🥒 CCC.ObjStor Test: ccc-test-bucket-nodal-time-474015-p5

Test Parameters

PortNumber443
HostNameccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com
Protocolhttps
ServiceTypeobject-storage
ProviderServiceTypestorage.googleapis.com/Bucket
CatalogTypesCCC.ObjStor
TagFilter@object-storage, @PerPort, @tls, ~@ftp, ~@telnet, ~@ssh, ~@smtp, ~@dns, ~@ldap
UIDprojects/nodal-time-474015-p5/buckets/ccc-test-bucket-nodal-time-474015-p5
ResourceNameccc-test-bucket-nodal-time-474015-p5
ReportFileccc-test-bucket-nodal-time-474015-p5-port
ReportTitleccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com:443
Instance
{
  "ID": "main-gcp",
  "Properties": {
    "Provider": "gcp",
    "Region": "us-central1",
    "AzureResourceGroup": "",
    "AzureSubscriptionID": "",
    "GcpProjectId": "nodal-time-474015-p5"
  },
  "Services": [
    {
      "Type": "object-storage",
      "Properties": {
        "object-storage-retention-period-seconds": 172800
      }
    },
    {
      "Type": "logging",
      "Properties": {
        "gcp-log-bucket-name": "cfi-test-log-bucket"
      }
    }
  ],
  "Rules": {
    "permitted-project-ids": "",
    "permitted-regions": [
      "us-central1"
    ]
  }
}
GcpLogBucketNamecfi-test-log-bucket
GcpProjectIdnodal-time-474015-p5
ObjectStorageRetentionPeriodSeconds172800
PermittedRegions
[
  "us-central1"
]
Providergcp
Regionus-central1

Summary

Generated: 2026-04-01 11:03:57

Total Run Time: 55s

Features: 4

Scenarios: 11 (✅ 7 | ❌ 4)

Steps: 45 (✅ 38 | ❌ 4 | ⏭️ 3 | ❓ 0)

Feature: CCC.Core.CN01.AR01
Scenario: Service accepts TLS 1.3 encrypted traffic @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"30µs
Given an openssl s_client request using "tls1_3" to "{portNumber}" on "{hostName}" protocol "{protocol}"470µs
And I refer to "{result}" as "connection"24µs
And "{connection}" state is open34µs
And "{connection.State}" is "open"33µs
And I close connection "{connection}"36µs
Then "{connection}" state is closed47µs
Scenario: Service rejects TLS 1.2 traffic @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"29µs
Given an openssl s_client request using "tls1_2" to "{portNumber}" on "{hostName}" protocol "{protocol}"621µs
And I refer to "{result}" as "connection"42µs
And we wait for a period of "40" ms41ms
Then "{connection.State}" is "closed"29µs
Scenario: Service rejects TLS 1.1 traffic @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"33µs
Given an openssl s_client request using "tls1_1" to "{portNumber}" on "{hostName}" protocol "{protocol}"426µs
And I refer to "{result}" as "connection"26µs
And we wait for a period of "40" ms41ms
Then "{connection.State}" is "closed"29µs
Scenario: Service rejects TLS 1.0 traffic @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"29µs
Given an openssl s_client request using "tls1" to "{portNumber}" on "{hostName}" protocol "{protocol}"338µs
And I refer to "{result}" as "connection"34µs
And we wait for a period of "40" ms41ms
Then "{connection.State}" is "closed"26µs
Scenario: Verify SSL/TLS protocol support @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"33µs
Given "report" contains details of SSL Support type "protocols" for "{hostName}" on port "{portNumber}"4s
Then "{report}" is an array of objects which doesn't contain any of694µs
idfinding
SSLv2offered
SSLv3offered
TLS1offered
TLS1_1offered
TLS1_2offered
unwanted row found in array: map[finding:offered id:TLS1_2]
And "{report}" is an array of objects with at least the following contents13µs
idfinding
TLS1_3offered with final
📎 Attachments:
testssl_protocols_ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com_443.json
View JSON (4228 bytes)
[
         {
              "id"           : "engine_problem",
              "ip"           : "/",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "No engine or GOST support via engine with your /opt/testssl/bin/openssl.Linux.x86_64"
          }
,         {
              "id"           : "service",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.32.27",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "HTTP"
          }
,         {
              "id"           : "pre_128cipher",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.32.27",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "No 128 cipher limit bug"
          }
,         {
              "id"           : "SSLv2",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.32.27",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "not offered"
          }
,         {
              "id"           : "SSLv3",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.32.27",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "not offered"
          }
,         {
              "id"           : "TLS1",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.32.27",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "offered (deprecated)"
          }
,         {
              "id"           : "TLS1_1",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.32.27",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "offered (deprecated)"
          }
,         {
              "id"           : "TLS1_2",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.32.27",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "offered"
          }
,         {
              "id"           : "TLS1_3",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.32.27",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "offered with final"
          }
,         {
              "id"           : "QUIC",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.32.27",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "not tested due to lack of local OpenSSL support"
          }
,         {
              "id"           : "NPN",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.32.27",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "offered with grpc-exp, h2, http/1.1, http/1.0 (advertised)"
          }
,         {
              "id"           : "ALPN_HTTP2",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.32.27",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "h2"
          }
,         {
              "id"           : "ALPN",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.32.27",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http/1.1grpc-exp"
          }
,         {
              "id"           : "scanTime",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.32.27",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "4"
          }
]
Scenario: Verify no known SSL/TLS vulnerabilities @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"39µs
Given "report" contains details of SSL Support type "vulnerable" for "{hostName}" on port "{portNumber}"21s
Then "{report}" is an array of objects with at least the following contents446µs
idseverity
heartbleedOK
CCSOK
ticketbleedOK
ROBOTOK
secure_renegoOK
📎 Attachments:
testssl_vulnerable_ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com_443.json
View JSON (10393 bytes)
[
         {
              "id"           : "engine_problem",
              "ip"           : "/",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "No engine or GOST support via engine with your /opt/testssl/bin/openssl.Linux.x86_64"
          }
,         {
              "id"           : "service",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.214.91",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "HTTP"
          }
,         {
              "id"           : "pre_128cipher",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.214.91",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "No 128 cipher limit bug"
          }
,         {
              "id"           : "heartbleed",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.214.91",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2014-0160",
              "cwe"          : "CWE-119",
              "finding"      : "not vulnerable, no heartbeat extension"
          }
,         {
              "id"           : "CCS",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.214.91",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2014-0224",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "ticketbleed",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.214.91",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2016-9244",
              "cwe"          : "CWE-200",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "opossum",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.214.91",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2025-49812",
              "cwe"          : "CWE-287",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "ROBOT",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.214.91",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168",
              "cwe"          : "CWE-203",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "secure_renego",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.214.91",
              "port"         : "443",
              "severity"     : "OK",
              "cwe"          : "CWE-310",
              "finding"      : "supported"
          }
,         {
              "id"           : "secure_client_renego",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.214.91",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2011-1473",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "CRIME_TLS",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.214.91",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2012-4929",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "BREACH",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.214.91",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2013-3587",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable, no gzip/deflate/compress/br HTTP compression  - only supplied '/' tested"
          }
,         {
              "id"           : "POODLE_SSL",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.214.91",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2014-3566",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "fallback_SCSV",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.214.91",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "supported"
          }
,         {
              "id"           : "SWEET32",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.214.91",
              "port"         : "443",
              "severity"     : "LOW",
              "cve"          : "CVE-2016-2183 CVE-2016-6329",
              "cwe"          : "CWE-327",
              "finding"      : "uses 64 bit block ciphers"
          }
,         {
              "id"           : "FREAK",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.214.91",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2015-0204",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "DROWN",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.214.91",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2016-0800 CVE-2016-0703",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable on this host and port"
          }
,         {
              "id"           : "DROWN_hint",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.214.91",
              "port"         : "443",
              "severity"     : "INFO",
              "cve"          : "CVE-2016-0800 CVE-2016-0703",
              "cwe"          : "CWE-310",
              "finding"      : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=033C1B8A6C9EB5EC4B9DC0C45CE799B7D8536BC4D02509FCAF5F9DD65D9F1E49"
          }
,         {
              "id"           : "LOGJAM",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.214.91",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2015-4000",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable, no DH EXPORT ciphers,"
          }
,         {
              "id"           : "LOGJAM-common_primes",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.214.91",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2015-4000",
              "cwe"          : "CWE-310",
              "finding"      : "no DH key with <= TLS 1.2"
          }
,         {
              "id"           : "BEAST_CBC_TLS1",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.214.91",
              "port"         : "443",
              "severity"     : "MEDIUM",
              "cve"          : "CVE-2011-3389",
              "cwe"          : "CWE-20",
              "finding"      : "ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-SHA ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA AES128-SHA AES256-SHA DES-CBC3-SHA"
          }
,         {
              "id"           : "BEAST",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.214.91",
              "port"         : "443",
              "severity"     : "LOW",
              "cve"          : "CVE-2011-3389",
              "cwe"          : "CWE-20",
              "finding"      : "VULNERABLE -- but also supports higher protocols  TLSv1.1 TLSv1.2 (likely mitigated)"
          }
,         {
              "id"           : "LUCKY13",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.214.91",
              "port"         : "443",
              "severity"     : "LOW",
              "cve"          : "CVE-2013-0169",
              "cwe"          : "CWE-310",
              "finding"      : "potentially vulnerable, uses TLS CBC ciphers"
          }
,         {
              "id"           : "winshock",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.214.91",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2014-6321",
              "cwe"          : "CWE-94",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "RC4",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.214.91",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2013-2566 CVE-2015-2808",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "scanTime",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.214.91",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "21"
          }
]
Scenario: Verify TLS 1.3 only certificate validity @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"34µs
Given "report" contains details of SSL Support type "server-defaults" for "{hostName}" on port "{portNumber}"12s
Then "{report}" is an array of objects with at least the following contents1ms
idseverity
cert_expirationStatusOK
cert_chain_of_trustOK
expected row not found: map[id:cert_expirationStatus severity:OK]
📎 Attachments:
testssl_server-defaults_ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com_443.json
View JSON (46640 bytes)
[
         {
              "id"           : "engine_problem",
              "ip"           : "/",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "No engine or GOST support via engine with your /opt/testssl/bin/openssl.Linux.x86_64"
          }
,         {
              "id"           : "service",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "HTTP"
          }
,         {
              "id"           : "pre_128cipher",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "No 128 cipher limit bug"
          }
,         {
              "id"           : "TLS_extensions",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "'EC point formats/#11' 'application layer protocol negotiation/#16' 'extended master secret/#23' 'session ticket/#35' 'supported versions/#43' 'key share/#51' 'next protocol/#13172' 'renegotiation info/#65281'"
          }
,         {
              "id"           : "TLS_misses_extension_23",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Extended master secret extension detected"
          }
,         {
              "id"           : "TLS_session_ticket",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "valid for 100800 seconds (>daily)"
          }
,         {
              "id"           : "SSL_sessionID_support",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "yes"
          }
,         {
              "id"           : "sessionresumption_ticket",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "supported"
          }
,         {
              "id"           : "sessionresumption_ID",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not supported"
          }
,         {
              "id"           : "early_data",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "HIGH",
              "finding"      : "supported"
          }
,         {
              "id"           : "TLS_timestamp",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "off by -1 seconds from your localtime"
          }
,         {
              "id"           : "certificate_compression",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "none"
          }
,         {
              "id"           : "clientAuth",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "none"
          }
,         {
              "id"           : "cert_numbers",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2"
          }
,         {
              "id"           : "cert_signatureAlgorithm ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "SHA256 with RSA"
          }
,         {
              "id"           : "cert_keySize ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "RSA 2048 bits (exponent is 65537)"
          }
,         {
              "id"           : "cert_keyUsage ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Digital Signature, Key Encipherment"
          }
,         {
              "id"           : "cert_extKeyUsage ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "TLS Web Server Authentication"
          }
,         {
              "id"           : "cert_serialNumber ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "E49EAEC928E9C0A10985360D4FFF8BA3"
          }
,         {
              "id"           : "cert_serialNumberLen ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "16"
          }
,         {
              "id"           : "cert_fingerprintSHA1 ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "C805EEE2FCB071D237B982287C2BDBD2E616D851"
          }
,         {
              "id"           : "cert_fingerprintSHA256 ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "033C1B8A6C9EB5EC4B9DC0C45CE799B7D8536BC4D02509FCAF5F9DD65D9F1E49"
          }
,         {
              "id"           : "cert ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "cert_commonName ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "*.storage.googleapis.com"
          }
,         {
              "id"           : "cert_commonName_wo_SNI ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.storage.googleapis.com"
          }
,         {
              "id"           : "cert_subjectAltName ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.storage.googleapis.com *.googleapis.com commondatastorage.googleapis.com *.commondatastorage.googleapis.com storage.googleapis.com storage-p2.googleapis.com *.storage-p2.googleapis.com storage.mtls.googleapis.com *.appspot.com.storage.googleapis.com *.content-storage.googleapis.com *.content-storage-p2.googleapis.com *.content-storage-upload.googleapis.com *.content-storage-download.googleapis.com *.storage-upload.googleapis.com *.storage-download.googleapis.com"
          }
,         {
              "id"           : "cert_trust ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "Ok via SAN wildcard and CN wildcard (same w/o SNI)"
          }
,         {
              "id"           : "cert_trust _wildcard",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "trust is via wildcard"
          }
,         {
              "id"           : "cert_chain_of_trust ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "passed."
          }
,         {
              "id"           : "cert_certificatePolicies_EV ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_expirationStatus ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "60 >= 60 days"
          }
,         {
              "id"           : "cert_notBefore ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2026-03-09 08:37"
          }
,         {
              "id"           : "cert_notAfter ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2026-06-01 08:37"
          }
,         {
              "id"           : "cert_extlifeSpan ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "certificate has no extended life time according to browser forum"
          }
,         {
              "id"           : "cert_eTLS ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not present"
          }
,         {
              "id"           : "cert_crlDistributionPoints ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://c.pki.goog/wr2/9UVbN0w5E6Y.crl"
          }
,         {
              "id"           : "cert_ocspURL ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://o.pki.goog/wr2"
          }
,         {
              "id"           : "OCSP_stapling ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "not offered"
          }
,         {
              "id"           : "cert_mustStapleExtension ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "--"
          }
,         {
              "id"           : "DNS_CAArecord ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "issue=pki.goog"
          }
,         {
              "id"           : "certificate_transparency ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "yes (certificate extension)"
          }
,         {
              "id"           : "certs_countServer ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "3"
          }
,         {
              "id"           : "certs_list_ordering_problem ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_caIssuers ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "WR2 (Google Trust Services from US)"
          }
,         {
              "id"           : "intermediate_cert <#1> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#1> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "E6FE22BF45E4F0D3B85C59E02C0F495418E1EB8D3210F788D48CD5E1CB547CD4"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#1> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2023-12-13 09:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#1> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2029-02-20 14:00"
          }
,         {
              "id"           : "intermediate_cert_expiration <#1> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#1> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "WR2 <-- GTS Root R1"
          }
,         {
              "id"           : "intermediate_cert <#2> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#2> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "3EE0278DF71FA3C125C4CD487F01D774694E6FC57E0CD94C24EFD769133918E5"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#2> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2020-06-19 00:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#2> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2028-01-28 00:00"
          }
,         {
              "id"           : "intermediate_cert_expiration <#2> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#2> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "GTS Root R1 <-- GlobalSign Root CA"
          }
,         {
              "id"           : "intermediate_cert_badOCSP ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "intermediate certificate(s) is/are ok"
          }
,         {
              "id"           : "cert_signatureAlgorithm ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "SHA256 with RSA"
          }
,         {
              "id"           : "cert_keySize ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "EC 256 bits (curve P-256)"
          }
,         {
              "id"           : "cert_keyUsage ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Digital Signature"
          }
,         {
              "id"           : "cert_extKeyUsage ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "TLS Web Server Authentication"
          }
,         {
              "id"           : "cert_serialNumber ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "647F256EBB1F8AFE090AA7D6F7616B8A"
          }
,         {
              "id"           : "cert_serialNumberLen ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "16"
          }
,         {
              "id"           : "cert_fingerprintSHA1 ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "125BBEDAE43B2607E946B1578134D16372B6D50A"
          }
,         {
              "id"           : "cert_fingerprintSHA256 ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "9A508B3922167684652C79AD60BD17925C874CB5FC784EBFAD1CAF1151F53795"
          }
,         {
              "id"           : "cert ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\nMIIGOTCCBSGgAwIBAgIQZH8lbrsfiv4JCqfW92FrijANBgkqhkiG9w0BAQsFADA7MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZpY2VzMQwwCgYDVQQDEwNXUjIwHhcNMjYwMzA5MDgzNzI3WhcNMjYwNjAxMDgzNzI2WjAjMSEwHwYDVQQDDBgqLnN0b3JhZ2UuZ29vZ2xlYXBpcy5jb20wWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAARtB9mjhjs4sVvwp2P7DbSypkCtIWmGLvXgRIq4L5tKbaVR2BNBfiNrL/ekV1fd8TERheV/Cv/xKHx0HwYviqXzo4IEGjCCBBYwDgYDVR0PAQH/BAQDAgeAMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFDpAqb6qpu7OefQKpKBtgyGRrfVgMB8GA1UdIwQYMBaAFN4bHu15FdQ+NyTDIbvsNDltQrIwMFgGCCsGAQUFBwEBBEwwSjAhBggrBgEFBQcwAYYVaHR0cDovL28ucGtpLmdvb2cvd3IyMCUGCCsGAQUFBzAChhlodHRwOi8vaS5wa2kuZ29vZy93cjIuY3J0MIIB8QYDVR0RBIIB6DCCAeSCGCouc3RvcmFnZS5nb29nbGVhcGlzLmNvbYIQKi5nb29nbGVhcGlzLmNvbYIgY29tbW9uZGF0YXN0b3JhZ2UuZ29vZ2xlYXBpcy5jb22CIiouY29tbW9uZGF0YXN0b3JhZ2UuZ29vZ2xlYXBpcy5jb22CFnN0b3JhZ2UuZ29vZ2xlYXBpcy5jb22CGXN0b3JhZ2UtcDIuZ29vZ2xlYXBpcy5jb22CGyouc3RvcmFnZS1wMi5nb29nbGVhcGlzLmNvbYIbc3RvcmFnZS5tdGxzLmdvb2dsZWFwaXMuY29tgiQqLmFwcHNwb3QuY29tLnN0b3JhZ2UuZ29vZ2xlYXBpcy5jb22CICouY29udGVudC1zdG9yYWdlLmdvb2dsZWFwaXMuY29tgiMqLmNvbnRlbnQtc3RvcmFnZS1wMi5nb29nbGVhcGlzLmNvbYInKi5jb250ZW50LXN0b3JhZ2UtdXBsb2FkLmdvb2dsZWFwaXMuY29tgikqLmNvbnRlbnQtc3RvcmFnZS1kb3dubG9hZC5nb29nbGVhcGlzLmNvbYIfKi5zdG9yYWdlLXVwbG9hZC5nb29nbGVhcGlzLmNvbYIhKi5zdG9yYWdlLWRvd25sb2FkLmdvb2dsZWFwaXMuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMDYGA1UdHwQvMC0wK6ApoCeGJWh0dHA6Ly9jLnBraS5nb29nL3dyMi85VVZiTjB3NUU2WS5jcmwwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQCWl2S/VViXrfdDh2g3CEJ36fA61fak8zZuRqQ/D8qpxgAAAZzR9XGqAAAEAwBGMEQCIQCl0NQ4nhXsuoW3F4pSbMQ1tt6ofg92DkXnp5W6xXGhugIfSpLp4Ds+h1fP6WLsBm5BrjyY3LPozx6CIU6+2nmi4gB2AMs49xWJfIShRF9bwd37yW7ymlnNRwppBYWwyxTDFFjnAAABnNH1cdoAAAQDAEcwRQIgY5QOEmc5o+kQpW5CPHqLCSs6ptb2LlJovMiWWt382aECIQDdj9dVY++9FA+I7WvywEcpjX6tKihBTygi0cYs5UObnjANBgkqhkiG9w0BAQsFAAOCAQEACKOeI2NcLliKWGYuKes8YjbaWQa7bPZMtIziKkS7wxCKJ8OXdFLGaCLWhXd6A3vEPgaysyC+prEr9fG6p6/Td6UovnBInd1TgXofqyYCivLTohABGxVm2Ft9wA/+/U56nkomM2G+QTFwuCBcmSxWTlDZSY7bEccxeLTFda2AqmCxLsTzjbrLMXIyi3yn+I1IunQaqhd9N7ihuLi+qxqXrY4WL8ftxy2yVCSYIki8zEYoiZnuOew115Cu5CC+TjTDRERoIDim9uvfhU2fMd7KUfb6fVOwSYm2mck04pVlORe+dIFFPlfMVf6kEnAs5O7fHvPfnxOYhdx3pgdxJQJjkg==\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "cert_commonName ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "*.storage.googleapis.com"
          }
,         {
              "id"           : "cert_commonName_wo_SNI ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.storage.googleapis.com"
          }
,         {
              "id"           : "cert_subjectAltName ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.storage.googleapis.com *.googleapis.com commondatastorage.googleapis.com *.commondatastorage.googleapis.com storage.googleapis.com storage-p2.googleapis.com *.storage-p2.googleapis.com storage.mtls.googleapis.com *.appspot.com.storage.googleapis.com *.content-storage.googleapis.com *.content-storage-p2.googleapis.com *.content-storage-upload.googleapis.com *.content-storage-download.googleapis.com *.storage-upload.googleapis.com *.storage-download.googleapis.com"
          }
,         {
              "id"           : "cert_trust ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "Ok via SAN wildcard and CN wildcard (same w/o SNI)"
          }
,         {
              "id"           : "cert_trust _wildcard",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "trust is via wildcard"
          }
,         {
              "id"           : "cert_chain_of_trust ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "passed."
          }
,         {
              "id"           : "cert_certificatePolicies_EV ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_expirationStatus ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "60 >= 60 days"
          }
,         {
              "id"           : "cert_notBefore ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2026-03-09 08:37"
          }
,         {
              "id"           : "cert_notAfter ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2026-06-01 08:37"
          }
,         {
              "id"           : "cert_extlifeSpan ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "certificate has no extended life time according to browser forum"
          }
,         {
              "id"           : "cert_eTLS ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not present"
          }
,         {
              "id"           : "cert_crlDistributionPoints ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://c.pki.goog/wr2/9UVbN0w5E6Y.crl"
          }
,         {
              "id"           : "cert_ocspURL ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://o.pki.goog/wr2"
          }
,         {
              "id"           : "OCSP_stapling ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "not offered"
          }
,         {
              "id"           : "cert_mustStapleExtension ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "--"
          }
,         {
              "id"           : "DNS_CAArecord ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "issue=pki.goog"
          }
,         {
              "id"           : "certificate_transparency ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "yes (certificate extension)"
          }
,         {
              "id"           : "certs_countServer ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "3"
          }
,         {
              "id"           : "certs_list_ordering_problem ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_caIssuers ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "WR2 (Google Trust Services from US)"
          }
,         {
              "id"           : "intermediate_cert <#1> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#1> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "E6FE22BF45E4F0D3B85C59E02C0F495418E1EB8D3210F788D48CD5E1CB547CD4"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#1> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2023-12-13 09:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#1> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2029-02-20 14:00"
          }
,         {
              "id"           : "intermediate_cert_expiration <#1> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#1> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "WR2 <-- GTS Root R1"
          }
,         {
              "id"           : "intermediate_cert <#2> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\nMIIFYjCCBEqgAwIBAgIQd70NbNs2+RrqIQ/E8FjTDTANBgkqhkiG9w0BAQsFADBXMQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEQMA4GA1UECxMHUm9vdCBDQTEbMBkGA1UEAxMSR2xvYmFsU2lnbiBSb290IENBMB4XDTIwMDYxOTAwMDA0MloXDTI4MDEyODAwMDA0MlowRzELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBMTEMxFDASBgNVBAMTC0dUUyBSb290IFIxMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAthECix7joXebO9y/lD63ladAPKH9gvl9MgaCcfb2jH/76Nu8ai6Xl6OMS/kr9rH5zoQdsfnFl97vufKj6bwSiV6nqlKr+CMny6SxnGPb15l+8Ape62im9MZaRw1NEDPjTrETo8gYbEvs/AmQ351kKSUjB6G00j0uYODP0gmHu81I8E3CwnqIiru6z1kZ1q+PsAewnjHxgsHA3y6mbWwZDrXYfiYaRQM9sHmklCitD38m5agI/pboPGiUU+6DOogrFZYJsuB6jC511pzrp1Zkj5ZPaK49l8KEj8C8QMALXL32h7M1bKwYUH+E4EzNktMg6TO8UpmvMrUpsyUqtEj5cuHKZPfmghCN6J3Cioj6OGaK/GP5Afl4/Xtcd/p2h/rs37EOeZVXtL0m79YB0esWCruOC7XFxYpVq9Os6pFLKcwZpDIlTirxZUTQAs6qzkm06p98g7BAe+dDq6dso499iYH6TKX/1Y7DzkvgtdizjkXPdsDtQCv9Uw+wp9U7DbGKogPeMa3Md+pvez7W35EiEua++tgy/BBjFFFy3l3WFpO9KWgz7zpm7AeKJt8T11dleCfeXkkUAKIAf5qoIbapsZWwpbkNFhHax2xIPEDgfg1azVY80ZcFuctL7TlLnMQ/0lUTbiSw1nH69MG6zO0b9f6BQdgAmD06yK56mDcYBZUCAwEAAaOCATgwggE0MA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTkrysmcRorSCeFL1JmLO/wiRNxPjAfBgNVHSMEGDAWgBRge2YaRQ2XyolQL30EzTSo//z9SzBgBggrBgEFBQcBAQRUMFIwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnBraS5nb29nL2dzcjEwKQYIKwYBBQUHMAKGHWh0dHA6Ly9wa2kuZ29vZy9nc3IxL2dzcjEuY3J0MDIGA1UdHwQrMCkwJ6AloCOGIWh0dHA6Ly9jcmwucGtpLmdvb2cvZ3NyMS9nc3IxLmNybDA7BgNVHSAENDAyMAgGBmeBDAECATAIBgZngQwBAgIwDQYLKwYBBAHWeQIFAwIwDQYLKwYBBAHWeQIFAwMwDQYJKoZIhvcNAQELBQADggEBADSkHrEoo9C0dhemMXoh6dFSPsjbdBZBiLg9NR3t5P+T4Vxfq7vqfM/b5A3Ri1fyJm9bvhdGaJQ3b2t6yMAYN/olUazsaL+yyEn9WprKASOshIArAoyZl+tJaox118fessmXn1hIVw41oeQa1v1vg4Fv74zPl6/AhSrw9U5pCZEt4Wi4wStz6dTZ/CLANx8LZh1J7QJVj2fhMtfTJr9w4z30Z209fOU0iOMy+qduBmpvvYuR7hZL6Dupszfnw0Skfths18dG9ZKb59UhvmaSGZRVbNQpsg3BZlvid0lIKO2d1xozclOzgjXPYovJJIultzkMu34qQb9Sz/yilrbCgj8=\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#2> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "3EE0278DF71FA3C125C4CD487F01D774694E6FC57E0CD94C24EFD769133918E5"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#2> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2020-06-19 00:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#2> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2028-01-28 00:00"
          }
,         {
              "id"           : "intermediate_cert_expiration <#2> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#2> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "GTS Root R1 <-- GlobalSign Root CA"
          }
,         {
              "id"           : "intermediate_cert_badOCSP ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "intermediate certificate(s) is/are ok"
          }
,         {
              "id"           : "scanTime",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "12"
          }
]
Feature: CCC.Core.CN01.AR03
Scenario: HTTP redirects to HTTPS @tlp-green @tlp-amber @tlp-red @CCC.Core @CCC.Core.CN01 @PerPort @Behavioural @http @tls @object-storage
Given a client connects to "{hostName}" with protocol "http" on port "80"686µs
And I refer to "{result}" as "connection"30µs
And "{connection}" is not an error63µs
And I transmit "GET / HTTP/1.1\r\nHost: {hostName}\r\n\r\n" to "{connection}"501ms
And I attach "{connection}" to the test output as "HTTP response"113µs
And "{connection.Output}" contains "301"49µs
expected {connection.Output} to contain '301', but got 'HTTP/1.1 403 Forbidden Content-Type: application/xml; charset=UTF-8 X-GUploader-UploadID: AMNfjG3Uqj54_vkt_CdBOzjsXH-0UOQixxTcJsyny4HEz67_5kZW19iUd0L9aZRYYvlK_dPg Content-Length: 300 Date: Wed, 01 Apr 2026 11:04:35 GMT Expires: Wed, 01 Apr 2026 11:04:35 GMT Cache-Control: private, max-age=0 Server: UploadServer AccessDeniedAccess denied.
Anonymous caller does not have storage.objects.list access to the Google Cloud Storage bucket. Permission 'storage.objects.list' denied on resource (or it may not exist).
'
And I call "{connection}" with "Close"25µs
Then "{connection.State}" is "closed"30µs
📎 Attachments:
HTTP response
View JSON (770 bytes)
{"State":"open","Input":{},"Output":"HTTP/1.1 403 Forbidden\r\nContent-Type: application/xml; charset=UTF-8\r\nX-GUploader-UploadID: AMNfjG3Uqj54_vkt_CdBOzjsXH-0UOQixxTcJsyny4HEz67_5kZW19iUd0L9aZRYYvlK_dPg\r\nContent-Length: 300\r\nDate: Wed, 01 Apr 2026 11:04:35 GMT\r\nExpires: Wed, 01 Apr 2026 11:04:35 GMT\r\nCache-Control: private, max-age=0\r\nServer: UploadServer\r\n\r\n\u003c?xml version='1.0' encoding='UTF-8'?\u003e\u003cError\u003e\u003cCode\u003eAccessDenied\u003c/Code\u003e\u003cMessage\u003eAccess denied.\u003c/Message\u003e\u003cDetails\u003eAnonymous caller does not have storage.objects.list access to the Google Cloud Storage bucket. Permission 'storage.objects.list' denied on resource (or it may not exist).\u003c/Details\u003e\u003c/Error\u003e"}
Scenario: Only secure protocols are exposed @tlp-green @tlp-amber @tlp-red @CCC.Core @CCC.Core.CN01 @PerPort @Behavioural @tls @object-storage
Given "report" contains details of SSL Support type "protocols" for "{hostName}" on port "{portNumber}"4s
Then "{report}" is an array of objects with at least the following contents219µs
idseverity
TLS1_2OK
TLS1_3OK
📎 Attachments:
testssl_protocols_ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com_443.json
View JSON (4254 bytes)
[
         {
              "id"           : "engine_problem",
              "ip"           : "/",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "No engine or GOST support via engine with your /opt/testssl/bin/openssl.Linux.x86_64"
          }
,         {
              "id"           : "service",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "HTTP"
          }
,         {
              "id"           : "pre_128cipher",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "No 128 cipher limit bug"
          }
,         {
              "id"           : "SSLv2",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "not offered"
          }
,         {
              "id"           : "SSLv3",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "not offered"
          }
,         {
              "id"           : "TLS1",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "offered (deprecated)"
          }
,         {
              "id"           : "TLS1_1",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "offered (deprecated)"
          }
,         {
              "id"           : "TLS1_2",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "offered"
          }
,         {
              "id"           : "TLS1_3",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "offered with final"
          }
,         {
              "id"           : "QUIC",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "not tested due to lack of local OpenSSL support"
          }
,         {
              "id"           : "NPN",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "offered with grpc-exp, h2, http/1.1, http/1.0 (advertised)"
          }
,         {
              "id"           : "ALPN_HTTP2",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "h2"
          }
,         {
              "id"           : "ALPN",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http/1.1grpc-exp"
          }
,         {
              "id"           : "scanTime",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.250.189.123",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "3"
          }
]
Feature: CCC.Core.CN01.AR07
Scenario: Verify HTTPS uses IANA-assigned port 443 @tlp-clear @tlp-green @tlp-amber @tlp-red @CCC.Core @CCC.Core.CN01 @Behavioural @PerPort @http @tls @object-storage
Then "{portNumber}" is "443"25µs
Feature: CCC.Core.CN01.AR08
Scenario: Verify mTLS requires client certificate authentication @tls @tlp-amber @tlp-red @CCC.Core @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given "report" contains details of SSL Support type "server-defaults" for "{hostName}" on port "{portNumber}"12s
Then "{report}" is an array of objects with at least the following contents1ms
idfinding
clientAuthrequired
expected row not found: map[finding:required id:clientAuth]
📎 Attachments:
testssl_server-defaults_ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com_443.json
View JSON (46639 bytes)
[
         {
              "id"           : "engine_problem",
              "ip"           : "/",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "No engine or GOST support via engine with your /opt/testssl/bin/openssl.Linux.x86_64"
          }
,         {
              "id"           : "service",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "HTTP"
          }
,         {
              "id"           : "pre_128cipher",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "No 128 cipher limit bug"
          }
,         {
              "id"           : "TLS_extensions",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "'EC point formats/#11' 'application layer protocol negotiation/#16' 'extended master secret/#23' 'session ticket/#35' 'supported versions/#43' 'key share/#51' 'next protocol/#13172' 'renegotiation info/#65281'"
          }
,         {
              "id"           : "TLS_misses_extension_23",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Extended master secret extension detected"
          }
,         {
              "id"           : "TLS_session_ticket",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "valid for 100800 seconds (>daily)"
          }
,         {
              "id"           : "SSL_sessionID_support",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "yes"
          }
,         {
              "id"           : "sessionresumption_ticket",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "supported"
          }
,         {
              "id"           : "sessionresumption_ID",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not supported"
          }
,         {
              "id"           : "early_data",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "HIGH",
              "finding"      : "supported"
          }
,         {
              "id"           : "TLS_timestamp",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "off by 0 seconds from your localtime"
          }
,         {
              "id"           : "certificate_compression",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "none"
          }
,         {
              "id"           : "clientAuth",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "none"
          }
,         {
              "id"           : "cert_numbers",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2"
          }
,         {
              "id"           : "cert_signatureAlgorithm ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "SHA256 with RSA"
          }
,         {
              "id"           : "cert_keySize ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "RSA 2048 bits (exponent is 65537)"
          }
,         {
              "id"           : "cert_keyUsage ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Digital Signature, Key Encipherment"
          }
,         {
              "id"           : "cert_extKeyUsage ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "TLS Web Server Authentication"
          }
,         {
              "id"           : "cert_serialNumber ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "E49EAEC928E9C0A10985360D4FFF8BA3"
          }
,         {
              "id"           : "cert_serialNumberLen ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "16"
          }
,         {
              "id"           : "cert_fingerprintSHA1 ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "C805EEE2FCB071D237B982287C2BDBD2E616D851"
          }
,         {
              "id"           : "cert_fingerprintSHA256 ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "033C1B8A6C9EB5EC4B9DC0C45CE799B7D8536BC4D02509FCAF5F9DD65D9F1E49"
          }
,         {
              "id"           : "cert ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "cert_commonName ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "*.storage.googleapis.com"
          }
,         {
              "id"           : "cert_commonName_wo_SNI ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.storage.googleapis.com"
          }
,         {
              "id"           : "cert_subjectAltName ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.storage.googleapis.com *.googleapis.com commondatastorage.googleapis.com *.commondatastorage.googleapis.com storage.googleapis.com storage-p2.googleapis.com *.storage-p2.googleapis.com storage.mtls.googleapis.com *.appspot.com.storage.googleapis.com *.content-storage.googleapis.com *.content-storage-p2.googleapis.com *.content-storage-upload.googleapis.com *.content-storage-download.googleapis.com *.storage-upload.googleapis.com *.storage-download.googleapis.com"
          }
,         {
              "id"           : "cert_trust ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "Ok via SAN wildcard and CN wildcard (same w/o SNI)"
          }
,         {
              "id"           : "cert_trust _wildcard",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "trust is via wildcard"
          }
,         {
              "id"           : "cert_chain_of_trust ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "passed."
          }
,         {
              "id"           : "cert_certificatePolicies_EV ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_expirationStatus ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "60 >= 60 days"
          }
,         {
              "id"           : "cert_notBefore ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2026-03-09 08:37"
          }
,         {
              "id"           : "cert_notAfter ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2026-06-01 08:37"
          }
,         {
              "id"           : "cert_extlifeSpan ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "certificate has no extended life time according to browser forum"
          }
,         {
              "id"           : "cert_eTLS ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not present"
          }
,         {
              "id"           : "cert_crlDistributionPoints ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://c.pki.goog/wr2/9UVbN0w5E6Y.crl"
          }
,         {
              "id"           : "cert_ocspURL ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://o.pki.goog/wr2"
          }
,         {
              "id"           : "OCSP_stapling ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "not offered"
          }
,         {
              "id"           : "cert_mustStapleExtension ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "--"
          }
,         {
              "id"           : "DNS_CAArecord ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "issue=pki.goog"
          }
,         {
              "id"           : "certificate_transparency ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "yes (certificate extension)"
          }
,         {
              "id"           : "certs_countServer ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "3"
          }
,         {
              "id"           : "certs_list_ordering_problem ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_caIssuers ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "WR2 (Google Trust Services from US)"
          }
,         {
              "id"           : "intermediate_cert <#1> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\nMIIFCzCCAvOgAwIBAgIQf/AFoHxM3tEArZ1mpRB7mDANBgkqhkiG9w0BAQsFADBHMQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExMQzEUMBIGA1UEAxMLR1RTIFJvb3QgUjEwHhcNMjMxMjEzMDkwMDAwWhcNMjkwMjIwMTQwMDAwWjA7MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZpY2VzMQwwCgYDVQQDEwNXUjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp/5x/RR5wqFOfytnlDd5GV1d9vI+aWqxG8YSau5HbyfsvAfuSCQAWXqAc+MGr+XgvSszYhaLYWTwO0xj7sfUkDSbutltkdnwUxy96zqhMt/TZCPzfhyM1IKjiaeKMTj+xWfpgoh6zySBTGYLKNlNtYE3pAJH8do1cCA8Kwtzxc2vFE24KT3rC8gIcLrRjg9ox9i11MLL7q8Ju26nADrn5Z9TDJVd06wW06Y613ijNzHoU5HEDy01hLmFXxRmpC5iEGuh5KdmyjS//V2pm4M6rlagplmNwEmceOuHbsCFx13ye/aoXbv4r+zgXFNFmp6+atXDMyGOBOozAKql2N87jAgMBAAGjgf4wgfswDgYDVR0PAQH/BAQDAgGGMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjASBgNVHRMBAf8ECDAGAQH/AgEAMB0GA1UdDgQWBBTeGx7teRXUPjckwyG77DQ5bUKyMDAfBgNVHSMEGDAWgBTkrysmcRorSCeFL1JmLO/wiRNxPjA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUHMAKGGGh0dHA6Ly9pLnBraS5nb29nL3IxLmNydDArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vYy5wa2kuZ29vZy9yL3IxLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATANBgkqhkiG9w0BAQsFAAOCAgEARXWL5R87RBOWGqtY8TXJbz3S0DNKhjO6V1FP7sQ02hYSTL8Tnw3UVOlIecAwPJQl8hr0ujKUtjNyC4XuCRElNJThb0Lbgpt7fyqaqf9/qdLeSiDLs/sDA7j4BwXaWZIvGEaYzq9yviQmsR4ATb0IrZNBRAq7x9UBhb+TV+PfdBJTDhEl05vc3ssnbrPCuTNiOcLgNeFbpwkuGcuRKnZc8d/KI4RApW//mkHgte8y0YWuryUJ8GLFbsLIbjL9uNrizkqRSvOFVU6xddZIMy9vhNkSXJ/UcZhjJY1pXAprffJBvei7j+Qi151lRehMCofa6WBmiA4fx+FOVsV2/7R6V2nyAiIJJkEd2nSi5SnzxJrlXdaqev3htytmOPvoKWa676ATL/hzfvDaQBEcXd2Ppvy+275W+DKcH0FBbX62xevGiza3F4ydzxl6NJ8hk8R+dDXSqv1MbRT1ybB5W0k8878XSOjvmiYTDIfyc9acxVJrY/cykHipa+te1pOhv7wYPYtZ9orGBV5SGOJm4NrB3K1aJar0RfzxC3ikr7Dyc6QwqDTBU39CluVIQeuQRgwG3MuSxl7zRERDRilGoKb8uY45JzmxWuKxrfwT/478JuHU/oTxUFqOl2stKnn7QGTq8z29W+GgBLCXSBxC9epaHM0myFH/FJlniXJfHeytWt0=\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#1> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "E6FE22BF45E4F0D3B85C59E02C0F495418E1EB8D3210F788D48CD5E1CB547CD4"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#1> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2023-12-13 09:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#1> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2029-02-20 14:00"
          }
,         {
              "id"           : "intermediate_cert_expiration <#1> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#1> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "WR2 <-- GTS Root R1"
          }
,         {
              "id"           : "intermediate_cert <#2> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#2> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "3EE0278DF71FA3C125C4CD487F01D774694E6FC57E0CD94C24EFD769133918E5"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#2> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2020-06-19 00:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#2> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2028-01-28 00:00"
          }
,         {
              "id"           : "intermediate_cert_expiration <#2> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#2> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "GTS Root R1 <-- GlobalSign Root CA"
          }
,         {
              "id"           : "intermediate_cert_badOCSP ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "intermediate certificate(s) is/are ok"
          }
,         {
              "id"           : "cert_signatureAlgorithm ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "SHA256 with RSA"
          }
,         {
              "id"           : "cert_keySize ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "EC 256 bits (curve P-256)"
          }
,         {
              "id"           : "cert_keyUsage ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Digital Signature"
          }
,         {
              "id"           : "cert_extKeyUsage ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "TLS Web Server Authentication"
          }
,         {
              "id"           : "cert_serialNumber ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "647F256EBB1F8AFE090AA7D6F7616B8A"
          }
,         {
              "id"           : "cert_serialNumberLen ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "16"
          }
,         {
              "id"           : "cert_fingerprintSHA1 ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "125BBEDAE43B2607E946B1578134D16372B6D50A"
          }
,         {
              "id"           : "cert_fingerprintSHA256 ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "9A508B3922167684652C79AD60BD17925C874CB5FC784EBFAD1CAF1151F53795"
          }
,         {
              "id"           : "cert ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "cert_commonName ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "*.storage.googleapis.com"
          }
,         {
              "id"           : "cert_commonName_wo_SNI ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.storage.googleapis.com"
          }
,         {
              "id"           : "cert_subjectAltName ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.storage.googleapis.com *.googleapis.com commondatastorage.googleapis.com *.commondatastorage.googleapis.com storage.googleapis.com storage-p2.googleapis.com *.storage-p2.googleapis.com storage.mtls.googleapis.com *.appspot.com.storage.googleapis.com *.content-storage.googleapis.com *.content-storage-p2.googleapis.com *.content-storage-upload.googleapis.com *.content-storage-download.googleapis.com *.storage-upload.googleapis.com *.storage-download.googleapis.com"
          }
,         {
              "id"           : "cert_trust ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "Ok via SAN wildcard and CN wildcard (same w/o SNI)"
          }
,         {
              "id"           : "cert_trust _wildcard",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "trust is via wildcard"
          }
,         {
              "id"           : "cert_chain_of_trust ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "passed."
          }
,         {
              "id"           : "cert_certificatePolicies_EV ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_expirationStatus ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "60 >= 60 days"
          }
,         {
              "id"           : "cert_notBefore ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2026-03-09 08:37"
          }
,         {
              "id"           : "cert_notAfter ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2026-06-01 08:37"
          }
,         {
              "id"           : "cert_extlifeSpan ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "certificate has no extended life time according to browser forum"
          }
,         {
              "id"           : "cert_eTLS ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not present"
          }
,         {
              "id"           : "cert_crlDistributionPoints ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://c.pki.goog/wr2/9UVbN0w5E6Y.crl"
          }
,         {
              "id"           : "cert_ocspURL ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://o.pki.goog/wr2"
          }
,         {
              "id"           : "OCSP_stapling ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "not offered"
          }
,         {
              "id"           : "cert_mustStapleExtension ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "--"
          }
,         {
              "id"           : "DNS_CAArecord ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "issue=pki.goog"
          }
,         {
              "id"           : "certificate_transparency ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "yes (certificate extension)"
          }
,         {
              "id"           : "certs_countServer ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "3"
          }
,         {
              "id"           : "certs_list_ordering_problem ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_caIssuers ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "WR2 (Google Trust Services from US)"
          }
,         {
              "id"           : "intermediate_cert <#1> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#1> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "E6FE22BF45E4F0D3B85C59E02C0F495418E1EB8D3210F788D48CD5E1CB547CD4"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#1> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2023-12-13 09:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#1> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2029-02-20 14:00"
          }
,         {
              "id"           : "intermediate_cert_expiration <#1> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#1> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "WR2 <-- GTS Root R1"
          }
,         {
              "id"           : "intermediate_cert <#2> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#2> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "3EE0278DF71FA3C125C4CD487F01D774694E6FC57E0CD94C24EFD769133918E5"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#2> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2020-06-19 00:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#2> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2028-01-28 00:00"
          }
,         {
              "id"           : "intermediate_cert_expiration <#2> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#2> ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "GTS Root R1 <-- GlobalSign Root CA"
          }
,         {
              "id"           : "intermediate_cert_badOCSP ",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "intermediate certificate(s) is/are ok"
          }
,         {
              "id"           : "scanTime",
              "ip"           : "ccc-test-bucket-nodal-time-474015-p5.storage.googleapis.com/142.251.210.219",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "12"
          }
]