Summary of qyhtest.sinosig.com:443 (HTTPS) SSL Security Test
Provided "as is" without any warranty of any kind.
Date/Time:Nov 9th, 2026 10:55 GMT+0
Source IP/Port:1.202.156.246:443
Protocol:HTTPS
Location:Beijing, China
Your final score:
- A
- B
- C
- F
C
The server has TLS 1.0 enabled. It is non-compliant with NIST since SP 800-52 REV. 2 and non-compliant with PCI DSS since the 30th of June 2018.
Non-compliant with PCI DSS and NIST
The server has TLS 1.1 enabled. It is non-compliant with NIST since SP 800-52 REV. 2 and non-compliant with PCI DSS since the 31st of March 2025.
Non-compliant with PCI DSS and NIST
Test Results Summary for qyhtest.sinosig.com
- The server on the tested port is currently not prepared for post-quantum key exchange. The server’s certificate chain relies entirely on classical signature algorithms without post-quantum support. Show details.
- 1 SSL/TLS end-entity certificate detected: the first certificate is a trusted RSA 2048 bits certificate with issuer GlobalSign RSA OV SSL CA 2018 valid until November 18, 2026. 1 certificate chain detected. Show details.
- None of the 4 supported cipher suites are compliant with PCI DSS. The server supports PCI DSS compliant protocols (TLSv1.2) as well as non-compliant protocols (TLSv1.0 and TLSv1.1). There is 1 more issue which makes the server non-compliant with PCI DSS: potential Marvin Attack. Show details.
- None of the 4 supported cipher suites are compliant with HIPAA requirements (Ref. NIST SP 800-52). The server supports HIPAA compliant protocols (TLSv1.2) as well as non-compliant protocols (TLSv1.0 and TLSv1.1). There are 3 more issues which make the server non-compliant with HIPAA: server does not support OCSP stapling, server does not support TLS 1.3, server does not support extended master sECret. Show details.
- 4 issues related to industry best practices were identified: server does not support TLS 1.3, server does not prefer cipher suites providing PFS, HTTP site does not redirect to the HTTPS version, server does not provide HSTS. Show details.
Compliance Summary for qyhtest.sinosig.com
- PCI DSS Compliance Failed: None of the 4 supported cipher suites are compliant with PCI DSS. The server supports PCI DSS compliant protocols (TLSv1.2) as well as non-compliant protocols (TLSv1.0 and TLSv1.1). There is 1 more issue which makes the server non-compliant with PCI DSS: potential Marvin Attack.
- HIPAA Compliance Failed: None of the 4 supported cipher suites are compliant with HIPAA requirements (Ref. NIST SP 800-52). The server supports HIPAA compliant protocols (TLSv1.2) as well as non-compliant protocols (TLSv1.0 and TLSv1.1). There are 3 more issues which make the server non-compliant with HIPAA: server does not support OCSP stapling, server does not support TLS 1.3, server does not support extended master sECret.
- GDPR Compliance Failed: None of the 4 supported cipher suites are compliant with GDPR. The server supports GDPR compliant protocols (TLSv1.2) as well as non-compliant protocols (TLSv1.0 and TLSv1.1). There is 1 more issue which makes the server non-compliant with GDPR: potential Marvin Attack.
