0GCSqGSIb3DQEBCwUAA4ICAQCFyk5HPqP3hUSFvNVneLKYY611TR6W PTNlclQtgaDqw+34IL9fzLdwALduO/ZelN7kIJ+m74uyA+eitRY8kc607TkC53wl ikfmZW4/RvTZ8M6UK+5UzhK8jCdLuMGYL6KvzXGRSgi3yLgjewQtCPkIVz6D2QQz CkcheAmCJ8MqyJu5zlzyZMjAvnnAT45tRAxekrsu94sQ4egdRCnbWSDtY7kh+BIm lJNXoB1lBMEKIq4QDUOXoRgffuDghje1WrG9ML+Hbisq/yFOGwXD9RiX8F6sw6W4 avAuvDszue5L3sz85K+EC4Y/wFVDNvZo4TYXao6Z0f+lQKc0t8DQYzk1OXVu8rp2 yJMC6alLbBfODALZvYH7n7do1AZls4I9d1P4jnkDrQoxB3UqQ9hVl3LEKQ73xF1O yK5GhDDX8oVfGKF5u+decIsH4YaTw7mP3GFxJSqv3+0lUFJoi5Lc5da149p90Ids hCExroL1+7mryIkXPeFM5TgO9r0rvZaBFOvV2z0gp35Z0+L4WPlbuEjN/lxPFin+ HlUjr8gRsI3qfJOQFy/9rKIJR0Y/8Omwt/8oTWgy1mdeHmmjk7j1nYsvC9JSQ6Zv MldlTTKB3zhThV1+XWYp6rjd5JW1zbVWEkLNxE7GJThEUG3szgBVGP7pSWTUTsqX nLRbwHOoq7hHwg== -----END CERTIFICATE-----","",""
-"intermediate_cert_fingerprintSHA256 <#1>","beta.gouv.fr/109.232.236.90","443","INFO","67ADD1166B020AE61B8F5FC96813C04C2AA589960796865572A3C7E737613DFD","",""
-"intermediate_cert_notBefore <#1>","beta.gouv.fr/109.232.236.90","443","INFO","2020-09-04 00:00","",""
-"intermediate_cert_notAfter <#1>","beta.gouv.fr/109.232.236.90","443","OK","2025-09-15 16:00","",""
-"intermediate_cert_expiration <#1>","beta.gouv.fr/109.232.236.90","443","OK","ok > 40 days","",""
-"intermediate_cert_chain <#1>","beta.gouv.fr/109.232.236.90","443","INFO","R3 <-- ISRG Root X1","",""
-"intermediate_cert <#2>","beta.gouv.fr/109.232.236.90","443","INFO","-----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgIQQAF3ITfU6UK47naqPGQKtzANBgkqhkiG9w0BAQsFADA/ MSQwIgYDVQQKExtEaWdpdGFsIFNpZ25hdHVyZSBUcnVzdCBDby4xFzAVBgNVBAMT DkRTVCBSb290IENBIFgzMB4XDTIxMDEyMDE5MTQwM1oXDTI0MDkzMDE4MTQwM1ow TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwggIiMA0GCSqGSIb3DQEB AQUAA4ICDwAwggIKAoICAQCt6CRz9BQ385ueK1coHIe+3LffOJCMbjzmV6B493XC ov71am72AE8o295ohmxEk7axY/0UEmu/H9LqMZshftEzPLpI9d1537O4/xLxIZpL wYqGcWlKZmZsj348cL+tKSIG8+TA5oCu4kuPt5l+lAOf00eXfJlII1PoOK5PCm+D LtFJV4yAdLbaL9A4jXsDcCEbdfIwPPqPrt3aY6vrFk/CjhFLfs8L6P+1dy70sntK 4EwSJQxwjQMpoOFTJOwT2e4ZvxCzSow/iaNhUd6shweU9GNx7C7ib1uYgeGJXDR5 bHbvO5BieebbpJovJsXQEOEO3tkQjhb7t/eo98flAgeYjzYIlefiN5YNNnWe+w5y sR2bvAP5SQXYgd0FtCrWQemsAXaVCg/Y39W9Eh81LygXbNKYwagJZHduRze6zqxZ Xmidf3LWicUGQSk+WT7dJvUkyRGnWqNMQB9GoZm1pzpRboY7nn1ypxIFeFntPlF4 FQsDj43QLwWyPntKHEtzBRL8xurgUBN8Q5N0s8p0544fAQjQMNRbcTa0B7rBMDBc SLeCO5imfWCKoqMpgsy6vYMEG6KDA0Gh1gXxG8K28Kh8hjtGqEgqiNx2mna/H2ql PRmP6zjzZN7IKw0KKP/32+IVQtQi0Cdd4Xn+GOdwiK1O5tmLOsbdJ1Fu/7xk9TND TwIDAQABo4IBRjCCAUIwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYw SwYIKwYBBQUHAQEEPzA9MDsGCCsGAQUFBzAChi9odHRwOi8vYXBwcy5pZGVudHJ1 c3QuY29tL3Jvb3RzL2RzdHJvb3RjYXgzLnA3YzAfBgNVHSMEGDAWgBTEp7Gkeyxx +tvhS5B1/8QVYIWJEDBUBgNVHSAETTBLMAgGBmeBDAECATA/BgsrBgEEAYLfEwEB ATAwMC4GCCsGAQUFBwIBFiJodHRwOi8vY3BzLnJvb3QteDEubGV0c2VuY3J5cHQu b3JnMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmwuaWRlbnRydXN0LmNvbS9E U1RST09UQ0FYM0NSTC5jcmwwHQYDVR0OBBYEFHm0WeZ7tuXkAXOACIjIGlj26Ztu MA0GCSqGSIb3DQEBCwUAA4IBAQAKcwBslm7/DlLQrt2M51oGrS+o44+/yQoDFVDC 5WxCu2+b9LRPwkSICHXM6webFGJueN7sJ7o5XPWioW5WlHAQU7G75K/QosMrAdSW 9MUgNTP52GE24HGNtLi1qoJFlcDyqSMo59ahy2cI2qBDLKobkx/J3vWraV0T9VuG WCLKTVXkcGdtwlfFRjlBz4pYg1htmf5X6DYO8A4jqv2Il9DjXA6USbW1FzXSLr9O he8Y4IWS6wY7bCkjCWDcRQJMEhg76fsO3txE+FiYruq9RUWhiF1myv4Q6W+CyBFC Dfvp7OOGAN6dEOM4+qR9sdjoSYKEBpsr6GtPAQw4dy753ec5 -----END CERTIFICATE-----","",""
-"intermediate_cert_fingerprintSHA256 <#2>","beta.gouv.fr/109.232.236.90","443","INFO","6D99FB265EB1C5B3744765FCBC648F3CD8E1BFFAFDC4C2F99B9D47CF7FF1C24F","",""
-"intermediate_cert_notBefore <#2>","beta.gouv.fr/109.232.236.90","443","INFO","2021-01-20 19:14","",""
-"intermediate_cert_notAfter <#2>","beta.gouv.fr/109.232.236.90","443","OK","2024-09-30 18:14","",""
-"intermediate_cert_expiration <#2>","beta.gouv.fr/109.232.236.90","443","OK","ok > 40 days","",""
-"intermediate_cert_chain <#2>","beta.gouv.fr/109.232.236.90","443","INFO","ISRG Root X1 <-- DST Root CA X3","",""
-"intermediate_cert_badOCSP","beta.gouv.fr/109.232.236.90","443","OK","intermediate certificate(s) is/are ok","",""
-"HTTP_status_code","beta.gouv.fr/109.232.236.90","443","INFO","200 OK ('/')","",""
-"HTTP_clock_skew","beta.gouv.fr/109.232.236.90","443","INFO","-1 seconds from localtime","",""
-"HTTP_headerTime","beta.gouv.fr/109.232.236.90","443","INFO","1664069726","",""
-"HSTS_time","beta.gouv.fr/109.232.236.90","443","OK","365 days (=31536000 seconds) > 15552000 seconds","",""
-"HSTS_subdomains","beta.gouv.fr/109.232.236.90","443","INFO","only for this domain","",""
-"HSTS_preload","beta.gouv.fr/109.232.236.90","443","INFO","domain is NOT marked for preloading","",""
-"HPKP","beta.gouv.fr/109.232.236.90","443","INFO","No support for HTTP Public Key Pinning","",""
-"banner_server","beta.gouv.fr/109.232.236.90","443","INFO","No Server banner line in header, interesting!","",""
-"banner_application","beta.gouv.fr/109.232.236.90","443","INFO","No application banner found","",""
-"cookie_count","beta.gouv.fr/109.232.236.90","443","INFO","0 at '/'","",""
-"security_headers","beta.gouv.fr/109.232.236.90","443","MEDIUM","--","",""
-"banner_reverseproxy","beta.gouv.fr/109.232.236.90","443","INFO","--","","CWE-200"
-"heartbleed","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable, no heartbeat extension","CVE-2014-0160","CWE-119"
-"CCS","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable","CVE-2014-0224","CWE-310"
-"ticketbleed","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable","CVE-2016-9244","CWE-200"
-"ROBOT","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable, no RSA key transport cipher","CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168","CWE-203"
-"secure_renego","beta.gouv.fr/109.232.236.90","443","OK","supported","","CWE-310"
-"secure_client_renego","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable","CVE-2011-1473","CWE-310"
-"CRIME_TLS","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable","CVE-2012-4929","CWE-310"
-"BREACH","beta.gouv.fr/109.232.236.90","443","MEDIUM","potentially VULNERABLE, gzip HTTP compression detected - only supplied '/' tested","CVE-2013-3587","CWE-310"
-"POODLE_SSL","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable, no SSLv3","CVE-2014-3566","CWE-310"
-"fallback_SCSV","beta.gouv.fr/109.232.236.90","443","OK","no protocol below TLS 1.2 offered","",""
-"SWEET32","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable","CVE-2016-2183 CVE-2016-6329","CWE-327"
-"FREAK","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable","CVE-2015-0204","CWE-310"
-"DROWN","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable on this host and port","CVE-2016-0800 CVE-2016-0703","CWE-310"
-"DROWN_hint","beta.gouv.fr/109.232.236.90","443","INFO","Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=8210FE9F39292C597581BA730E23B9E105FD99158E8C82C198544C5F8134EA27","CVE-2016-0800 CVE-2016-0703","CWE-310"
-"LOGJAM","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable, no DH EXPORT ciphers,","CVE-2015-4000","CWE-310"
-"LOGJAM-common_primes","beta.gouv.fr/109.232.236.90","443","OK","--","CVE-2015-4000","CWE-310"
-"BEAST","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable, no SSL3 or TLS1","CVE-2011-3389","CWE-20"
-"LUCKY13","beta.gouv.fr/109.232.236.90","443","LOW","potentially vulnerable, uses TLS CBC ciphers","CVE-2013-0169","CWE-310"
-"winshock","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable","CVE-2014-6321","CWE-94"
-"RC4","beta.gouv.fr/109.232.236.90","443","OK","not vulnerable","CVE-2013-2566 CVE-2015-2808","CWE-310"
-"clientsimulation-android_60","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256","",""
-"clientsimulation-android_70","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384","",""
-"clientsimulation-android_81","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384","",""
-"clientsimulation-android_90","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
-"clientsimulation-android_X","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
-"clientsimulation-android_11","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
-"clientsimulation-android_12","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
-"clientsimulation-chrome_79_win10","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
-"clientsimulation-chrome_101_win10","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
-"clientsimulation-firefox_66_win81","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
-"clientsimulation-firefox_100_win10","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
-"clientsimulation-ie_6_xp","beta.gouv.fr/109.232.236.90","443","INFO","No connection","",""
-"clientsimulation-ie_8_win7","beta.gouv.fr/109.232.236.90","443","INFO","No connection","",""
-"clientsimulation-ie_8_xp","beta.gouv.fr/109.232.236.90","443","INFO","No connection","",""
-"clientsimulation-ie_11_win7","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.2 DHE-RSA-AES256-GCM-SHA384","",""
-"clientsimulation-ie_11_win81","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.2 DHE-RSA-AES256-GCM-SHA384","",""
-"clientsimulation-ie_11_winphone81","beta.gouv.fr/109.232.236.90","443","INFO","No connection","",""
-"clientsimulation-ie_11_win10","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384","",""
-"clientsimulation-edge_15_win10","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384","",""
-"clientsimulation-edge_101_win10_21h2","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
-"clientsimulation-safari_121_ios_122","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
-"clientsimulation-safari_130_osx_10146","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
-"clientsimulation-safari_154_osx_1231","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
-"clientsimulation-java_7u25","beta.gouv.fr/109.232.236.90","443","INFO","No connection","",""
-"clientsimulation-java_8u161","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384","",""
-"clientsimulation-java1102","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
-"clientsimulation-java1703","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
-"clientsimulation-go_1178","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
-"clientsimulation-libressl_283","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384","",""
-"clientsimulation-openssl_102e","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384","",""
-"clientsimulation-openssl_110l","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384","",""
-"clientsimulation-openssl_111d","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
-"clientsimulation-openssl_303","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
-"clientsimulation-apple_mail_16_0","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384","",""
-"clientsimulation-thunderbird_91_9","beta.gouv.fr/109.232.236.90","443","INFO","TLSv1.3 TLS_AES_256_GCM_SHA384","",""
-"rating_spec","beta.gouv.fr/109.232.236.90","443","INFO","SSL Labs's 'SSL Server Rating Guide' (version 2009q from 2020-01-30)","",""
-"rating_doc","beta.gouv.fr/109.232.236.90","443","INFO","https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide","",""
-"protocol_support_score","beta.gouv.fr/109.232.236.90","443","INFO","100","",""
-"protocol_support_score_weighted","beta.gouv.fr/109.232.236.90","443","INFO","30","",""
-"key_exchange_score","beta.gouv.fr/109.232.236.90","443","INFO","90","",""
-"key_exchange_score_weighted","beta.gouv.fr/109.232.236.90","443","INFO","27","",""
-"cipher_strength_score","beta.gouv.fr/109.232.236.90","443","INFO","60","",""
-"cipher_strength_score_weighted","beta.gouv.fr/109.232.236.90","443","INFO","24","",""
-"final_score","beta.gouv.fr/109.232.236.90","443","INFO","81","",""
-"overall_grade","beta.gouv.fr/109.232.236.90","443","OK","A+","",""
diff --git a/results/aHR0cHM6Ly9iZXRhLmdvdXYuZnI=/testssl.html b/results/aHR0cHM6Ly9iZXRhLmdvdXYuZnI=/testssl.html
index 08acc7cbc2..0d40161a2f 100644
--- a/results/aHR0cHM6Ly9iZXRhLmdvdXYuZnI=/testssl.html
+++ b/results/aHR0cHM6Ly9iZXRhLmdvdXYuZnI=/testssl.html
@@ -21,16 +21,16 @@
###########################################################
Using "OpenSSL 1.0.2-bad (1.0.2k-dev)" [~183 ciphers]
- on fv-az90-621:/home/testssl/bin/openssl.Linux.x86_64
+ on fv-az190-137:/home/testssl/bin/openssl.Linux.x86_64
(built: "Sep 1 14:03:44 2022", platform: "linux-x86_64")
-Testing all IPv4 addresses (port 443): 5.104.101.30 109.232.236.90
+Testing all IPv4 addresses (port 443): 109.232.236.90 5.104.101.30
-----------------------------------------------------
- Start 2022-09-25 01:32:15 -->> 5.104.101.30:443 (beta.gouv.fr) <<--
+ Start 2022-09-28 12:27:47 -->> 109.232.236.90:443 (beta.gouv.fr) <<--
- Further IP addresses: 109.232.236.90
- rDNS (5.104.101.30): ows-5-104-101-30.eu-west-2.compute.outscale.com.
+ Further IP addresses: 5.104.101.30
+ rDNS (109.232.236.90): ows-109-232-236-90.eu-west-2.compute.outscale.com.
Service detected: HTTP
@@ -105,15 +105,15 @@
Server key size RSA 2048 bits (exponent is 65537)
Server key usage Digital Signature, Key Encipherment
Server extended key usage TLS Web Server Authentication, TLS Web Client Authentication
- Serial 03F15CDC8ADAD80DAF169DBDB99618FD5268 (OK: length 18)
- Fingerprints SHA1 523677A208CE136842AB0946FC88CA2CFEB09D2E
- SHA256 8210FE9F39292C597581BA730E23B9E105FD99158E8C82C198544C5F8134EA27
+ Serial 048ECD66291B78CDE4208ADE24AE22F29A07 (OK: length 18)
+ Fingerprints SHA1 19B27FBB0871FF0E01BABC80E03E6B07A36BAA32
+ SHA256 3CA1533EBD6EFA51D0AD9B0F344E6C107037756DF17DC75187F5F1785E52FFC9
Common Name (CN) beta.gouv.fr (CN in response to request w/o SNI: *.osc-fr1.scalingo.io )
subjectAltName (SAN) beta.gouv.fr
Trust (hostname) Ok via SAN and CN (SNI mandatory)
Chain of trust Ok
EV cert (experimental) no
- Certificate Validity (UTC) 31 >= 30 days (2022-07-28 07:19 --> 2022-10-26 07:19)
+ Certificate Validity (UTC) 87 >= 30 days (2022-09-26 07:20 --> 2022-12-25 07:20)
ETS/"eTLS", visibility info not present
Certificate Revocation List --
OCSP URI http://r3.o.lencr.org
@@ -158,7 +158,7 @@
FREAK (CVE-2015-0204) not vulnerable (OK)
DROWN (CVE-2016-0800, CVE-2016-0703) not vulnerable on this host and port (OK)
make sure you don't use this certificate elsewhere with SSLv2 enabled services, see
- https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=8210FE9F39292C597581BA730E23B9E105FD99158E8C82C198544C5F8134EA27
+ https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=3CA1533EBD6EFA51D0AD9B0F344E6C107037756DF17DC75187F5F1785E52FFC9
LOGJAM (CVE-2015-4000), experimental not vulnerable (OK): no DH EXPORT ciphers, no common prime detected
BEAST (CVE-2011-3389) not vulnerable (OK), no SSL3 or TLS1
LUCKY13 (CVE-2013-0169), experimental potentially VULNERABLE, uses cipher block chaining (CBC) ciphers with TLS. Check patches
@@ -217,13 +217,13 @@
Final Score 81
Overall Grade A+
- Done 2022-09-25 01:34:32 [ 139s] -->> 5.104.101.30:443 (beta.gouv.fr) <<--
+ Done 2022-09-28 12:29:20 [ 95s] -->> 109.232.236.90:443 (beta.gouv.fr) <<--
-----------------------------------------------------
- Start 2022-09-25 01:34:32 -->> 109.232.236.90:443 (beta.gouv.fr) <<--
+ Start 2022-09-28 12:29:20 -->> 5.104.101.30:443 (beta.gouv.fr) <<--
- Further IP addresses: 5.104.101.30
- rDNS (109.232.236.90): ows-109-232-236-90.eu-west-2.compute.outscale.com.
+ Further IP addresses: 109.232.236.90
+ rDNS (5.104.101.30): ows-5-104-101-30.eu-west-2.compute.outscale.com.
Service detected: HTTP
@@ -298,15 +298,15 @@
Server key size RSA 2048 bits (exponent is 65537)
Server key usage Digital Signature, Key Encipherment
Server extended key usage TLS Web Server Authentication, TLS Web Client Authentication
- Serial 03F15CDC8ADAD80DAF169DBDB99618FD5268 (OK: length 18)
- Fingerprints SHA1 523677A208CE136842AB0946FC88CA2CFEB09D2E
- SHA256 8210FE9F39292C597581BA730E23B9E105FD99158E8C82C198544C5F8134EA27
+ Serial 048ECD66291B78CDE4208ADE24AE22F29A07 (OK: length 18)
+ Fingerprints SHA1 19B27FBB0871FF0E01BABC80E03E6B07A36BAA32
+ SHA256 3CA1533EBD6EFA51D0AD9B0F344E6C107037756DF17DC75187F5F1785E52FFC9
Common Name (CN) beta.gouv.fr (CN in response to request w/o SNI: *.osc-fr1.scalingo.io )
subjectAltName (SAN) beta.gouv.fr
Trust (hostname) Ok via SAN and CN (SNI mandatory)
Chain of trust Ok
EV cert (experimental) no
- Certificate Validity (UTC) 31 >= 30 days (2022-07-28 07:19 --> 2022-10-26 07:19)
+ Certificate Validity (UTC) 87 >= 30 days (2022-09-26 07:20 --> 2022-12-25 07:20)
ETS/"eTLS", visibility info not present
Certificate Revocation List --
OCSP URI http://r3.o.lencr.org
@@ -324,7 +324,7 @@
Testing HTTP header response @ "/"
HTTP Status Code 200 OK
- HTTP clock skew -1 sec from localtime
+ HTTP clock skew 0 sec from localtime
Strict Transport Security 365 days=31536000 s, just this domain
Public Key Pinning --
Server banner (no "Server" line in header, interesting!)
@@ -351,7 +351,7 @@
FREAK (CVE-2015-0204) not vulnerable (OK)
DROWN (CVE-2016-0800, CVE-2016-0703) not vulnerable on this host and port (OK)
make sure you don't use this certificate elsewhere with SSLv2 enabled services, see
- https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=8210FE9F39292C597581BA730E23B9E105FD99158E8C82C198544C5F8134EA27
+ https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=3CA1533EBD6EFA51D0AD9B0F344E6C107037756DF17DC75187F5F1785E52FFC9
LOGJAM (CVE-2015-4000), experimental not vulnerable (OK): no DH EXPORT ciphers, no common prime detected
BEAST (CVE-2011-3389) not vulnerable (OK), no SSL3 or TLS1
LUCKY13 (CVE-2013-0169), experimental potentially VULNERABLE, uses cipher block chaining (CBC) ciphers with TLS. Check patches
@@ -410,10 +410,10 @@
Final Score 81
Overall Grade A+
- Done 2022-09-25 01:36:48 [ 275s] -->> 109.232.236.90:443 (beta.gouv.fr) <<--
+ Done 2022-09-28 12:30:51 [ 186s] -->> 5.104.101.30:443 (beta.gouv.fr) <<--
-----------------------------------------------------
-Done testing now all IP addresses (on port 443): 5.104.101.30 109.232.236.90
+Done testing now all IP addresses (on port 443): 109.232.236.90 5.104.101.30