🥒 CCC.ObjStor Test: ccc-test-bucket-20260526t102300z

Test Parameters

PortNumber443
HostNameccc-test-bucket-20260526t102300z.storage.googleapis.com
Protocolhttps
ServiceTypeobject-storage
ProviderServiceTypestorage.googleapis.com/Bucket
CatalogTypesCCC.ObjStor
TagFilter@object-storage, @PerPort, @tls, ~@ftp, ~@telnet, ~@ssh, ~@smtp, ~@dns, ~@ldap, ~@NEGATIVE, ~@OPT_IN
UIDprojects/nodal-time-474015-p5/buckets/ccc-test-bucket-20260526t102300z
ResourceNameccc-test-bucket-20260526t102300z
ReportFileccc-test-bucket-20260526t102300z-port
ReportTitleccc-test-bucket-20260526t102300z.storage.googleapis.com:443
Instance
{
  "ID": "main-gcp",
  "Properties": {
    "Provider": "gcp",
    "Region": "us-central1",
    "AzureResourceGroup": "",
    "AzureSubscriptionID": "",
    "GcpProjectId": "nodal-time-474015-p5"
  },
  "Services": [
    {
      "Type": "object-storage",
      "Properties": {
        "gcp-bucket-name": "ccc-test-bucket-20260526t102300z",
        "object-storage-retention-period-seconds": 172800
      }
    },
    {
      "Type": "logging",
      "Properties": {
        "gcp-log-bucket-name": "cfi-test-log-bucket"
      }
    }
  ],
  "Rules": {
    "permitted-project-ids": "",
    "permitted-regions": [
      "us-central1"
    ]
  }
}
GcpBucketNameccc-test-bucket-20260526t102300z
GcpLogBucketNamecfi-test-log-bucket
GcpProjectIdnodal-time-474015-p5
ObjectStorageRetentionPeriodSeconds172800
PermittedRegions
[
  "us-central1"
]
Providergcp
Regionus-central1

Summary

Generated: 2026-05-26 10:25:47

Total Run Time: 1m3s

Features: 4

Scenarios: 11 (✅ 7 | ❌ 4)

Steps: 45 (✅ 38 | ❌ 4 | ⏭️ 3 | ❓ 0)

Feature: CCC.Core.CN01.AR01
Scenario: Service accepts TLS 1.3 encrypted traffic @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"39µs
Given an openssl s_client request using "tls1_3" to "{portNumber}" on "{hostName}" protocol "{protocol}"450µs
And I refer to "{result}" as "connection"23µs
And "{connection}" state is open30µs
And "{connection.State}" is "open"25µs
And I close connection "{connection}"33µs
Then "{connection}" state is closed40µs
Scenario: Service rejects TLS 1.2 traffic @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"33µs
Given an openssl s_client request using "tls1_2" to "{portNumber}" on "{hostName}" protocol "{protocol}"390µs
And I refer to "{result}" as "connection"24µs
And we wait for a period of "40" ms41ms
Then "{connection.State}" is "closed"29µs
Scenario: Service rejects TLS 1.1 traffic @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"33µs
Given an openssl s_client request using "tls1_1" to "{portNumber}" on "{hostName}" protocol "{protocol}"743µs
And I refer to "{result}" as "connection"22µs
And we wait for a period of "40" ms41ms
Then "{connection.State}" is "closed"30µs
Scenario: Service rejects TLS 1.0 traffic @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"38µs
Given an openssl s_client request using "tls1" to "{portNumber}" on "{hostName}" protocol "{protocol}"450µs
And I refer to "{result}" as "connection"26µs
And we wait for a period of "40" ms41ms
Then "{connection.State}" is "closed"30µs
Scenario: Verify SSL/TLS protocol support @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"34µs
Given "report" contains details of SSL Support type "protocols" for "{hostName}" on port "{portNumber}"5s
Then "{report}" is an array of objects which doesn't contain any of487µs
idfinding
SSLv2offered
SSLv3offered
TLS1offered
TLS1_1offered
TLS1_2offered
unwanted row found in array: map[finding:offered id:TLS1_2]
And "{report}" is an array of objects with at least the following contents16µs
idfinding
TLS1_3offered with final
📎 Attachments:
testssl_protocols_ccc-test-bucket-20260526t102300z.storage.googleapis.com_443.json
View JSON (4202 bytes)
[
         {
              "id"           : "engine_problem",
              "ip"           : "/",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "No engine or GOST support via engine with your /opt/testssl/bin/openssl.Linux.x86_64"
          }
,         {
              "id"           : "service",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.125.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "HTTP"
          }
,         {
              "id"           : "pre_128cipher",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.125.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "No 128 cipher limit bug"
          }
,         {
              "id"           : "SSLv2",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.125.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "not offered"
          }
,         {
              "id"           : "SSLv3",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.125.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "not offered"
          }
,         {
              "id"           : "TLS1",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.125.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "offered (deprecated)"
          }
,         {
              "id"           : "TLS1_1",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.125.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "offered (deprecated)"
          }
,         {
              "id"           : "TLS1_2",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.125.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "offered"
          }
,         {
              "id"           : "TLS1_3",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.125.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "offered with final"
          }
,         {
              "id"           : "QUIC",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.125.207",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "not tested due to lack of local OpenSSL support"
          }
,         {
              "id"           : "NPN",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.125.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "offered with grpc-exp, h2, http/1.1, http/1.0 (advertised)"
          }
,         {
              "id"           : "ALPN_HTTP2",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.125.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "h2"
          }
,         {
              "id"           : "ALPN",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.125.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http/1.1grpc-exp"
          }
,         {
              "id"           : "scanTime",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.125.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "5"
          }
]
Scenario: Verify no known SSL/TLS vulnerabilities @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"34µs
Given "report" contains details of SSL Support type "vulnerable" for "{hostName}" on port "{portNumber}"24s
Then "{report}" is an array of objects with at least the following contents373µs
idseverity
heartbleedOK
CCSOK
ticketbleedOK
ROBOTOK
secure_renegoOK
📎 Attachments:
testssl_vulnerable_ccc-test-bucket-20260526t102300z.storage.googleapis.com_443.json
View JSON (10293 bytes)
[
         {
              "id"           : "engine_problem",
              "ip"           : "/",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "No engine or GOST support via engine with your /opt/testssl/bin/openssl.Linux.x86_64"
          }
,         {
              "id"           : "service",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/74.125.201.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "HTTP"
          }
,         {
              "id"           : "pre_128cipher",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/74.125.201.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "No 128 cipher limit bug"
          }
,         {
              "id"           : "heartbleed",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/74.125.201.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2014-0160",
              "cwe"          : "CWE-119",
              "finding"      : "not vulnerable, no heartbeat extension"
          }
,         {
              "id"           : "CCS",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/74.125.201.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2014-0224",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "ticketbleed",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/74.125.201.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2016-9244",
              "cwe"          : "CWE-200",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "opossum",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/74.125.201.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2025-49812",
              "cwe"          : "CWE-287",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "ROBOT",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/74.125.201.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168",
              "cwe"          : "CWE-203",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "secure_renego",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/74.125.201.207",
              "port"         : "443",
              "severity"     : "OK",
              "cwe"          : "CWE-310",
              "finding"      : "supported"
          }
,         {
              "id"           : "secure_client_renego",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/74.125.201.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2011-1473",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "CRIME_TLS",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/74.125.201.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2012-4929",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "BREACH",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/74.125.201.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2013-3587",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable, no gzip/deflate/compress/br HTTP compression  - only supplied '/' tested"
          }
,         {
              "id"           : "POODLE_SSL",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/74.125.201.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2014-3566",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "fallback_SCSV",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/74.125.201.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "supported"
          }
,         {
              "id"           : "SWEET32",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/74.125.201.207",
              "port"         : "443",
              "severity"     : "LOW",
              "cve"          : "CVE-2016-2183 CVE-2016-6329",
              "cwe"          : "CWE-327",
              "finding"      : "uses 64 bit block ciphers"
          }
,         {
              "id"           : "FREAK",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/74.125.201.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2015-0204",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "DROWN",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/74.125.201.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2016-0800 CVE-2016-0703",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable on this host and port"
          }
,         {
              "id"           : "DROWN_hint",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/74.125.201.207",
              "port"         : "443",
              "severity"     : "INFO",
              "cve"          : "CVE-2016-0800 CVE-2016-0703",
              "cwe"          : "CWE-310",
              "finding"      : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=20253419F51C08D6B155A6D270DE2DBB46A6EFC85AC64B66C10C91E5E9B4AD2D"
          }
,         {
              "id"           : "LOGJAM",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/74.125.201.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2015-4000",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable, no DH EXPORT ciphers,"
          }
,         {
              "id"           : "LOGJAM-common_primes",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/74.125.201.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2015-4000",
              "cwe"          : "CWE-310",
              "finding"      : "no DH key with <= TLS 1.2"
          }
,         {
              "id"           : "BEAST_CBC_TLS1",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/74.125.201.207",
              "port"         : "443",
              "severity"     : "MEDIUM",
              "cve"          : "CVE-2011-3389",
              "cwe"          : "CWE-20",
              "finding"      : "ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-SHA ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA AES128-SHA AES256-SHA DES-CBC3-SHA"
          }
,         {
              "id"           : "BEAST",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/74.125.201.207",
              "port"         : "443",
              "severity"     : "LOW",
              "cve"          : "CVE-2011-3389",
              "cwe"          : "CWE-20",
              "finding"      : "VULNERABLE -- but also supports higher protocols  TLSv1.1 TLSv1.2 (likely mitigated)"
          }
,         {
              "id"           : "LUCKY13",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/74.125.201.207",
              "port"         : "443",
              "severity"     : "LOW",
              "cve"          : "CVE-2013-0169",
              "cwe"          : "CWE-310",
              "finding"      : "potentially vulnerable, uses TLS CBC ciphers"
          }
,         {
              "id"           : "winshock",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/74.125.201.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2014-6321",
              "cwe"          : "CWE-94",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "RC4",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/74.125.201.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2013-2566 CVE-2015-2808",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "scanTime",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/74.125.201.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "24"
          }
]
Scenario: Verify TLS 1.3 only certificate validity @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"30µs
Given "report" contains details of SSL Support type "server-defaults" for "{hostName}" on port "{portNumber}"14s
Then "{report}" is an array of objects with at least the following contents983µs
idseverity
cert_expirationStatusOK
cert_chain_of_trustOK
expected row not found: map[id:cert_expirationStatus severity:OK]
📎 Attachments:
testssl_server-defaults_ccc-test-bucket-20260526t102300z.storage.googleapis.com_443.json
View JSON (46239 bytes)
[
         {
              "id"           : "engine_problem",
              "ip"           : "/",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "No engine or GOST support via engine with your /opt/testssl/bin/openssl.Linux.x86_64"
          }
,         {
              "id"           : "service",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "HTTP"
          }
,         {
              "id"           : "pre_128cipher",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "No 128 cipher limit bug"
          }
,         {
              "id"           : "TLS_extensions",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "'EC point formats/#11' 'application layer protocol negotiation/#16' 'extended master secret/#23' 'session ticket/#35' 'supported versions/#43' 'key share/#51' 'next protocol/#13172' 'renegotiation info/#65281'"
          }
,         {
              "id"           : "TLS_misses_extension_23",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Extended master secret extension detected"
          }
,         {
              "id"           : "TLS_session_ticket",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "valid for 100800 seconds (>daily)"
          }
,         {
              "id"           : "SSL_sessionID_support",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "yes"
          }
,         {
              "id"           : "sessionresumption_ticket",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "supported"
          }
,         {
              "id"           : "sessionresumption_ID",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not supported"
          }
,         {
              "id"           : "early_data",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "HIGH",
              "finding"      : "supported"
          }
,         {
              "id"           : "TLS_timestamp",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "off by 0 seconds from your localtime"
          }
,         {
              "id"           : "certificate_compression",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "none"
          }
,         {
              "id"           : "clientAuth",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "none"
          }
,         {
              "id"           : "cert_numbers",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2"
          }
,         {
              "id"           : "cert_signatureAlgorithm ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "SHA256 with RSA"
          }
,         {
              "id"           : "cert_keySize ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "RSA 2048 bits (exponent is 65537)"
          }
,         {
              "id"           : "cert_keyUsage ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Digital Signature, Key Encipherment"
          }
,         {
              "id"           : "cert_extKeyUsage ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "TLS Web Server Authentication"
          }
,         {
              "id"           : "cert_serialNumber ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "CC3E88CA7B0A756E120F1554BAFA7E72"
          }
,         {
              "id"           : "cert_serialNumberLen ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "16"
          }
,         {
              "id"           : "cert_fingerprintSHA1 ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "706E256780DB2ABCC5B91EE8FAC62B786F103837"
          }
,         {
              "id"           : "cert_fingerprintSHA256 ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "20253419F51C08D6B155A6D270DE2DBB46A6EFC85AC64B66C10C91E5E9B4AD2D"
          }
,         {
              "id"           : "cert ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "cert_commonName ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "*.storage.googleapis.com"
          }
,         {
              "id"           : "cert_commonName_wo_SNI ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.storage.googleapis.com"
          }
,         {
              "id"           : "cert_subjectAltName ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.storage.googleapis.com *.googleapis.com commondatastorage.googleapis.com *.commondatastorage.googleapis.com storage.googleapis.com storage-p2.googleapis.com *.storage-p2.googleapis.com storage.mtls.googleapis.com *.appspot.com.storage.googleapis.com *.content-storage.googleapis.com *.content-storage-p2.googleapis.com *.content-storage-upload.googleapis.com *.content-storage-download.googleapis.com *.storage-upload.googleapis.com *.storage-download.googleapis.com"
          }
,         {
              "id"           : "cert_trust ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "Ok via SAN wildcard and CN wildcard (same w/o SNI)"
          }
,         {
              "id"           : "cert_trust _wildcard",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "trust is via wildcard"
          }
,         {
              "id"           : "cert_chain_of_trust ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "passed."
          }
,         {
              "id"           : "cert_certificatePolicies_EV ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_expirationStatus ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "65 >= 60 days"
          }
,         {
              "id"           : "cert_notBefore ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2026-05-07 15:52"
          }
,         {
              "id"           : "cert_notAfter ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2026-07-30 15:52"
          }
,         {
              "id"           : "cert_extlifeSpan ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "certificate has no extended life time according to browser forum"
          }
,         {
              "id"           : "cert_eTLS ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not present"
          }
,         {
              "id"           : "cert_crlDistributionPoints ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://c.pki.goog/wr2/oQ6nyr8F0m0.crl"
          }
,         {
              "id"           : "cert_ocspURL ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://o.pki.goog/wr2"
          }
,         {
              "id"           : "OCSP_stapling ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "not offered"
          }
,         {
              "id"           : "cert_mustStapleExtension ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "--"
          }
,         {
              "id"           : "DNS_CAArecord ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "issue=pki.goog"
          }
,         {
              "id"           : "certificate_transparency ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "yes (certificate extension)"
          }
,         {
              "id"           : "certs_countServer ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "3"
          }
,         {
              "id"           : "certs_list_ordering_problem ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_caIssuers ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "WR2 (Google Trust Services from US)"
          }
,         {
              "id"           : "intermediate_cert <#1> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#1> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "E6FE22BF45E4F0D3B85C59E02C0F495418E1EB8D3210F788D48CD5E1CB547CD4"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#1> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2023-12-13 09:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#1> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2029-02-20 14:00"
          }
,         {
              "id"           : "intermediate_cert_expiration <#1> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#1> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "WR2 <-- GTS Root R1"
          }
,         {
              "id"           : "intermediate_cert <#2> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\nMIIFYjCCBEqgAwIBAgIQd70NbNs2+RrqIQ/E8FjTDTANBgkqhkiG9w0BAQsFADBXMQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEQMA4GA1UECxMHUm9vdCBDQTEbMBkGA1UEAxMSR2xvYmFsU2lnbiBSb290IENBMB4XDTIwMDYxOTAwMDA0MloXDTI4MDEyODAwMDA0MlowRzELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBMTEMxFDASBgNVBAMTC0dUUyBSb290IFIxMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAthECix7joXebO9y/lD63ladAPKH9gvl9MgaCcfb2jH/76Nu8ai6Xl6OMS/kr9rH5zoQdsfnFl97vufKj6bwSiV6nqlKr+CMny6SxnGPb15l+8Ape62im9MZaRw1NEDPjTrETo8gYbEvs/AmQ351kKSUjB6G00j0uYODP0gmHu81I8E3CwnqIiru6z1kZ1q+PsAewnjHxgsHA3y6mbWwZDrXYfiYaRQM9sHmklCitD38m5agI/pboPGiUU+6DOogrFZYJsuB6jC511pzrp1Zkj5ZPaK49l8KEj8C8QMALXL32h7M1bKwYUH+E4EzNktMg6TO8UpmvMrUpsyUqtEj5cuHKZPfmghCN6J3Cioj6OGaK/GP5Afl4/Xtcd/p2h/rs37EOeZVXtL0m79YB0esWCruOC7XFxYpVq9Os6pFLKcwZpDIlTirxZUTQAs6qzkm06p98g7BAe+dDq6dso499iYH6TKX/1Y7DzkvgtdizjkXPdsDtQCv9Uw+wp9U7DbGKogPeMa3Md+pvez7W35EiEua++tgy/BBjFFFy3l3WFpO9KWgz7zpm7AeKJt8T11dleCfeXkkUAKIAf5qoIbapsZWwpbkNFhHax2xIPEDgfg1azVY80ZcFuctL7TlLnMQ/0lUTbiSw1nH69MG6zO0b9f6BQdgAmD06yK56mDcYBZUCAwEAAaOCATgwggE0MA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTkrysmcRorSCeFL1JmLO/wiRNxPjAfBgNVHSMEGDAWgBRge2YaRQ2XyolQL30EzTSo//z9SzBgBggrBgEFBQcBAQRUMFIwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnBraS5nb29nL2dzcjEwKQYIKwYBBQUHMAKGHWh0dHA6Ly9wa2kuZ29vZy9nc3IxL2dzcjEuY3J0MDIGA1UdHwQrMCkwJ6AloCOGIWh0dHA6Ly9jcmwucGtpLmdvb2cvZ3NyMS9nc3IxLmNybDA7BgNVHSAENDAyMAgGBmeBDAECATAIBgZngQwBAgIwDQYLKwYBBAHWeQIFAwIwDQYLKwYBBAHWeQIFAwMwDQYJKoZIhvcNAQELBQADggEBADSkHrEoo9C0dhemMXoh6dFSPsjbdBZBiLg9NR3t5P+T4Vxfq7vqfM/b5A3Ri1fyJm9bvhdGaJQ3b2t6yMAYN/olUazsaL+yyEn9WprKASOshIArAoyZl+tJaox118fessmXn1hIVw41oeQa1v1vg4Fv74zPl6/AhSrw9U5pCZEt4Wi4wStz6dTZ/CLANx8LZh1J7QJVj2fhMtfTJr9w4z30Z209fOU0iOMy+qduBmpvvYuR7hZL6Dupszfnw0Skfths18dG9ZKb59UhvmaSGZRVbNQpsg3BZlvid0lIKO2d1xozclOzgjXPYovJJIultzkMu34qQb9Sz/yilrbCgj8=\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#2> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "3EE0278DF71FA3C125C4CD487F01D774694E6FC57E0CD94C24EFD769133918E5"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#2> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2020-06-19 00:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#2> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2028-01-28 00:00"
          }
,         {
              "id"           : "intermediate_cert_expiration <#2> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#2> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "GTS Root R1 <-- GlobalSign Root CA"
          }
,         {
              "id"           : "intermediate_cert_badOCSP ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "intermediate certificate(s) is/are ok"
          }
,         {
              "id"           : "cert_signatureAlgorithm ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "SHA256 with RSA"
          }
,         {
              "id"           : "cert_keySize ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "EC 256 bits (curve P-256)"
          }
,         {
              "id"           : "cert_keyUsage ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Digital Signature"
          }
,         {
              "id"           : "cert_extKeyUsage ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "TLS Web Server Authentication"
          }
,         {
              "id"           : "cert_serialNumber ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "D16FDE1B525D9CC00AF7D16C85C91ACB"
          }
,         {
              "id"           : "cert_serialNumberLen ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "16"
          }
,         {
              "id"           : "cert_fingerprintSHA1 ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "B5154C059627F4FB001A36545761056651D8E327"
          }
,         {
              "id"           : "cert_fingerprintSHA256 ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "5037AE3532BDF8B6ED412C0D4D8EFEB5429E1D920A392BBC7BE0875BEA362303"
          }
,         {
              "id"           : "cert ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\nMIIGOzCCBSOgAwIBAgIRANFv3htSXZzACvfRbIXJGsswDQYJKoZIhvcNAQELBQAwOzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczEMMAoGA1UEAxMDV1IyMB4XDTI2MDUwNzE1NTI1NVoXDTI2MDczMDE1NTI1NFowIzEhMB8GA1UEAwwYKi5zdG9yYWdlLmdvb2dsZWFwaXMuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEggg372sfrVeik5O8Y89N7wMZlB+XhGHlRfghvanb1rDCqQ2OAWxQWhPij5qxoA1Jv5f55ldR/aKQTSXnEhT92aOCBBswggQXMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBS2z0mioyl4Ri/c7MHNAQzPiZDEFzAfBgNVHSMEGDAWgBTeGx7teRXUPjckwyG77DQ5bUKyMDBYBggrBgEFBQcBAQRMMEowIQYIKwYBBQUHMAGGFWh0dHA6Ly9vLnBraS5nb29nL3dyMjAlBggrBgEFBQcwAoYZaHR0cDovL2kucGtpLmdvb2cvd3IyLmNydDCCAfEGA1UdEQSCAegwggHkghgqLnN0b3JhZ2UuZ29vZ2xlYXBpcy5jb22CECouZ29vZ2xlYXBpcy5jb22CIGNvbW1vbmRhdGFzdG9yYWdlLmdvb2dsZWFwaXMuY29tgiIqLmNvbW1vbmRhdGFzdG9yYWdlLmdvb2dsZWFwaXMuY29tghZzdG9yYWdlLmdvb2dsZWFwaXMuY29tghlzdG9yYWdlLXAyLmdvb2dsZWFwaXMuY29tghsqLnN0b3JhZ2UtcDIuZ29vZ2xlYXBpcy5jb22CG3N0b3JhZ2UubXRscy5nb29nbGVhcGlzLmNvbYIkKi5hcHBzcG90LmNvbS5zdG9yYWdlLmdvb2dsZWFwaXMuY29tgiAqLmNvbnRlbnQtc3RvcmFnZS5nb29nbGVhcGlzLmNvbYIjKi5jb250ZW50LXN0b3JhZ2UtcDIuZ29vZ2xlYXBpcy5jb22CJyouY29udGVudC1zdG9yYWdlLXVwbG9hZC5nb29nbGVhcGlzLmNvbYIpKi5jb250ZW50LXN0b3JhZ2UtZG93bmxvYWQuZ29vZ2xlYXBpcy5jb22CHyouc3RvcmFnZS11cGxvYWQuZ29vZ2xlYXBpcy5jb22CISouc3RvcmFnZS1kb3dubG9hZC5nb29nbGVhcGlzLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATA2BgNVHR8ELzAtMCugKaAnhiVodHRwOi8vYy5wa2kuZ29vZy93cjIvb0JGWVlhaHpnVkkuY3JsMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcA1219ENGn9XfCx+lf1wC/+YLJM1pl4dCzAXMXwMjFaXcAAAGeA1tQawAABAMASDBGAiEAkb/InyfgEw6FxWplvkOyyJzWRC2AnquKuDF3miofLkoCIQDHEaSr4TaQV5GJZuZTFT6ZMgElnEubljljwWRueKt62wB1AK9niDtXsE7dj6bZfvYuqOuBCsdxYPAkXlXWDC/nhYc6AAABngNbUWUAAAQDAEYwRAIgCtDzIAjCnsCaFFKJuwRrdcuWtXwoLNe7EH8G8R3axeQCIDeDbDol4RzrZssF8T9NJgcc28MLK9Q6t/NlQfFCREqHMA0GCSqGSIb3DQEBCwUAA4IBAQCFoD6B7lk2t1Xo/r+se8fXn59cOATLb3tBMtfgvuKtiaaYgdOrENVAXLovR6hrEawAw8xKTHx+kWSQ7jrOkzVvoXlxuE5rmEHCt2BtNdGNwb3cpcP3IGugUOXpty13G0SFwsKYWW1x3ycNF0OAAwvIP80F1LfiTMtsgN9LLtzmZh0wniGXW+stxe2R1Yu66YOlkkqvRfdMex6Yce0RASiN8t+yCZyFSTZtRbDc/8AUQ1N0+gaVYxJSyuwd4YQW/wXh4iZzxN3WzKGSlapOoiPWhOM9TpAVjzZrqPtXr5gpqNfHgYcwc4+1/USmdfChQcmP+A4/XqSrPgbP/6qGbQWg\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "cert_commonName ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "*.storage.googleapis.com"
          }
,         {
              "id"           : "cert_commonName_wo_SNI ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.storage.googleapis.com"
          }
,         {
              "id"           : "cert_subjectAltName ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.storage.googleapis.com *.googleapis.com commondatastorage.googleapis.com *.commondatastorage.googleapis.com storage.googleapis.com storage-p2.googleapis.com *.storage-p2.googleapis.com storage.mtls.googleapis.com *.appspot.com.storage.googleapis.com *.content-storage.googleapis.com *.content-storage-p2.googleapis.com *.content-storage-upload.googleapis.com *.content-storage-download.googleapis.com *.storage-upload.googleapis.com *.storage-download.googleapis.com"
          }
,         {
              "id"           : "cert_trust ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "Ok via SAN wildcard and CN wildcard (same w/o SNI)"
          }
,         {
              "id"           : "cert_trust _wildcard",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "trust is via wildcard"
          }
,         {
              "id"           : "cert_chain_of_trust ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "passed."
          }
,         {
              "id"           : "cert_certificatePolicies_EV ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_expirationStatus ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "65 >= 60 days"
          }
,         {
              "id"           : "cert_notBefore ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2026-05-07 15:52"
          }
,         {
              "id"           : "cert_notAfter ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2026-07-30 15:52"
          }
,         {
              "id"           : "cert_extlifeSpan ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "certificate has no extended life time according to browser forum"
          }
,         {
              "id"           : "cert_eTLS ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not present"
          }
,         {
              "id"           : "cert_crlDistributionPoints ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://c.pki.goog/wr2/oBFYYahzgVI.crl"
          }
,         {
              "id"           : "cert_ocspURL ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://o.pki.goog/wr2"
          }
,         {
              "id"           : "OCSP_stapling ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "not offered"
          }
,         {
              "id"           : "cert_mustStapleExtension ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "--"
          }
,         {
              "id"           : "DNS_CAArecord ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "issue=pki.goog"
          }
,         {
              "id"           : "certificate_transparency ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "yes (certificate extension)"
          }
,         {
              "id"           : "certs_countServer ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "3"
          }
,         {
              "id"           : "certs_list_ordering_problem ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_caIssuers ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "WR2 (Google Trust Services from US)"
          }
,         {
              "id"           : "intermediate_cert <#1> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#1> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "E6FE22BF45E4F0D3B85C59E02C0F495418E1EB8D3210F788D48CD5E1CB547CD4"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#1> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2023-12-13 09:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#1> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2029-02-20 14:00"
          }
,         {
              "id"           : "intermediate_cert_expiration <#1> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#1> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "WR2 <-- GTS Root R1"
          }
,         {
              "id"           : "intermediate_cert <#2> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#2> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "3EE0278DF71FA3C125C4CD487F01D774694E6FC57E0CD94C24EFD769133918E5"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#2> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2020-06-19 00:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#2> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2028-01-28 00:00"
          }
,         {
              "id"           : "intermediate_cert_expiration <#2> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#2> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "GTS Root R1 <-- GlobalSign Root CA"
          }
,         {
              "id"           : "intermediate_cert_badOCSP ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "intermediate certificate(s) is/are ok"
          }
,         {
              "id"           : "scanTime",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/173.194.193.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "14"
          }
]
Feature: CCC.Core.CN01.AR03
Scenario: HTTP redirects to HTTPS @tlp-green @tlp-amber @tlp-red @CCC.Core @CCC.Core.CN01 @PerPort @Behavioural @http @tls @object-storage
Given a client connects to "{hostName}" with protocol "http" on port "80"703µs
And I refer to "{result}" as "connection"31µs
And "{connection}" is not an error46µs
And I transmit "GET / HTTP/1.1\r\nHost: {hostName}\r\n\r\n" to "{connection}"501ms
And I attach "{connection}" to the test output as "HTTP response"101µs
And "{connection.Output}" contains "301"44µs
expected {connection.Output} to contain '301', but got 'HTTP/1.1 403 Forbidden Content-Type: application/xml; charset=UTF-8 X-GUploader-UploadID: AAVLpEg9_szNKichCz_GdmzUu6tgTR4ZNgtaUd7aJtG6imCvBh_nFTiprpkGpLahtDJD-z3fcY2ldag Content-Length: 300 Date: Tue, 26 May 2026 10:26:30 GMT Expires: Tue, 26 May 2026 10:26:30 GMT Cache-Control: private, max-age=0 Server: UploadServer AccessDeniedAccess denied.
Anonymous caller does not have storage.objects.list access to the Google Cloud Storage bucket. Permission 'storage.objects.list' denied on resource (or it may not exist).
'
And I call "{connection}" with "Close"16µs
Then "{connection.State}" is "closed"15µs
📎 Attachments:
HTTP response
View JSON (777 bytes)
{"State":"open","Input":{},"Output":"HTTP/1.1 403 Forbidden\r\nContent-Type: application/xml; charset=UTF-8\r\nX-GUploader-UploadID: AAVLpEg9_szNKichCz_GdmzUu6tgTR4ZNgtaUd7aJtG6imCvBh_nFTiprpkGpLahtDJD-z3fcY2ldag\r\nContent-Length: 300\r\nDate: Tue, 26 May 2026 10:26:30 GMT\r\nExpires: Tue, 26 May 2026 10:26:30 GMT\r\nCache-Control: private, max-age=0\r\nServer: UploadServer\r\n\r\n\u003c?xml version='1.0' encoding='UTF-8'?\u003e\u003cError\u003e\u003cCode\u003eAccessDenied\u003c/Code\u003e\u003cMessage\u003eAccess denied.\u003c/Message\u003e\u003cDetails\u003eAnonymous caller does not have storage.objects.list access to the Google Cloud Storage bucket. Permission 'storage.objects.list' denied on resource (or it may not exist).\u003c/Details\u003e\u003c/Error\u003e"}
Scenario: Only secure protocols are exposed @tlp-green @tlp-amber @tlp-red @CCC.Core @CCC.Core.CN01 @PerPort @Behavioural @tls @object-storage
Given "report" contains details of SSL Support type "protocols" for "{hostName}" on port "{portNumber}"5s
Then "{report}" is an array of objects with at least the following contents216µs
idseverity
TLS1_2OK
TLS1_3OK
📎 Attachments:
testssl_protocols_ccc-test-bucket-20260526t102300z.storage.googleapis.com_443.json
View JSON (4202 bytes)
[
         {
              "id"           : "engine_problem",
              "ip"           : "/",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "No engine or GOST support via engine with your /opt/testssl/bin/openssl.Linux.x86_64"
          }
,         {
              "id"           : "service",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/172.217.214.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "HTTP"
          }
,         {
              "id"           : "pre_128cipher",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/172.217.214.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "No 128 cipher limit bug"
          }
,         {
              "id"           : "SSLv2",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/172.217.214.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "not offered"
          }
,         {
              "id"           : "SSLv3",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/172.217.214.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "not offered"
          }
,         {
              "id"           : "TLS1",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/172.217.214.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "offered (deprecated)"
          }
,         {
              "id"           : "TLS1_1",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/172.217.214.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "offered (deprecated)"
          }
,         {
              "id"           : "TLS1_2",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/172.217.214.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "offered"
          }
,         {
              "id"           : "TLS1_3",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/172.217.214.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "offered with final"
          }
,         {
              "id"           : "QUIC",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/172.217.214.207",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "not tested due to lack of local OpenSSL support"
          }
,         {
              "id"           : "NPN",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/172.217.214.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "offered with grpc-exp, h2, http/1.1, http/1.0 (advertised)"
          }
,         {
              "id"           : "ALPN_HTTP2",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/172.217.214.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "h2"
          }
,         {
              "id"           : "ALPN",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/172.217.214.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http/1.1grpc-exp"
          }
,         {
              "id"           : "scanTime",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/172.217.214.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "5"
          }
]
Feature: CCC.Core.CN01.AR07
Scenario: Verify HTTPS uses IANA-assigned port 443 @tlp-clear @tlp-green @tlp-amber @tlp-red @CCC.Core @CCC.Core.CN01 @Behavioural @PerPort @http @tls @object-storage
Then "{portNumber}" is "443"21µs
Feature: CCC.Core.CN01.AR08
Scenario: Verify mTLS requires client certificate authentication @tls @tlp-amber @tlp-red @CCC.Core @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given "report" contains details of SSL Support type "server-defaults" for "{hostName}" on port "{portNumber}"14s
Then "{report}" is an array of objects with at least the following contents966µs
idfinding
clientAuthrequired
expected row not found: map[finding:required id:clientAuth]
📎 Attachments:
testssl_server-defaults_ccc-test-bucket-20260526t102300z.storage.googleapis.com_443.json
View JSON (46239 bytes)
[
         {
              "id"           : "engine_problem",
              "ip"           : "/",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "No engine or GOST support via engine with your /opt/testssl/bin/openssl.Linux.x86_64"
          }
,         {
              "id"           : "service",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "HTTP"
          }
,         {
              "id"           : "pre_128cipher",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "No 128 cipher limit bug"
          }
,         {
              "id"           : "TLS_extensions",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "'EC point formats/#11' 'application layer protocol negotiation/#16' 'extended master secret/#23' 'session ticket/#35' 'supported versions/#43' 'key share/#51' 'next protocol/#13172' 'renegotiation info/#65281'"
          }
,         {
              "id"           : "TLS_misses_extension_23",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Extended master secret extension detected"
          }
,         {
              "id"           : "TLS_session_ticket",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "valid for 100800 seconds (>daily)"
          }
,         {
              "id"           : "SSL_sessionID_support",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "yes"
          }
,         {
              "id"           : "sessionresumption_ticket",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "supported"
          }
,         {
              "id"           : "sessionresumption_ID",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not supported"
          }
,         {
              "id"           : "early_data",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "HIGH",
              "finding"      : "supported"
          }
,         {
              "id"           : "TLS_timestamp",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "off by 0 seconds from your localtime"
          }
,         {
              "id"           : "certificate_compression",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "none"
          }
,         {
              "id"           : "clientAuth",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "none"
          }
,         {
              "id"           : "cert_numbers",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2"
          }
,         {
              "id"           : "cert_signatureAlgorithm ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "SHA256 with RSA"
          }
,         {
              "id"           : "cert_keySize ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "RSA 2048 bits (exponent is 65537)"
          }
,         {
              "id"           : "cert_keyUsage ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Digital Signature, Key Encipherment"
          }
,         {
              "id"           : "cert_extKeyUsage ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "TLS Web Server Authentication"
          }
,         {
              "id"           : "cert_serialNumber ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "CC3E88CA7B0A756E120F1554BAFA7E72"
          }
,         {
              "id"           : "cert_serialNumberLen ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "16"
          }
,         {
              "id"           : "cert_fingerprintSHA1 ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "706E256780DB2ABCC5B91EE8FAC62B786F103837"
          }
,         {
              "id"           : "cert_fingerprintSHA256 ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "20253419F51C08D6B155A6D270DE2DBB46A6EFC85AC64B66C10C91E5E9B4AD2D"
          }
,         {
              "id"           : "cert ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "cert_commonName ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "*.storage.googleapis.com"
          }
,         {
              "id"           : "cert_commonName_wo_SNI ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.storage.googleapis.com"
          }
,         {
              "id"           : "cert_subjectAltName ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.storage.googleapis.com *.googleapis.com commondatastorage.googleapis.com *.commondatastorage.googleapis.com storage.googleapis.com storage-p2.googleapis.com *.storage-p2.googleapis.com storage.mtls.googleapis.com *.appspot.com.storage.googleapis.com *.content-storage.googleapis.com *.content-storage-p2.googleapis.com *.content-storage-upload.googleapis.com *.content-storage-download.googleapis.com *.storage-upload.googleapis.com *.storage-download.googleapis.com"
          }
,         {
              "id"           : "cert_trust ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "Ok via SAN wildcard and CN wildcard (same w/o SNI)"
          }
,         {
              "id"           : "cert_trust _wildcard",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "trust is via wildcard"
          }
,         {
              "id"           : "cert_chain_of_trust ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "passed."
          }
,         {
              "id"           : "cert_certificatePolicies_EV ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_expirationStatus ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "65 >= 60 days"
          }
,         {
              "id"           : "cert_notBefore ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2026-05-07 15:52"
          }
,         {
              "id"           : "cert_notAfter ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2026-07-30 15:52"
          }
,         {
              "id"           : "cert_extlifeSpan ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "certificate has no extended life time according to browser forum"
          }
,         {
              "id"           : "cert_eTLS ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not present"
          }
,         {
              "id"           : "cert_crlDistributionPoints ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://c.pki.goog/wr2/oQ6nyr8F0m0.crl"
          }
,         {
              "id"           : "cert_ocspURL ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://o.pki.goog/wr2"
          }
,         {
              "id"           : "OCSP_stapling ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "not offered"
          }
,         {
              "id"           : "cert_mustStapleExtension ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "--"
          }
,         {
              "id"           : "DNS_CAArecord ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "issue=pki.goog"
          }
,         {
              "id"           : "certificate_transparency ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "yes (certificate extension)"
          }
,         {
              "id"           : "certs_countServer ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "3"
          }
,         {
              "id"           : "certs_list_ordering_problem ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_caIssuers ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "WR2 (Google Trust Services from US)"
          }
,         {
              "id"           : "intermediate_cert <#1> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#1> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "E6FE22BF45E4F0D3B85C59E02C0F495418E1EB8D3210F788D48CD5E1CB547CD4"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#1> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2023-12-13 09:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#1> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2029-02-20 14:00"
          }
,         {
              "id"           : "intermediate_cert_expiration <#1> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#1> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "WR2 <-- GTS Root R1"
          }
,         {
              "id"           : "intermediate_cert <#2> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#2> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "3EE0278DF71FA3C125C4CD487F01D774694E6FC57E0CD94C24EFD769133918E5"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#2> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2020-06-19 00:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#2> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2028-01-28 00:00"
          }
,         {
              "id"           : "intermediate_cert_expiration <#2> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#2> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "GTS Root R1 <-- GlobalSign Root CA"
          }
,         {
              "id"           : "intermediate_cert_badOCSP ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "intermediate certificate(s) is/are ok"
          }
,         {
              "id"           : "cert_signatureAlgorithm ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "SHA256 with RSA"
          }
,         {
              "id"           : "cert_keySize ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "EC 256 bits (curve P-256)"
          }
,         {
              "id"           : "cert_keyUsage ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Digital Signature"
          }
,         {
              "id"           : "cert_extKeyUsage ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "TLS Web Server Authentication"
          }
,         {
              "id"           : "cert_serialNumber ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "D16FDE1B525D9CC00AF7D16C85C91ACB"
          }
,         {
              "id"           : "cert_serialNumberLen ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "16"
          }
,         {
              "id"           : "cert_fingerprintSHA1 ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "B5154C059627F4FB001A36545761056651D8E327"
          }
,         {
              "id"           : "cert_fingerprintSHA256 ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "5037AE3532BDF8B6ED412C0D4D8EFEB5429E1D920A392BBC7BE0875BEA362303"
          }
,         {
              "id"           : "cert ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "cert_commonName ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "*.storage.googleapis.com"
          }
,         {
              "id"           : "cert_commonName_wo_SNI ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.storage.googleapis.com"
          }
,         {
              "id"           : "cert_subjectAltName ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.storage.googleapis.com *.googleapis.com commondatastorage.googleapis.com *.commondatastorage.googleapis.com storage.googleapis.com storage-p2.googleapis.com *.storage-p2.googleapis.com storage.mtls.googleapis.com *.appspot.com.storage.googleapis.com *.content-storage.googleapis.com *.content-storage-p2.googleapis.com *.content-storage-upload.googleapis.com *.content-storage-download.googleapis.com *.storage-upload.googleapis.com *.storage-download.googleapis.com"
          }
,         {
              "id"           : "cert_trust ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "Ok via SAN wildcard and CN wildcard (same w/o SNI)"
          }
,         {
              "id"           : "cert_trust _wildcard",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "trust is via wildcard"
          }
,         {
              "id"           : "cert_chain_of_trust ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "passed."
          }
,         {
              "id"           : "cert_certificatePolicies_EV ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_expirationStatus ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "65 >= 60 days"
          }
,         {
              "id"           : "cert_notBefore ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2026-05-07 15:52"
          }
,         {
              "id"           : "cert_notAfter ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2026-07-30 15:52"
          }
,         {
              "id"           : "cert_extlifeSpan ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "certificate has no extended life time according to browser forum"
          }
,         {
              "id"           : "cert_eTLS ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not present"
          }
,         {
              "id"           : "cert_crlDistributionPoints ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://c.pki.goog/wr2/oBFYYahzgVI.crl"
          }
,         {
              "id"           : "cert_ocspURL ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://o.pki.goog/wr2"
          }
,         {
              "id"           : "OCSP_stapling ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "not offered"
          }
,         {
              "id"           : "cert_mustStapleExtension ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "--"
          }
,         {
              "id"           : "DNS_CAArecord ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "issue=pki.goog"
          }
,         {
              "id"           : "certificate_transparency ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "yes (certificate extension)"
          }
,         {
              "id"           : "certs_countServer ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "3"
          }
,         {
              "id"           : "certs_list_ordering_problem ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_caIssuers ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "WR2 (Google Trust Services from US)"
          }
,         {
              "id"           : "intermediate_cert <#1> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\nMIIFCzCCAvOgAwIBAgIQf/AFoHxM3tEArZ1mpRB7mDANBgkqhkiG9w0BAQsFADBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjEwHhcNMjMxMjEzMDkwMDAwWhcNMjkwMjIwMTQwMDAwWjA7MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZpY2VzMQwwCgYDVQQDEwNXUjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp/5x/RR5wqFOfytnlDd5GV1d9vI+aWqxG8YSau5HbyfsvAfuSCQAWXqAc+MGr+XgvSszYhaLYWTwO0xj7sfUkDSbutltkdnwUxy96zqhMt/TZCPzfhyM1IKjiaeKMTj+xWfpgoh6zySBTGYLKNlNtYE3pAJH8do1cCA8Kwtzxc2vFE24KT3rC8gIcLrRjg9ox9i11MLL7q8Ju26nADrn5Z9TDJVd06wW06Y613ijNzHoU5HEDy01hLmFXxRmpC5iEGuh5KdmyjS//V2pm4M6rlagplmNwEmceOuHbsCFx13ye/aoXbv4r+zgXFNFmp6+atXDMyGOBOozAKql2N87jAgMBAAGjgf4wgfswDgYDVR0PAQH/BAQDAgGGMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAGAQH/AgEAMB0GA1UdDgQWBBTeGx7teRXUPjckwyG77DQ5bUKyMDAfBgNVHSMEGDAWgBTkrysmcRorSCeFL1JmLO/wiRNxPjA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAKGGGh0dHA6Ly9pLnBraS5nb29nL3IxLmNydDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vYy5wa2kuZ29vZy9yL3IxLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATANBgkqhkiG9w0BAQsFAAOCAgEARXWL5R87RBOWGqtY8TXJbz3S0DNKhjO6V1FP7sQ02hYSTL8Tnw3UVOlIecAwPJQl8hr0ujKUtjNyC4XuCRElNJThb0Lbgpt7fyqaqf9/qdLeSiDLs/sDA7j4BwXaWZIvGEaYzq9yviQmsR4ATb0IrZNBRAq7x9UBhb+TV+PfdBJTDhEl05vc3ssnbrPCuTNiOcLgNeFbpwkuGcuRKnZc8d/KI4RApW//mkHgte8y0YWuryUJ8GLFbsLIbjL9uNrizkqRSvOFVU6xddZIMy9vhNkSXJ/UcZhjJY1pXAprffJBvei7j+Qi151lRehMCofa6WBmiA4fx+FOVsV2/7R6V2nyAiIJJkEd2nSi5SnzxJrlXdaqev3htytmOPvoKWa676ATL/hzfvDaQBEcXd2Ppvy+275W+DKcH0FBbX62xevGiza3F4ydzxl6NJ8hk8R+dDXSqv1MbRT1ybB5W0k8878XSOjvmiYTDIfyc9acxVJrY/cykHipa+te1pOhv7wYPYtZ9orGBV5SGOJm4NrB3K1aJar0RfzxC3ikr7Dyc6QwqDTBU39CluVIQeuQRgwG3MuSxl7zRERDRilGoKb8uY45JzmxWuKxrfwT/478JuHU/oTxUFqOl2stKnn7QGTq8z29W+GgBLCXSBxC9epaHM0myFH/FJlniXJfHeytWt0=\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#1> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "E6FE22BF45E4F0D3B85C59E02C0F495418E1EB8D3210F788D48CD5E1CB547CD4"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#1> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2023-12-13 09:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#1> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2029-02-20 14:00"
          }
,         {
              "id"           : "intermediate_cert_expiration <#1> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#1> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "WR2 <-- GTS Root R1"
          }
,         {
              "id"           : "intermediate_cert <#2> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#2> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "3EE0278DF71FA3C125C4CD487F01D774694E6FC57E0CD94C24EFD769133918E5"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#2> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2020-06-19 00:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#2> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2028-01-28 00:00"
          }
,         {
              "id"           : "intermediate_cert_expiration <#2> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#2> ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "GTS Root R1 <-- GlobalSign Root CA"
          }
,         {
              "id"           : "intermediate_cert_badOCSP ",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "intermediate certificate(s) is/are ok"
          }
,         {
              "id"           : "scanTime",
              "ip"           : "ccc-test-bucket-20260526t102300z.storage.googleapis.com/142.250.152.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "13"
          }
]