SSL Security Test of cm2fa.somoscopa.com

Test the SSL/TLS stack of your web or email server for security, cryptographic flaws and misconfigurations, and compliance with NIST & HIPAA
Free online tool with PDF report
  • Web Server SSL/TLS Security
  • Post-Quantum Cryptography (PQC) Readiness
  • Email Server SSL/TLS Security
  • PCI DSS, HIPAA & NIST Compliance
  • SSL Certificate Validity
  • Best-Practices Compliance
Free online tool with PDF report
180,937,906 tests performed
Provided "as is" without any warranty of any kind
149
tests
running
60,178
tests
in 24 hours
Tests in 24 Hours
Share this report:

Summary of cm2fa.somoscopa.com:443 (HTTPS) SSL Security Test

Provided "as is" without any warranty of any kind.
This test was made 1280 days ago and may be outdated
Refresh Test
Date/Time:Nov 7th, 2022 01:20 GMT+0
Source IP/Port:201.218.212.35:443
Protocol:HTTPS
Location:Panama City, PanamaPanama
Your final score:
  • A
  • B
  • C
  • F
C+

Executive Summary for cm2fa.somoscopa.com

  • SSL/TLS Certificate Analysis
    1 SSL/TLS end-entity certificate(s) detected: the first certificate is a trusted RSA 2048 bits certificate with issuer DigiCert TLS RSA SHA256 2020 CA1 valid until November 15, 2022. 1 certificate chain(s) detected. Show details.
  • PCI DSS Compliance Test
    1 of 17 supported cipher suites are not compliant with PCI DSS. The server supports PCI DSS compliant protocols (TLSv1.1 and TLSv1.2) as well as non-compliant protocols (TLSv1.0). All supported elliptic curves are compliant with PCI DSS: P-256. No additional PCI DSS compliance issues were identified. Show details.
  • NIST and HIPAA Compliance Test
    1 of 17 supported cipher suites are not compliant with NIST and HIPAA. The server supports NIST and HIPAA compliant protocols (TLSv1.1 and TLSv1.2) as well as non-compliant protocols (TLSv1.0). All supported elliptic curves are compliant with NIST and HIPAA: P-256. There are 2 more issue(s) which make the server non-compliant with NIST and HIPAA: server does not support OCSP stapling, server does not support extended master sECret. Show details.
  • Industry Best Practices Test
    3 issue(s) related to industry best practices were identified: server does not support TLS 1.3, server does not prefer cipher suites providing PFS, server-initiated secure renegotiation. Show details.
Please wait. Data is loading...
Please wait. Data is loading...
Share this report: