🥒 CCC.ObjStor Test: ccc-test-container-20260408t173437z

Test Parameters

PortNumber443
HostNamestgcfi20260408t173437z.blob.core.windows.net
Protocolhttps
ServiceTypeobject-storage
ProviderServiceTypeMicrosoft.Storage/storageAccounts
CatalogTypesCCC.ObjStor
TagFilter@object-storage, @PerPort, @tls, ~@ftp, ~@telnet, ~@ssh, ~@smtp, ~@dns, ~@ldap
UID/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/cfi_test_20260408t173437z/providers/Microsoft.Storage/storageAccounts/stgcfi20260408t173437z
ResourceNameccc-test-container-20260408t173437z
ReportFileccc-test-container-20260408t173437z-port
ReportTitlestgcfi20260408t173437z.blob.core.windows.net:443
Instance
{
  "ID": "main-azure",
  "Properties": {
    "Provider": "azure",
    "Region": "eastus",
    "AzureResourceGroup": "cfi_test_20260408t173437z",
    "AzureSubscriptionID": "c1cedd8e-bf91-4d7d-a4cc-45700402a2a1",
    "GcpProjectId": ""
  },
  "Services": [
    {
      "Type": "object-storage",
      "Properties": {
        "azure-storage-account": "stgcfi20260408t173437z",
        "default-container": "ccc-test-container-20260408t173437z",
        "object-storage-retention-period-days": 2
      }
    },
    {
      "Type": "logging",
      "Properties": {}
    }
  ],
  "Rules": {
    "permitted-destination-storage-accounts": [],
    "permitted-regions": [
      "eastus"
    ],
    "replication-locations": [
      "eastus",
      "westus"
    ]
  }
}
AzureResourceGroupcfi_test_20260408t173437z
AzureStorageAccountstgcfi20260408t173437z
AzureSubscriptionIDc1cedd8e-bf91-4d7d-a4cc-45700402a2a1
DefaultContainerccc-test-container-20260408t173437z
ObjectStorageRetentionPeriodDays2
PermittedDestinationStorageAccounts
[]
PermittedRegions
[
  "eastus"
]
Providerazure
Regioneastus
ReplicationLocations
[
  "eastus",
  "westus"
]
ResourceGroupcfi_test_20260408t173437z
SubscriptionIdc1cedd8e-bf91-4d7d-a4cc-45700402a2a1

Summary

Generated: 2026-04-08 18:47:29

Total Run Time: 1m5s

Features: 4

Scenarios: 11 (✅ 8 | ❌ 3)

Steps: 45 (✅ 39 | ❌ 3 | ⏭️ 3 | ❓ 0)

Feature: CCC.Core.CN01.AR01
Scenario: Service accepts TLS 1.3 encrypted traffic @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"47µs
Given an openssl s_client request using "tls1_3" to "{portNumber}" on "{hostName}" protocol "{protocol}"654µs
And I refer to "{result}" as "connection"30µs
And "{connection}" state is open29µs
And "{connection.State}" is "open"29µs
And I close connection "{connection}"35µs
Then "{connection}" state is closed29µs
Scenario: Service rejects TLS 1.2 traffic @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"39µs
Given an openssl s_client request using "tls1_2" to "{portNumber}" on "{hostName}" protocol "{protocol}"1ms
And I refer to "{result}" as "connection"27µs
And we wait for a period of "40" ms41ms
Then "{connection.State}" is "closed"29µs
Scenario: Service rejects TLS 1.1 traffic @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"69µs
Given an openssl s_client request using "tls1_1" to "{portNumber}" on "{hostName}" protocol "{protocol}"850µs
And I refer to "{result}" as "connection"404µs
And we wait for a period of "40" ms40ms
Then "{connection.State}" is "closed"78µs
Scenario: Service rejects TLS 1.0 traffic @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"37µs
Given an openssl s_client request using "tls1" to "{portNumber}" on "{hostName}" protocol "{protocol}"582µs
And I refer to "{result}" as "connection"26µs
And we wait for a period of "40" ms40ms
Then "{connection.State}" is "closed"36µs
Scenario: Verify SSL/TLS protocol support @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"43µs
Given "report" contains details of SSL Support type "protocols" for "{hostName}" on port "{portNumber}"6s
Then "{report}" is an array of objects which doesn't contain any of586µs
idfinding
SSLv2offered
SSLv3offered
TLS1offered
TLS1_1offered
TLS1_2offered
unwanted row found in array: map[finding:offered id:TLS1_2]
And "{report}" is an array of objects with at least the following contents13µs
idfinding
TLS1_3offered with final
📎 Attachments:
testssl_protocols_stgcfi20260408t173437z.blob.core.windows.net_443.json
View JSON (3708 bytes)
[
         {
              "id"           : "engine_problem",
              "ip"           : "/",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "No engine or GOST support via engine with your /opt/testssl/bin/openssl.Linux.x86_64"
          }
,         {
              "id"           : "service",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "HTTP"
          }
,         {
              "id"           : "pre_128cipher",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "No 128 cipher limit bug"
          }
,         {
              "id"           : "SSLv2",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "not offered"
          }
,         {
              "id"           : "SSLv3",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "not offered"
          }
,         {
              "id"           : "TLS1",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "offered (deprecated)"
          }
,         {
              "id"           : "TLS1_1",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "offered (deprecated)"
          }
,         {
              "id"           : "TLS1_2",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "offered"
          }
,         {
              "id"           : "TLS1_3",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "offered with final"
          }
,         {
              "id"           : "QUIC",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "not tested due to lack of local OpenSSL support"
          }
,         {
              "id"           : "NPN",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not offered"
          }
,         {
              "id"           : "ALPN",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not offered"
          }
,         {
              "id"           : "scanTime",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "6"
          }
]
Scenario: Verify no known SSL/TLS vulnerabilities @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"35µs
Given "report" contains details of SSL Support type "vulnerable" for "{hostName}" on port "{portNumber}"27s
Then "{report}" is an array of objects with at least the following contents1ms
idseverity
heartbleedOK
CCSOK
ticketbleedOK
ROBOTOK
secure_renegoOK
📎 Attachments:
testssl_vulnerable_stgcfi20260408t173437z.blob.core.windows.net_443.json
View JSON (9968 bytes)
[
         {
              "id"           : "engine_problem",
              "ip"           : "/",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "No engine or GOST support via engine with your /opt/testssl/bin/openssl.Linux.x86_64"
          }
,         {
              "id"           : "service",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "HTTP"
          }
,         {
              "id"           : "pre_128cipher",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "No 128 cipher limit bug"
          }
,         {
              "id"           : "heartbleed",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2014-0160",
              "cwe"          : "CWE-119",
              "finding"      : "not vulnerable, no heartbeat extension"
          }
,         {
              "id"           : "CCS",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2014-0224",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "ticketbleed",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2016-9244",
              "cwe"          : "CWE-200",
              "finding"      : "no session ticket extension"
          }
,         {
              "id"           : "opossum",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2025-49812",
              "cwe"          : "CWE-287",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "ROBOT",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168",
              "cwe"          : "CWE-203",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "secure_renego",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "cwe"          : "CWE-310",
              "finding"      : "supported"
          }
,         {
              "id"           : "secure_client_renego",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2011-1473",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "CRIME_TLS",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2012-4929",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "BREACH",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2013-3587",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable, no gzip/deflate/compress/br HTTP compression  - only supplied '/' tested"
          }
,         {
              "id"           : "POODLE_SSL",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2014-3566",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "fallback_SCSV",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "MEDIUM",
              "finding"      : "NOT supported"
          }
,         {
              "id"           : "SWEET32",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "LOW",
              "cve"          : "CVE-2016-2183 CVE-2016-6329",
              "cwe"          : "CWE-327",
              "finding"      : "uses 64 bit block ciphers"
          }
,         {
              "id"           : "FREAK",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2015-0204",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "DROWN",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2016-0800 CVE-2016-0703",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable on this host and port"
          }
,         {
              "id"           : "DROWN_hint",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "cve"          : "CVE-2016-0800 CVE-2016-0703",
              "cwe"          : "CWE-310",
              "finding"      : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=39D98DC5FA331E0CEED7EC08F75ED971DA0DCB9E07FA3705E8BE8130BC7DFA0D"
          }
,         {
              "id"           : "LOGJAM",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2015-4000",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable, no DH EXPORT ciphers,"
          }
,         {
              "id"           : "LOGJAM-common_primes",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2015-4000",
              "cwe"          : "CWE-310",
              "finding"      : "no DH key with <= TLS 1.2"
          }
,         {
              "id"           : "BEAST_CBC_TLS1",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "MEDIUM",
              "cve"          : "CVE-2011-3389",
              "cwe"          : "CWE-20",
              "finding"      : "ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA AES256-SHA AES128-SHA DES-CBC3-SHA"
          }
,         {
              "id"           : "BEAST",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "LOW",
              "cve"          : "CVE-2011-3389",
              "cwe"          : "CWE-20",
              "finding"      : "VULNERABLE -- but also supports higher protocols  TLSv1.1 TLSv1.2 (likely mitigated)"
          }
,         {
              "id"           : "LUCKY13",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "LOW",
              "cve"          : "CVE-2013-0169",
              "cwe"          : "CWE-310",
              "finding"      : "potentially vulnerable, uses TLS CBC ciphers"
          }
,         {
              "id"           : "winshock",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2014-6321",
              "cwe"          : "CWE-94",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "RC4",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2013-2566 CVE-2015-2808",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "scanTime",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "27"
          }
]
Scenario: Verify TLS 1.3 only certificate validity @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"34µs
Given "report" contains details of SSL Support type "server-defaults" for "{hostName}" on port "{portNumber}"13s
Then "{report}" is an array of objects with at least the following contents681µs
idseverity
cert_expirationStatusOK
cert_chain_of_trustOK
📎 Attachments:
testssl_server-defaults_stgcfi20260408t173437z.blob.core.windows.net_443.json
View JSON (24801 bytes)
[
         {
              "id"           : "engine_problem",
              "ip"           : "/",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "No engine or GOST support via engine with your /opt/testssl/bin/openssl.Linux.x86_64"
          }
,         {
              "id"           : "service",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "HTTP"
          }
,         {
              "id"           : "pre_128cipher",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "No 128 cipher limit bug"
          }
,         {
              "id"           : "TLS_extensions",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "'status request/#5' 'extended master secret/#23' 'supported versions/#43' 'key share/#51' 'renegotiation info/#65281'"
          }
,         {
              "id"           : "TLS_misses_extension_23",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Extended master secret extension detected"
          }
,         {
              "id"           : "TLS_session_ticket",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no -- no lifetime advertised"
          }
,         {
              "id"           : "SSL_sessionID_support",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "yes"
          }
,         {
              "id"           : "sessionresumption_ticket",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not supported"
          }
,         {
              "id"           : "sessionresumption_ID",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not supported"
          }
,         {
              "id"           : "early_data",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "No early data"
          }
,         {
              "id"           : "TLS_timestamp",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "off by 0 seconds from your localtime"
          }
,         {
              "id"           : "certificate_compression",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "none"
          }
,         {
              "id"           : "clientAuth",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "none"
          }
,         {
              "id"           : "cert_numbers",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "1"
          }
,         {
              "id"           : "cert_signatureAlgorithm",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "SHA384 with RSA"
          }
,         {
              "id"           : "cert_keySize",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "RSA 2048 bits (exponent is 65537)"
          }
,         {
              "id"           : "cert_keyUsage",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Digital Signature, Key Encipherment"
          }
,         {
              "id"           : "cert_extKeyUsage",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "TLS Web Client Authentication, TLS Web Server Authentication"
          }
,         {
              "id"           : "cert_serialNumber",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "33035471FED9DB35AAF1B9207E0000035471FE"
          }
,         {
              "id"           : "cert_serialNumberLen",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "19"
          }
,         {
              "id"           : "cert_fingerprintSHA1",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "C89D4A12A6EEDADAC7F1CA53E202ED6B9D96AACC"
          }
,         {
              "id"           : "cert_fingerprintSHA256",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "39D98DC5FA331E0CEED7EC08F75ED971DA0DCB9E07FA3705E8BE8130BC7DFA0D"
          }
,         {
              "id"           : "cert",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "cert_commonName",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "*.blob.core.windows.net"
          }
,         {
              "id"           : "cert_commonName_wo_SNI",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.blob.core.windows.net"
          }
,         {
              "id"           : "cert_subjectAltName",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.blob.core.windows.net *.blz25prdstr03c.store.core.windows.net *.blob.storage.azure.net *.z1.blob.storage.azure.net *.z2.blob.storage.azure.net *.z3.blob.storage.azure.net *.z4.blob.storage.azure.net *.z5.blob.storage.azure.net *.z6.blob.storage.azure.net *.z7.blob.storage.azure.net *.z8.blob.storage.azure.net *.z9.blob.storage.azure.net *.z10.blob.storage.azure.net *.z11.blob.storage.azure.net *.z12.blob.storage.azure.net *.z13.blob.storage.azure.net *.z14.blob.storage.azure.net *.z15.blob.storage.azure.net *.z16.blob.storage.azure.net *.z17.blob.storage.azure.net *.z18.blob.storage.azure.net *.z19.blob.storage.azure.net *.z20.blob.storage.azure.net *.z21.blob.storage.azure.net *.z22.blob.storage.azure.net *.z23.blob.storage.azure.net *.z24.blob.storage.azure.net *.z25.blob.storage.azure.net *.z26.blob.storage.azure.net *.z27.blob.storage.azure.net *.z28.blob.storage.azure.net *.z29.blob.storage.azure.net *.z30.blob.storage.azure.net *.z31.blob.storage.azure.net *.z32.blob.storage.azure.net *.z33.blob.storage.azure.net *.z34.blob.storage.azure.net *.z35.blob.storage.azure.net *.z36.blob.storage.azure.net *.z37.blob.storage.azure.net *.z38.blob.storage.azure.net *.z39.blob.storage.azure.net *.z40.blob.storage.azure.net *.z41.blob.storage.azure.net *.z42.blob.storage.azure.net *.z43.blob.storage.azure.net *.z44.blob.storage.azure.net *.z45.blob.storage.azure.net *.z46.blob.storage.azure.net *.z47.blob.storage.azure.net *.z48.blob.storage.azure.net *.z49.blob.storage.azure.net *.z50.blob.storage.azure.net"
          }
,         {
              "id"           : "cert_trust",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "Ok via SAN wildcard and CN wildcard (same w/o SNI)"
          }
,         {
              "id"           : "cert_trust_wildcard",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "trust is via wildcard"
          }
,         {
              "id"           : "cert_chain_of_trust",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "passed."
          }
,         {
              "id"           : "cert_certificatePolicies_EV",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_expirationStatus",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "104 >= 60 days"
          }
,         {
              "id"           : "cert_notBefore",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2026-01-23 13:05"
          }
,         {
              "id"           : "cert_notAfter",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2026-07-22 13:05"
          }
,         {
              "id"           : "cert_extlifeSpan",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "certificate has no extended life time according to browser forum"
          }
,         {
              "id"           : "cert_eTLS",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not present"
          }
,         {
              "id"           : "cert_crlDistributionPoints",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl"
          }
,         {
              "id"           : "cert_ocspURL",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://oneocsp.microsoft.com/ocsp"
          }
,         {
              "id"           : "OCSP_stapling",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "offered"
          }
,         {
              "id"           : "cert_ocspRevoked",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "not revoked"
          }
,         {
              "id"           : "cert_mustStapleExtension",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "--"
          }
,         {
              "id"           : "DNS_CAArecord",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "contactemail=caarecordaware@microsoft.com"
          }
,         {
              "id"           : "certificate_transparency",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "yes (certificate extension)"
          }
,         {
              "id"           : "certs_countServer",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2"
          }
,         {
              "id"           : "certs_list_ordering_problem",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_caIssuers",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Microsoft Azure RSA TLS Issuing CA 04 (Microsoft Corporation from US)"
          }
,         {
              "id"           : "intermediate_cert <#1>",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#1>",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "33F9731BE910A66DC6ACD07D9D9CA212EE8D0A9A5C78C8BF3E89BB74DF8FB936"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#1>",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2023-06-08 00:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#1>",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2026-08-25 23:59"
          }
,         {
              "id"           : "intermediate_cert_expiration <#1>",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#1>",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Microsoft Azure RSA TLS Issuing CA 04 <-- DigiCert Global Root G2"
          }
,         {
              "id"           : "intermediate_cert_badOCSP",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "intermediate certificate(s) is/are ok"
          }
,         {
              "id"           : "scanTime",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "13"
          }
]
Feature: CCC.Core.CN01.AR03
Scenario: HTTP redirects to HTTPS @tlp-green @tlp-amber @tlp-red @CCC.Core @CCC.Core.CN01 @PerPort @Behavioural @http @tls @object-storage
Given a client connects to "{hostName}" with protocol "http" on port "80"898µs
And I refer to "{result}" as "connection"32µs
And "{connection}" is not an error30µs
And I transmit "GET / HTTP/1.1\r\nHost: {hostName}\r\n\r\n" to "{connection}"501ms
And I attach "{connection}" to the test output as "HTTP response"100µs
And "{connection.Output}" contains "301"38µs
expected {connection.Output} to contain '301', but got 'HTTP/1.1 400 The account being accessed does not support http. Content-Length: 287 Content-Type: application/xml Server: Microsoft-HTTPAPI/2.0 x-ms-request-id: c637e05c-901e-0000-1288-c790fb000000 Date: Wed, 08 Apr 2026 18:48:15 GMT AccountRequiresHttpsThe account being accessed does not support http. RequestId:c637e05c-901e-0000-1288-c790fb000000 Time:2026-04-08T18:48:15.6423229Zstgcfi20260408t173437z'
And I call "{connection}" with "Close"13µs
Then "{connection.State}" is "closed"32µs
📎 Attachments:
HTTP response
View JSON (677 bytes)
{"State":"open","Input":{},"Output":"HTTP/1.1 400 The account being accessed does not support http.\r\nContent-Length: 287\r\nContent-Type: application/xml\r\nServer: Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: c637e05c-901e-0000-1288-c790fb000000\r\nDate: Wed, 08 Apr 2026 18:48:15 GMT\r\n\r\n\u003c?xml version=\"1.0\" encoding=\"utf-8\"?\u003e\u003cError\u003e\u003cCode\u003eAccountRequiresHttps\u003c/Code\u003e\u003cMessage\u003eThe account being accessed does not support http.\nRequestId:c637e05c-901e-0000-1288-c790fb000000\nTime:2026-04-08T18:48:15.6423229Z\u003c/Message\u003e\u003cAccountName\u003estgcfi20260408t173437z\u003c/AccountName\u003e\u003c/Error\u003e"}
Scenario: Only secure protocols are exposed @tlp-green @tlp-amber @tlp-red @CCC.Core @CCC.Core.CN01 @PerPort @Behavioural @tls @object-storage
Given "report" contains details of SSL Support type "protocols" for "{hostName}" on port "{portNumber}"6s
Then "{report}" is an array of objects with at least the following contents390µs
idseverity
TLS1_2OK
TLS1_3OK
📎 Attachments:
testssl_protocols_stgcfi20260408t173437z.blob.core.windows.net_443.json
View JSON (3708 bytes)
[
         {
              "id"           : "engine_problem",
              "ip"           : "/",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "No engine or GOST support via engine with your /opt/testssl/bin/openssl.Linux.x86_64"
          }
,         {
              "id"           : "service",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "HTTP"
          }
,         {
              "id"           : "pre_128cipher",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "No 128 cipher limit bug"
          }
,         {
              "id"           : "SSLv2",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "not offered"
          }
,         {
              "id"           : "SSLv3",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "not offered"
          }
,         {
              "id"           : "TLS1",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "offered (deprecated)"
          }
,         {
              "id"           : "TLS1_1",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "offered (deprecated)"
          }
,         {
              "id"           : "TLS1_2",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "offered"
          }
,         {
              "id"           : "TLS1_3",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "offered with final"
          }
,         {
              "id"           : "QUIC",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "not tested due to lack of local OpenSSL support"
          }
,         {
              "id"           : "NPN",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not offered"
          }
,         {
              "id"           : "ALPN",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not offered"
          }
,         {
              "id"           : "scanTime",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "5"
          }
]
Feature: CCC.Core.CN01.AR07
Scenario: Verify HTTPS uses IANA-assigned port 443 @tlp-clear @tlp-green @tlp-amber @tlp-red @CCC.Core @CCC.Core.CN01 @Behavioural @PerPort @http @tls @object-storage
Then "{portNumber}" is "443"22µs
Feature: CCC.Core.CN01.AR08
Scenario: Verify mTLS requires client certificate authentication @tls @tlp-amber @tlp-red @CCC.Core @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given "report" contains details of SSL Support type "server-defaults" for "{hostName}" on port "{portNumber}"13s
Then "{report}" is an array of objects with at least the following contents483µs
idfinding
clientAuthrequired
expected row not found: map[finding:required id:clientAuth]
📎 Attachments:
testssl_server-defaults_stgcfi20260408t173437z.blob.core.windows.net_443.json
View JSON (24801 bytes)
[
         {
              "id"           : "engine_problem",
              "ip"           : "/",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "No engine or GOST support via engine with your /opt/testssl/bin/openssl.Linux.x86_64"
          }
,         {
              "id"           : "service",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "HTTP"
          }
,         {
              "id"           : "pre_128cipher",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "No 128 cipher limit bug"
          }
,         {
              "id"           : "TLS_extensions",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "'status request/#5' 'extended master secret/#23' 'supported versions/#43' 'key share/#51' 'renegotiation info/#65281'"
          }
,         {
              "id"           : "TLS_misses_extension_23",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Extended master secret extension detected"
          }
,         {
              "id"           : "TLS_session_ticket",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no -- no lifetime advertised"
          }
,         {
              "id"           : "SSL_sessionID_support",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "yes"
          }
,         {
              "id"           : "sessionresumption_ticket",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not supported"
          }
,         {
              "id"           : "sessionresumption_ID",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not supported"
          }
,         {
              "id"           : "early_data",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "No early data"
          }
,         {
              "id"           : "TLS_timestamp",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "off by 0 seconds from your localtime"
          }
,         {
              "id"           : "certificate_compression",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "none"
          }
,         {
              "id"           : "clientAuth",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "none"
          }
,         {
              "id"           : "cert_numbers",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "1"
          }
,         {
              "id"           : "cert_signatureAlgorithm",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "SHA384 with RSA"
          }
,         {
              "id"           : "cert_keySize",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "RSA 2048 bits (exponent is 65537)"
          }
,         {
              "id"           : "cert_keyUsage",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Digital Signature, Key Encipherment"
          }
,         {
              "id"           : "cert_extKeyUsage",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "TLS Web Client Authentication, TLS Web Server Authentication"
          }
,         {
              "id"           : "cert_serialNumber",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "33035471FED9DB35AAF1B9207E0000035471FE"
          }
,         {
              "id"           : "cert_serialNumberLen",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "19"
          }
,         {
              "id"           : "cert_fingerprintSHA1",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "C89D4A12A6EEDADAC7F1CA53E202ED6B9D96AACC"
          }
,         {
              "id"           : "cert_fingerprintSHA256",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "39D98DC5FA331E0CEED7EC08F75ED971DA0DCB9E07FA3705E8BE8130BC7DFA0D"
          }
,         {
              "id"           : "cert",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "cert_commonName",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "*.blob.core.windows.net"
          }
,         {
              "id"           : "cert_commonName_wo_SNI",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.blob.core.windows.net"
          }
,         {
              "id"           : "cert_subjectAltName",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.blob.core.windows.net *.blz25prdstr03c.store.core.windows.net *.blob.storage.azure.net *.z1.blob.storage.azure.net *.z2.blob.storage.azure.net *.z3.blob.storage.azure.net *.z4.blob.storage.azure.net *.z5.blob.storage.azure.net *.z6.blob.storage.azure.net *.z7.blob.storage.azure.net *.z8.blob.storage.azure.net *.z9.blob.storage.azure.net *.z10.blob.storage.azure.net *.z11.blob.storage.azure.net *.z12.blob.storage.azure.net *.z13.blob.storage.azure.net *.z14.blob.storage.azure.net *.z15.blob.storage.azure.net *.z16.blob.storage.azure.net *.z17.blob.storage.azure.net *.z18.blob.storage.azure.net *.z19.blob.storage.azure.net *.z20.blob.storage.azure.net *.z21.blob.storage.azure.net *.z22.blob.storage.azure.net *.z23.blob.storage.azure.net *.z24.blob.storage.azure.net *.z25.blob.storage.azure.net *.z26.blob.storage.azure.net *.z27.blob.storage.azure.net *.z28.blob.storage.azure.net *.z29.blob.storage.azure.net *.z30.blob.storage.azure.net *.z31.blob.storage.azure.net *.z32.blob.storage.azure.net *.z33.blob.storage.azure.net *.z34.blob.storage.azure.net *.z35.blob.storage.azure.net *.z36.blob.storage.azure.net *.z37.blob.storage.azure.net *.z38.blob.storage.azure.net *.z39.blob.storage.azure.net *.z40.blob.storage.azure.net *.z41.blob.storage.azure.net *.z42.blob.storage.azure.net *.z43.blob.storage.azure.net *.z44.blob.storage.azure.net *.z45.blob.storage.azure.net *.z46.blob.storage.azure.net *.z47.blob.storage.azure.net *.z48.blob.storage.azure.net *.z49.blob.storage.azure.net *.z50.blob.storage.azure.net"
          }
,         {
              "id"           : "cert_trust",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "Ok via SAN wildcard and CN wildcard (same w/o SNI)"
          }
,         {
              "id"           : "cert_trust_wildcard",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "trust is via wildcard"
          }
,         {
              "id"           : "cert_chain_of_trust",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "passed."
          }
,         {
              "id"           : "cert_certificatePolicies_EV",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_expirationStatus",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "104 >= 60 days"
          }
,         {
              "id"           : "cert_notBefore",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2026-01-23 13:05"
          }
,         {
              "id"           : "cert_notAfter",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2026-07-22 13:05"
          }
,         {
              "id"           : "cert_extlifeSpan",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "certificate has no extended life time according to browser forum"
          }
,         {
              "id"           : "cert_eTLS",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not present"
          }
,         {
              "id"           : "cert_crlDistributionPoints",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004.crl"
          }
,         {
              "id"           : "cert_ocspURL",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://oneocsp.microsoft.com/ocsp"
          }
,         {
              "id"           : "OCSP_stapling",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "offered"
          }
,         {
              "id"           : "cert_ocspRevoked",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "not revoked"
          }
,         {
              "id"           : "cert_mustStapleExtension",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "--"
          }
,         {
              "id"           : "DNS_CAArecord",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "contactemail=caarecordaware@microsoft.com"
          }
,         {
              "id"           : "certificate_transparency",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "yes (certificate extension)"
          }
,         {
              "id"           : "certs_countServer",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2"
          }
,         {
              "id"           : "certs_list_ordering_problem",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_caIssuers",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Microsoft Azure RSA TLS Issuing CA 04 (Microsoft Corporation from US)"
          }
,         {
              "id"           : "intermediate_cert <#1>",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\nMIIFrDCCBJSgAwIBAgIQCfluwpVVXyR0nq8eXc7UnTANBgkqhkiG9w0BAQwFADBhMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBHMjAeFw0yMzA2MDgwMDAwMDBaFw0yNjA4MjUyMzU5NTlaMF0xCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xLjAsBgNVBAMTJU1pY3Jvc29mdCBBenVyZSBSU0EgVExTIElzc3VpbmcgQ0EgMDQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDBeUy13eRZ/QC5bN7/IOGxodny7Xm2BFc88d3cca3yHyyVx1Y60+afY6DAo/2Ls1uzAfbDfMzAVWJazPH4tckaItDv//htEbbNJnAGvZPB4VqNviwDEmlAWT/MTAmzXfTgWXuUNgRlzZbjoFaPm+t6iJ6HdvDpWQAJbsBUZCgat257tM28JnAHUTWdiDBn+2z6EGh2DA6BCx04zHDKVSegLY8+5P80Lqze0d6i3T2JJ7rfxCmxUXfCGOv9iQIUZfhv4vCb8hsm/JdNUMiomJhSPa0bi3rda/swuJHCH//dwz2AGzZRRGdj7Kna4t6ToxK17lAF3Q6Qp368C9cE6JLMj+3UbY3umWCPRA5/Dms4/wl3GvDEw7HpyKsvRNPpjDZyiFzZGC2HZmGMsrZMT3hxmyQwmz1O3eGYdO5EIq1SW/vT1yShZTSusqmICQo5gWWRZTwCENekSbVX9qRr77o0pjKtuBMZTGQTixwpT/rgUl7Mr4M2nqK55Kovy/kUN1znfPdW/Fj9iCuvPKwKFdyt2RVgxJDvgIF/bNoRkRxhwVB6qRgs4EiTrNbRoZAHEFF5wRBf9gWn9HeoI66VtdMZvJRH+0/FDWB4/zwxS16nnADJaVPXh6JHJFYs9p0wZmvct3GNdWrOLRAG2yzbfFZS8fJcX1PYxXXo4By16yGWhQIDAQABo4IBYjCCAV4wEgYDVR0TAQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQUO3DRU+l2JZ1gqMpmD8abrm9UFmowHwYDVR0jBBgwFoAUTiJUIBiV5uNu5g/6+rkS7QYXjzkwDgYDVR0PAQH/BAQDAgGGMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB2BggrBgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBABggrBgEFBQcwAoY0aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsUm9vdEcyLmNydDBCBgNVHR8EOzA5MDegNaAzhjFodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxSb290RzIuY3JsMB0GA1UdIAQWMBQwCAYGZ4EMAQIBMAgGBmeBDAECAjANBgkqhkiG9w0BAQwFAAOCAQEAo9sJvBNLQSJ1e7VaG3cSZHBz6zjS70A1gVO1pqsmX34BWDPz1TAlOyJiLlA+eUF4B2OWHd3F//dJJ/3TaCFunjBhZudv3busl7flz42K/BG/eOdlg0kiUf07PCYY5/FKYTIch51j1moFlBqbglwkdNIVae2tOu0OdX2JiA+bprYcGxa7eayLetvPiA77ynTcUNMKOqYB41FZHOXe5IXDI5t2RsDM9dMEZv4+cOb9G9qXcgDar1AzPHEt/39335zCHofQ0QuItCDCDzahWZci9Nn9hb/SvAtPWHZLkLBG6I0iwGxvMwcTTc9Jnb4FlysrmQlwKsS2MphOoI23Qq3cSA==\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#1>",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "33F9731BE910A66DC6ACD07D9D9CA212EE8D0A9A5C78C8BF3E89BB74DF8FB936"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#1>",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2023-06-08 00:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#1>",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2026-08-25 23:59"
          }
,         {
              "id"           : "intermediate_cert_expiration <#1>",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#1>",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Microsoft Azure RSA TLS Issuing CA 04 <-- DigiCert Global Root G2"
          }
,         {
              "id"           : "intermediate_cert_badOCSP",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "intermediate certificate(s) is/are ok"
          }
,         {
              "id"           : "scanTime",
              "ip"           : "stgcfi20260408t173437z.blob.core.windows.net/20.209.226.65",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "13"
          }
]