Summary of speed.cellcom.co.il:443 (HTTPS) SSL Security Test
Provided "as is" without any warranty of any kind.
Date/Time:Nov 9th, 2026 16:01 GMT+0
Source IP/Port:207.232.36.172:443
Protocol:HTTPS
Location:Tel Aviv, Israel
Your final score:
- A
- B
- C
- F
F
The SSL certificate is untrusted. Modern browsers will display a security warning message to all website visitors. Review and remediate highlighted issues.
Non-compliant with PCI DSS requirements
CA of your SSL certificate is distrusted by Google Chrome and Mozilla Firefox.
Misconfiguration or weakness
The server has TLS 1.0 enabled. It is non-compliant with NIST since SP 800-52 REV. 2 and non-compliant with PCI DSS since the 30th of June 2018.
Non-compliant with PCI DSS and NIST
The server has TLS 1.1 enabled. It is non-compliant with NIST since SP 800-52 REV. 2 and non-compliant with PCI DSS since the 31st of March 2025.
Non-compliant with PCI DSS and NIST
Certificate chain relies on expired certificate, it can break connection for some clients.
Misconfiguration or weakness
Test Results Summary for speed.cellcom.co.il
- The server on the tested port is currently not prepared for post-quantum key exchange. The server’s certificate chain relies entirely on classical signature algorithms without post-quantum support. Show details.
- 1 SSL/TLS end-entity certificate detected: the first certificate is an untrusted RSA 2048 bits certificate with issuer RapidSSL SHA256 CA - G2 valid until September 12, 2020. 1 certificate chain detected. Show details.
- All 6 supported cipher suites are compliant with PCI DSS. The server supports PCI DSS compliant protocols (TLSv1.2) as well as non-compliant protocols (TLSv1.0 and TLSv1.1). The server supports PCI DSS compliant elliptic curves (P-256, P-521 and P-384) as well as non-compliant elliptic curves (secp256k1). There is 1 more issue which makes the server non-compliant with PCI DSS: certificates are untrusted. Show details.
- All 6 supported cipher suites are compliant with HIPAA requirements (Ref. NIST SP 800-52). The server supports HIPAA compliant protocols (TLSv1.2) as well as non-compliant protocols (TLSv1.0 and TLSv1.1). The server supports HIPAA compliant elliptic curves (P-256, P-521 and P-384) as well as non-compliant elliptic curves (secp256k1). There are 3 more issues which make the server non-compliant with HIPAA: server does not support OCSP stapling, server does not support TLS 1.3, server does not support extended master sECret. Show details.
- 4 issues related to industry best practices were identified: certificates have a validity period of more than 398 days, server does not support TLS 1.3, HTTP site does not redirect to the HTTPS version, certificate chain rely on expired certificate. Show details.
Compliance Summary for speed.cellcom.co.il
- PCI DSS Compliance Failed: All 6 supported cipher suites are compliant with PCI DSS. The server supports PCI DSS compliant protocols (TLSv1.2) as well as non-compliant protocols (TLSv1.0 and TLSv1.1). The server supports PCI DSS compliant elliptic curves (P-256, P-521 and P-384) as well as non-compliant elliptic curves (secp256k1). There is 1 more issue which makes the server non-compliant with PCI DSS: certificates are untrusted.
- HIPAA Compliance Failed: All 6 supported cipher suites are compliant with HIPAA requirements (Ref. NIST SP 800-52). The server supports HIPAA compliant protocols (TLSv1.2) as well as non-compliant protocols (TLSv1.0 and TLSv1.1). The server supports HIPAA compliant elliptic curves (P-256, P-521 and P-384) as well as non-compliant elliptic curves (secp256k1). There are 3 more issues which make the server non-compliant with HIPAA: server does not support OCSP stapling, server does not support TLS 1.3, server does not support extended master sECret.
- GDPR Compliance Failed: All 6 supported cipher suites are compliant with GDPR. The server supports GDPR compliant protocols (TLSv1.2) as well as non-compliant protocols (TLSv1.0 and TLSv1.1). The server supports GDPR compliant elliptic curves (P-256, P-521 and P-384) as well as non-compliant elliptic curves (secp256k1). There is 1 more issue which makes the server non-compliant with GDPR: certificates are untrusted.
