SSL Security Test of www-of-owa.vtv.oliverwyman.com

Test the SSL/TLS stack of your web or email server for security, cryptographic flaws and misconfigurations, and compliance with NIST & HIPAA
Free online tool with PDF report
  • Web Server SSL/TLS Security
  • Post-Quantum Cryptography (PQC) Readiness
  • Email Server SSL/TLS Security
  • PCI DSS, HIPAA & NIST Compliance
  • SSL Certificate Validity
  • Best-Practices Compliance
Free online tool with PDF report
181,102,961 tests performed
Provided "as is" without any warranty of any kind
250
tests
running
51,412
tests
in 24 hours
Tests in 24 Hours
Share this report:

Summary of www-of-owa.vtv.oliverwyman.com:443 (HTTPS) SSL Security Test

Provided "as is" without any warranty of any kind.
This test was made 2697 days ago and may be outdated
Refresh Test
Date/Time:Dec 25th, 2018 17:54 GMT+0
Source IP/Port:205.156.135.60:443
Protocol:HTTPS
Location:New York, United StatesUnited States
Your final score:
  • A
  • B
  • C
  • F
C

Executive Summary for www-of-owa.vtv.oliverwyman.com

  • SSL/TLS Certificate Analysis
    1 SSL/TLS end-entity certificate(s) detected: the first certificate is a trusted RSA 2048 bits certificate with issuer Entrust Certification Authority - L1K valid until December 1, 2019. 2 certificate chain(s) detected. Show details.
  • PCI DSS Compliance Test
    3 of 10 supported cipher suites are not compliant with PCI DSS. The server supports PCI DSS compliant protocols (TLSv1.1 and TLSv1.2) as well as non-compliant protocols (TLSv1.0). No additional PCI DSS compliance issues were identified. Show details.
  • NIST and HIPAA Compliance Test
    3 of 10 supported cipher suites are not compliant with NIST and HIPAA. The server supports only NIST and HIPAA compliant protocols: TLSv1.0, TLSv1.1 and TLSv1.2. There are 3 more issue(s) which make the server non-compliant with NIST and HIPAA: server does not support OCSP stapling, no support for common curves, EC point format extension. Show details.
  • Industry Best Practices Test
    3 issue(s) related to industry best practices were identified: server does not support TLS 1.3, server does not have cipher preference, server does not provide HSTS. Show details.
Please wait. Data is loading...
Please wait. Data is loading...
Share this report: