🥒 CCC.ObjStor Test: nodal-time-474015-p5-bucket

Test Parameters

PortNumber443
HostNamenodal-time-474015-p5-bucket.storage.googleapis.com
Protocolhttps
ServiceTypeobject-storage
ProviderServiceTypestorage.googleapis.com/Bucket
CatalogTypesCCC.ObjStor
TagFilter@object-storage, @PerPort, @tls, ~@ftp, ~@telnet, ~@ssh, ~@smtp, ~@dns, ~@ldap
UIDprojects/nodal-time-474015-p5/buckets/nodal-time-474015-p5-bucket
ResourceNamenodal-time-474015-p5-bucket
ReportFilenodal-time-474015-p5-bucket-port
ReportTitlenodal-time-474015-p5-bucket.storage.googleapis.com:443
Instance
{
  "ID": "main-gcp",
  "Properties": {
    "Provider": "gcp",
    "Region": "us-central1",
    "AzureResourceGroup": "",
    "AzureSubscriptionID": "",
    "GcpProjectId": "nodal-time-474015-p5"
  },
  "Services": [
    {
      "Type": "object-storage",
      "Properties": {
        "object-storage-retention-period-seconds": 172800
      }
    },
    {
      "Type": "logging",
      "Properties": {
        "gcp-log-bucket-name": "cfi-test-log-bucket"
      }
    }
  ],
  "Rules": {
    "permitted-project-ids": "",
    "permitted-regions": [
      "us-central1"
    ]
  }
}
GcpLogBucketNamecfi-test-log-bucket
GcpProjectIdnodal-time-474015-p5
ObjectStorageRetentionPeriodSeconds172800
PermittedRegions
[
  "us-central1"
]
Providergcp
Regionus-central1

Summary

Generated: 2026-03-24 12:33:13

Total Run Time: 1m10s

Features: 4

Scenarios: 11 (✅ 7 | ❌ 4)

Steps: 45 (✅ 38 | ❌ 4 | ⏭️ 3 | ❓ 0)

Feature: CCC.Core.CN01.AR01
Scenario: Service accepts TLS 1.3 encrypted traffic @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"34µs
Given an openssl s_client request using "tls1_3" to "{portNumber}" on "{hostName}" protocol "{protocol}"637µs
And I refer to "{result}" as "connection"22µs
And "{connection}" state is open26µs
And "{connection.State}" is "open"28µs
And I close connection "{connection}"32µs
Then "{connection}" state is closed46µs
Scenario: Service rejects TLS 1.2 traffic @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"41µs
Given an openssl s_client request using "tls1_2" to "{portNumber}" on "{hostName}" protocol "{protocol}"464µs
And I refer to "{result}" as "connection"24µs
And we wait for a period of "40" ms41ms
Then "{connection.State}" is "closed"26µs
Scenario: Service rejects TLS 1.1 traffic @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"30µs
Given an openssl s_client request using "tls1_1" to "{portNumber}" on "{hostName}" protocol "{protocol}"549µs
And I refer to "{result}" as "connection"23µs
And we wait for a period of "40" ms41ms
Then "{connection.State}" is "closed"29µs
Scenario: Service rejects TLS 1.0 traffic @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"32µs
Given an openssl s_client request using "tls1" to "{portNumber}" on "{hostName}" protocol "{protocol}"572µs
And I refer to "{result}" as "connection"25µs
And we wait for a period of "40" ms41ms
Then "{connection.State}" is "closed"27µs
Scenario: Verify SSL/TLS protocol support @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"38µs
Given "report" contains details of SSL Support type "protocols" for "{hostName}" on port "{portNumber}"6s
Then "{report}" is an array of objects which doesn't contain any of702µs
idfinding
SSLv2offered
SSLv3offered
TLS1offered
TLS1_1offered
TLS1_2offered
unwanted row found in array: map[finding:offered id:TLS1_2]
And "{report}" is an array of objects with at least the following contents15µs
idfinding
TLS1_3offered with final
📎 Attachments:
testssl_protocols_nodal-time-474015-p5-bucket.storage.googleapis.com_443.json
View JSON (4137 bytes)
[
         {
              "id"           : "engine_problem",
              "ip"           : "/",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "No engine or GOST support via engine with your /opt/testssl/bin/openssl.Linux.x86_64"
          }
,         {
              "id"           : "service",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/172.253.122.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "HTTP"
          }
,         {
              "id"           : "pre_128cipher",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/172.253.122.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "No 128 cipher limit bug"
          }
,         {
              "id"           : "SSLv2",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/172.253.122.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "not offered"
          }
,         {
              "id"           : "SSLv3",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/172.253.122.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "not offered"
          }
,         {
              "id"           : "TLS1",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/172.253.122.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "offered (deprecated)"
          }
,         {
              "id"           : "TLS1_1",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/172.253.122.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "offered (deprecated)"
          }
,         {
              "id"           : "TLS1_2",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/172.253.122.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "offered"
          }
,         {
              "id"           : "TLS1_3",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/172.253.122.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "offered with final"
          }
,         {
              "id"           : "QUIC",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/172.253.122.207",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "not tested due to lack of local OpenSSL support"
          }
,         {
              "id"           : "NPN",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/172.253.122.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "offered with grpc-exp, h2, http/1.1, http/1.0 (advertised)"
          }
,         {
              "id"           : "ALPN_HTTP2",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/172.253.122.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "h2"
          }
,         {
              "id"           : "ALPN",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/172.253.122.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http/1.1grpc-exp"
          }
,         {
              "id"           : "scanTime",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/172.253.122.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "5"
          }
]
Scenario: Verify no known SSL/TLS vulnerabilities @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"34µs
Given "report" contains details of SSL Support type "vulnerable" for "{hostName}" on port "{portNumber}"25s
Then "{report}" is an array of objects with at least the following contents470µs
idseverity
heartbleedOK
CCSOK
ticketbleedOK
ROBOTOK
secure_renegoOK
📎 Attachments:
testssl_vulnerable_nodal-time-474015-p5-bucket.storage.googleapis.com_443.json
View JSON (10193 bytes)
[
         {
              "id"           : "engine_problem",
              "ip"           : "/",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "No engine or GOST support via engine with your /opt/testssl/bin/openssl.Linux.x86_64"
          }
,         {
              "id"           : "service",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "HTTP"
          }
,         {
              "id"           : "pre_128cipher",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "No 128 cipher limit bug"
          }
,         {
              "id"           : "heartbleed",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2014-0160",
              "cwe"          : "CWE-119",
              "finding"      : "not vulnerable, no heartbeat extension"
          }
,         {
              "id"           : "CCS",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2014-0224",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "ticketbleed",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2016-9244",
              "cwe"          : "CWE-200",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "opossum",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2025-49812",
              "cwe"          : "CWE-287",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "ROBOT",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168",
              "cwe"          : "CWE-203",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "secure_renego",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "cwe"          : "CWE-310",
              "finding"      : "supported"
          }
,         {
              "id"           : "secure_client_renego",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2011-1473",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "CRIME_TLS",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2012-4929",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "BREACH",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2013-3587",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable, no gzip/deflate/compress/br HTTP compression  - only supplied '/' tested"
          }
,         {
              "id"           : "POODLE_SSL",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2014-3566",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "fallback_SCSV",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "supported"
          }
,         {
              "id"           : "SWEET32",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "LOW",
              "cve"          : "CVE-2016-2183 CVE-2016-6329",
              "cwe"          : "CWE-327",
              "finding"      : "uses 64 bit block ciphers"
          }
,         {
              "id"           : "FREAK",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2015-0204",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "DROWN",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2016-0800 CVE-2016-0703",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable on this host and port"
          }
,         {
              "id"           : "DROWN_hint",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "cve"          : "CVE-2016-0800 CVE-2016-0703",
              "cwe"          : "CWE-310",
              "finding"      : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=7F2C5F007F1AE84FAD7036D940238CF84435AE8AB1D8B448ED96259F7A8E78E5"
          }
,         {
              "id"           : "LOGJAM",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2015-4000",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable, no DH EXPORT ciphers,"
          }
,         {
              "id"           : "LOGJAM-common_primes",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2015-4000",
              "cwe"          : "CWE-310",
              "finding"      : "no DH key with <= TLS 1.2"
          }
,         {
              "id"           : "BEAST_CBC_TLS1",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "MEDIUM",
              "cve"          : "CVE-2011-3389",
              "cwe"          : "CWE-20",
              "finding"      : "ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-SHA ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA AES128-SHA AES256-SHA DES-CBC3-SHA"
          }
,         {
              "id"           : "BEAST",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "LOW",
              "cve"          : "CVE-2011-3389",
              "cwe"          : "CWE-20",
              "finding"      : "VULNERABLE -- but also supports higher protocols  TLSv1.1 TLSv1.2 (likely mitigated)"
          }
,         {
              "id"           : "LUCKY13",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "LOW",
              "cve"          : "CVE-2013-0169",
              "cwe"          : "CWE-310",
              "finding"      : "potentially vulnerable, uses TLS CBC ciphers"
          }
,         {
              "id"           : "winshock",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2014-6321",
              "cwe"          : "CWE-94",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "RC4",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2013-2566 CVE-2015-2808",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "scanTime",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "25"
          }
]
Scenario: Verify TLS 1.3 only certificate validity @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"32µs
Given "report" contains details of SSL Support type "server-defaults" for "{hostName}" on port "{portNumber}"17s
Then "{report}" is an array of objects with at least the following contents1ms
idseverity
cert_expirationStatusOK
cert_chain_of_trustOK
expected row not found: map[id:cert_expirationStatus severity:OK]
📎 Attachments:
testssl_server-defaults_nodal-time-474015-p5-bucket.storage.googleapis.com_443.json
View JSON (45773 bytes)
[
         {
              "id"           : "engine_problem",
              "ip"           : "/",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "No engine or GOST support via engine with your /opt/testssl/bin/openssl.Linux.x86_64"
          }
,         {
              "id"           : "service",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "HTTP"
          }
,         {
              "id"           : "pre_128cipher",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "No 128 cipher limit bug"
          }
,         {
              "id"           : "TLS_extensions",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "'EC point formats/#11' 'application layer protocol negotiation/#16' 'extended master secret/#23' 'session ticket/#35' 'supported versions/#43' 'key share/#51' 'next protocol/#13172' 'renegotiation info/#65281'"
          }
,         {
              "id"           : "TLS_misses_extension_23",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Extended master secret extension detected"
          }
,         {
              "id"           : "TLS_session_ticket",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "valid for 100800 seconds (>daily)"
          }
,         {
              "id"           : "SSL_sessionID_support",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "yes"
          }
,         {
              "id"           : "sessionresumption_ticket",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "supported"
          }
,         {
              "id"           : "sessionresumption_ID",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not supported"
          }
,         {
              "id"           : "early_data",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "HIGH",
              "finding"      : "supported"
          }
,         {
              "id"           : "TLS_timestamp",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "off by 0 seconds from your localtime"
          }
,         {
              "id"           : "certificate_compression",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "none"
          }
,         {
              "id"           : "clientAuth",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "none"
          }
,         {
              "id"           : "cert_numbers",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2"
          }
,         {
              "id"           : "cert_signatureAlgorithm ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "SHA256 with RSA"
          }
,         {
              "id"           : "cert_keySize ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "RSA 2048 bits (exponent is 65537)"
          }
,         {
              "id"           : "cert_keyUsage ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Digital Signature, Key Encipherment"
          }
,         {
              "id"           : "cert_extKeyUsage ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "TLS Web Server Authentication"
          }
,         {
              "id"           : "cert_serialNumber ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "EB7C0DEE5366D1660A2BE16F518D4FC9"
          }
,         {
              "id"           : "cert_serialNumberLen ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "16"
          }
,         {
              "id"           : "cert_fingerprintSHA1 ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "904CEA3AD0FDF76F6D3D44F923654B8B57E7CFE1"
          }
,         {
              "id"           : "cert_fingerprintSHA256 ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "7F2C5F007F1AE84FAD7036D940238CF84435AE8AB1D8B448ED96259F7A8E78E5"
          }
,         {
              "id"           : "cert ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "cert_commonName ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "*.storage.googleapis.com"
          }
,         {
              "id"           : "cert_commonName_wo_SNI ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.storage.googleapis.com"
          }
,         {
              "id"           : "cert_subjectAltName ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.storage.googleapis.com *.googleapis.com commondatastorage.googleapis.com *.commondatastorage.googleapis.com storage.googleapis.com storage-p2.googleapis.com *.storage-p2.googleapis.com storage.mtls.googleapis.com *.appspot.com.storage.googleapis.com *.content-storage.googleapis.com *.content-storage-p2.googleapis.com *.content-storage-upload.googleapis.com *.content-storage-download.googleapis.com *.storage-upload.googleapis.com *.storage-download.googleapis.com"
          }
,         {
              "id"           : "cert_trust ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "Ok via SAN wildcard and CN wildcard (same w/o SNI)"
          }
,         {
              "id"           : "cert_trust _wildcard",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "trust is via wildcard"
          }
,         {
              "id"           : "cert_chain_of_trust ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "passed."
          }
,         {
              "id"           : "cert_certificatePolicies_EV ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_expirationStatus ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "MEDIUM",
              "finding"      : "expires < 60 days (55)"
          }
,         {
              "id"           : "cert_notBefore ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2026-02-23 18:20"
          }
,         {
              "id"           : "cert_notAfter ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "MEDIUM",
              "finding"      : "2026-05-18 18:20"
          }
,         {
              "id"           : "cert_extlifeSpan ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "certificate has no extended life time according to browser forum"
          }
,         {
              "id"           : "cert_eTLS ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not present"
          }
,         {
              "id"           : "cert_crlDistributionPoints ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://c.pki.goog/wr2/9UVbN0w5E6Y.crl"
          }
,         {
              "id"           : "cert_ocspURL ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://o.pki.goog/wr2"
          }
,         {
              "id"           : "OCSP_stapling ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "not offered"
          }
,         {
              "id"           : "cert_mustStapleExtension ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "--"
          }
,         {
              "id"           : "DNS_CAArecord ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "issue=pki.goog"
          }
,         {
              "id"           : "certificate_transparency ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "yes (certificate extension)"
          }
,         {
              "id"           : "certs_countServer ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "3"
          }
,         {
              "id"           : "certs_list_ordering_problem ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_caIssuers ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "WR2 (Google Trust Services from US)"
          }
,         {
              "id"           : "intermediate_cert <#1> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#1> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "E6FE22BF45E4F0D3B85C59E02C0F495418E1EB8D3210F788D48CD5E1CB547CD4"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#1> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2023-12-13 09:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#1> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2029-02-20 14:00"
          }
,         {
              "id"           : "intermediate_cert_expiration <#1> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#1> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "WR2 <-- GTS Root R1"
          }
,         {
              "id"           : "intermediate_cert <#2> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#2> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "3EE0278DF71FA3C125C4CD487F01D774694E6FC57E0CD94C24EFD769133918E5"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#2> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2020-06-19 00:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#2> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2028-01-28 00:00"
          }
,         {
              "id"           : "intermediate_cert_expiration <#2> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#2> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "GTS Root R1 <-- GlobalSign Root CA"
          }
,         {
              "id"           : "intermediate_cert_badOCSP ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "intermediate certificate(s) is/are ok"
          }
,         {
              "id"           : "cert_signatureAlgorithm ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "SHA256 with RSA"
          }
,         {
              "id"           : "cert_keySize ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "EC 256 bits (curve P-256)"
          }
,         {
              "id"           : "cert_keyUsage ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Digital Signature"
          }
,         {
              "id"           : "cert_extKeyUsage ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "TLS Web Server Authentication"
          }
,         {
              "id"           : "cert_serialNumber ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "994570545E2BCBF010978FEA02E1B296"
          }
,         {
              "id"           : "cert_serialNumberLen ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "16"
          }
,         {
              "id"           : "cert_fingerprintSHA1 ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "24440F02D7BFC6053CF300A1583501EFDECD11FA"
          }
,         {
              "id"           : "cert_fingerprintSHA256 ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "C1B37001ED5E96BB7241C418F4B1A27A3CDAF8B433A6EA2FC995C289CB6B7A45"
          }
,         {
              "id"           : "cert ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "cert_commonName ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "*.storage.googleapis.com"
          }
,         {
              "id"           : "cert_commonName_wo_SNI ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.storage.googleapis.com"
          }
,         {
              "id"           : "cert_subjectAltName ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.storage.googleapis.com *.googleapis.com commondatastorage.googleapis.com *.commondatastorage.googleapis.com storage.googleapis.com storage-p2.googleapis.com *.storage-p2.googleapis.com storage.mtls.googleapis.com *.appspot.com.storage.googleapis.com *.content-storage.googleapis.com *.content-storage-p2.googleapis.com *.content-storage-upload.googleapis.com *.content-storage-download.googleapis.com *.storage-upload.googleapis.com *.storage-download.googleapis.com"
          }
,         {
              "id"           : "cert_trust ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "Ok via SAN wildcard and CN wildcard (same w/o SNI)"
          }
,         {
              "id"           : "cert_trust _wildcard",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "trust is via wildcard"
          }
,         {
              "id"           : "cert_chain_of_trust ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "passed."
          }
,         {
              "id"           : "cert_certificatePolicies_EV ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_expirationStatus ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "MEDIUM",
              "finding"      : "expires < 60 days (55)"
          }
,         {
              "id"           : "cert_notBefore ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2026-02-23 18:20"
          }
,         {
              "id"           : "cert_notAfter ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "MEDIUM",
              "finding"      : "2026-05-18 18:20"
          }
,         {
              "id"           : "cert_extlifeSpan ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "certificate has no extended life time according to browser forum"
          }
,         {
              "id"           : "cert_eTLS ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not present"
          }
,         {
              "id"           : "cert_crlDistributionPoints ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://c.pki.goog/wr2/GSyT1N4PBrg.crl"
          }
,         {
              "id"           : "cert_ocspURL ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://o.pki.goog/wr2"
          }
,         {
              "id"           : "OCSP_stapling ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "not offered"
          }
,         {
              "id"           : "cert_mustStapleExtension ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "--"
          }
,         {
              "id"           : "DNS_CAArecord ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "issue=pki.goog"
          }
,         {
              "id"           : "certificate_transparency ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "yes (certificate extension)"
          }
,         {
              "id"           : "certs_countServer ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "3"
          }
,         {
              "id"           : "certs_list_ordering_problem ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_caIssuers ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "WR2 (Google Trust Services from US)"
          }
,         {
              "id"           : "intermediate_cert <#1> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#1> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "E6FE22BF45E4F0D3B85C59E02C0F495418E1EB8D3210F788D48CD5E1CB547CD4"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#1> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2023-12-13 09:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#1> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2029-02-20 14:00"
          }
,         {
              "id"           : "intermediate_cert_expiration <#1> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#1> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "WR2 <-- GTS Root R1"
          }
,         {
              "id"           : "intermediate_cert <#2> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#2> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "3EE0278DF71FA3C125C4CD487F01D774694E6FC57E0CD94C24EFD769133918E5"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#2> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2020-06-19 00:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#2> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2028-01-28 00:00"
          }
,         {
              "id"           : "intermediate_cert_expiration <#2> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#2> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "GTS Root R1 <-- GlobalSign Root CA"
          }
,         {
              "id"           : "intermediate_cert_badOCSP ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "intermediate certificate(s) is/are ok"
          }
,         {
              "id"           : "scanTime",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.163.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "17"
          }
]
Feature: CCC.Core.CN01.AR03
Scenario: HTTP redirects to HTTPS @tlp-green @tlp-amber @tlp-red @CCC.Core @CCC.Core.CN01 @PerPort @Behavioural @http @tls @object-storage
Given a client connects to "{hostName}" with protocol "http" on port "80"918µs
And I refer to "{result}" as "connection"43µs
And "{connection}" is not an error36µs
And I transmit "GET / HTTP/1.1\r\nHost: {hostName}\r\n\r\n" to "{connection}"501ms
And I attach "{connection}" to the test output as "HTTP response"99µs
And "{connection.Output}" contains "301"29µs
expected {connection.Output} to contain '301', but got 'HTTP/1.1 403 Forbidden Content-Type: application/xml; charset=UTF-8 X-GUploader-UploadID: AMNfjG1D4E1zbCuEmpCFty-ngpUyMrAxMkdacHWS6hL4SqNfUhJFsattKRqGQkyhvTRKlLaAj_jr6ljSXOP-RA Content-Length: 300 Vary: Origin Date: Tue, 24 Mar 2026 12:34:01 GMT Expires: Tue, 24 Mar 2026 12:34:01 GMT Cache-Control: private, max-age=0 Server: UploadServer AccessDeniedAccess denied.
Anonymous caller does not have storage.objects.list access to the Google Cloud Storage bucket. Permission 'storage.objects.list' denied on resource (or it may not exist).
'
And I call "{connection}" with "Close"22µs
Then "{connection.State}" is "closed"16µs
📎 Attachments:
HTTP response
View JSON (800 bytes)
{"State":"open","Input":{},"Output":"HTTP/1.1 403 Forbidden\r\nContent-Type: application/xml; charset=UTF-8\r\nX-GUploader-UploadID: AMNfjG1D4E1zbCuEmpCFty-ngpUyMrAxMkdacHWS6hL4SqNfUhJFsattKRqGQkyhvTRKlLaAj_jr6ljSXOP-RA\r\nContent-Length: 300\r\nVary: Origin\r\nDate: Tue, 24 Mar 2026 12:34:01 GMT\r\nExpires: Tue, 24 Mar 2026 12:34:01 GMT\r\nCache-Control: private, max-age=0\r\nServer: UploadServer\r\n\r\n\u003c?xml version='1.0' encoding='UTF-8'?\u003e\u003cError\u003e\u003cCode\u003eAccessDenied\u003c/Code\u003e\u003cMessage\u003eAccess denied.\u003c/Message\u003e\u003cDetails\u003eAnonymous caller does not have storage.objects.list access to the Google Cloud Storage bucket. Permission 'storage.objects.list' denied on resource (or it may not exist).\u003c/Details\u003e\u003c/Error\u003e"}
Scenario: Only secure protocols are exposed @tlp-green @tlp-amber @tlp-red @CCC.Core @CCC.Core.CN01 @PerPort @Behavioural @tls @object-storage
Given "report" contains details of SSL Support type "protocols" for "{hostName}" on port "{portNumber}"5s
Then "{report}" is an array of objects with at least the following contents294µs
idseverity
TLS1_2OK
TLS1_3OK
📎 Attachments:
testssl_protocols_nodal-time-474015-p5-bucket.storage.googleapis.com_443.json
View JSON (4137 bytes)
[
         {
              "id"           : "engine_problem",
              "ip"           : "/",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "No engine or GOST support via engine with your /opt/testssl/bin/openssl.Linux.x86_64"
          }
,         {
              "id"           : "service",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/192.178.218.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "HTTP"
          }
,         {
              "id"           : "pre_128cipher",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/192.178.218.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "No 128 cipher limit bug"
          }
,         {
              "id"           : "SSLv2",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/192.178.218.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "not offered"
          }
,         {
              "id"           : "SSLv3",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/192.178.218.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "not offered"
          }
,         {
              "id"           : "TLS1",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/192.178.218.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "offered (deprecated)"
          }
,         {
              "id"           : "TLS1_1",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/192.178.218.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "offered (deprecated)"
          }
,         {
              "id"           : "TLS1_2",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/192.178.218.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "offered"
          }
,         {
              "id"           : "TLS1_3",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/192.178.218.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "offered with final"
          }
,         {
              "id"           : "QUIC",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/192.178.218.207",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "not tested due to lack of local OpenSSL support"
          }
,         {
              "id"           : "NPN",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/192.178.218.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "offered with grpc-exp, h2, http/1.1, http/1.0 (advertised)"
          }
,         {
              "id"           : "ALPN_HTTP2",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/192.178.218.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "h2"
          }
,         {
              "id"           : "ALPN",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/192.178.218.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http/1.1grpc-exp"
          }
,         {
              "id"           : "scanTime",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/192.178.218.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "6"
          }
]
Feature: CCC.Core.CN01.AR07
Scenario: Verify HTTPS uses IANA-assigned port 443 @tlp-clear @tlp-green @tlp-amber @tlp-red @CCC.Core @CCC.Core.CN01 @Behavioural @PerPort @http @tls @object-storage
Then "{portNumber}" is "443"23µs
Feature: CCC.Core.CN01.AR08
Scenario: Verify mTLS requires client certificate authentication @tls @tlp-amber @tlp-red @CCC.Core @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given "report" contains details of SSL Support type "server-defaults" for "{hostName}" on port "{portNumber}"17s
Then "{report}" is an array of objects with at least the following contents1ms
idfinding
clientAuthrequired
expected row not found: map[finding:required id:clientAuth]
📎 Attachments:
testssl_server-defaults_nodal-time-474015-p5-bucket.storage.googleapis.com_443.json
View JSON (45773 bytes)
[
         {
              "id"           : "engine_problem",
              "ip"           : "/",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "No engine or GOST support via engine with your /opt/testssl/bin/openssl.Linux.x86_64"
          }
,         {
              "id"           : "service",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "HTTP"
          }
,         {
              "id"           : "pre_128cipher",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "No 128 cipher limit bug"
          }
,         {
              "id"           : "TLS_extensions",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "'EC point formats/#11' 'application layer protocol negotiation/#16' 'extended master secret/#23' 'session ticket/#35' 'supported versions/#43' 'key share/#51' 'next protocol/#13172' 'renegotiation info/#65281'"
          }
,         {
              "id"           : "TLS_misses_extension_23",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Extended master secret extension detected"
          }
,         {
              "id"           : "TLS_session_ticket",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "valid for 100800 seconds (>daily)"
          }
,         {
              "id"           : "SSL_sessionID_support",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "yes"
          }
,         {
              "id"           : "sessionresumption_ticket",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "supported"
          }
,         {
              "id"           : "sessionresumption_ID",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not supported"
          }
,         {
              "id"           : "early_data",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "HIGH",
              "finding"      : "supported"
          }
,         {
              "id"           : "TLS_timestamp",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "off by 0 seconds from your localtime"
          }
,         {
              "id"           : "certificate_compression",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "none"
          }
,         {
              "id"           : "clientAuth",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "none"
          }
,         {
              "id"           : "cert_numbers",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2"
          }
,         {
              "id"           : "cert_signatureAlgorithm ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "SHA256 with RSA"
          }
,         {
              "id"           : "cert_keySize ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "RSA 2048 bits (exponent is 65537)"
          }
,         {
              "id"           : "cert_keyUsage ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Digital Signature, Key Encipherment"
          }
,         {
              "id"           : "cert_extKeyUsage ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "TLS Web Server Authentication"
          }
,         {
              "id"           : "cert_serialNumber ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "EB7C0DEE5366D1660A2BE16F518D4FC9"
          }
,         {
              "id"           : "cert_serialNumberLen ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "16"
          }
,         {
              "id"           : "cert_fingerprintSHA1 ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "904CEA3AD0FDF76F6D3D44F923654B8B57E7CFE1"
          }
,         {
              "id"           : "cert_fingerprintSHA256 ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "7F2C5F007F1AE84FAD7036D940238CF84435AE8AB1D8B448ED96259F7A8E78E5"
          }
,         {
              "id"           : "cert ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\nMIIHBzCCBe+gAwIBAgIRAOt8De5TZtFmCivhb1GNT8kwDQYJKoZIhvcNAQELBQAwOzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczEMMAoGA1UEAxMDV1IyMB4XDTI2MDIyMzE4MjA1N1oXDTI2MDUxODE4MjA1NlowIzEhMB8GA1UEAwwYKi5zdG9yYWdlLmdvb2dsZWFwaXMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZTfA6qsiEMl4YJo0sI2G778QHyogKdk3tbOwD81zMgBUTGlRMK8cq5XbSOWZZaHIXSKmNOto65ZBb/8fgXduCgk5sUP/CVgAqyelzmeKj0c2ouVrnJYk/JqDwcGyaEh4FOLCFrFeQWNVEyph2McLzdfbQ/GwYj9241fCU73/TboA86gWQhONbHF9+bdql32ul73fegA/2ER4PsxWaK+IngGNj3mukkSaFf+9PHZVD//AbUEXrm7ELxKHFcuKeHlQ0pgq9HpdoLdJbK5bJQyiAERuXr+AchPCFGDliKatNIov7GRPM3H+r1KammHpF0Nbabm77bSQYUmklVLZ6s3twIDAQABo4IEHDCCBBgwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFEpesLeGnyZYL95T+IHH/INYBfecMB8GA1UdIwQYMBaAFN4bHu15FdQ+NyTDIbvsNDltQrIwMFgGCCsGAQUFBwEBBEwwSjAhBggrBgEFBQcwAYYVaHR0cDovL28ucGtpLmdvb2cvd3IyMCUGCCsGAQUFBzAChhlodHRwOi8vaS5wa2kuZ29vZy93cjIuY3J0MIIB8QYDVR0RBIIB6DCCAeSCGCouc3RvcmFnZS5nb29nbGVhcGlzLmNvbYIQKi5nb29nbGVhcGlzLmNvbYIgY29tbW9uZGF0YXN0b3JhZ2UuZ29vZ2xlYXBpcy5jb22CIiouY29tbW9uZGF0YXN0b3JhZ2UuZ29vZ2xlYXBpcy5jb22CFnN0b3JhZ2UuZ29vZ2xlYXBpcy5jb22CGXN0b3JhZ2UtcDIuZ29vZ2xlYXBpcy5jb22CGyouc3RvcmFnZS1wMi5nb29nbGVhcGlzLmNvbYIbc3RvcmFnZS5tdGxzLmdvb2dsZWFwaXMuY29tgiQqLmFwcHNwb3QuY29tLnN0b3JhZ2UuZ29vZ2xlYXBpcy5jb22CICouY29udGVudC1zdG9yYWdlLmdvb2dsZWFwaXMuY29tgiMqLmNvbnRlbnQtc3RvcmFnZS1wMi5nb29nbGVhcGlzLmNvbYInKi5jb250ZW50LXN0b3JhZ2UtdXBsb2FkLmdvb2dsZWFwaXMuY29tgikqLmNvbnRlbnQtc3RvcmFnZS1kb3dubG9hZC5nb29nbGVhcGlzLmNvbYIfKi5zdG9yYWdlLXVwbG9hZC5nb29nbGVhcGlzLmNvbYIhKi5zdG9yYWdlLWRvd25sb2FkLmdvb2dsZWFwaXMuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMDYGA1UdHwQvMC0wK6ApoCeGJWh0dHA6Ly9jLnBraS5nb29nL3dyMi85VVZiTjB3NUU2WS5jcmwwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwCWl2S/VViXrfdDh2g3CEJ36fA61fak8zZuRqQ/D8qpxgAAAZyL8p39AAAEAwBIMEYCIQCGYVyGFUWdaOXqGGgBb0HraqFNycXTjoRj3KrESJ40uAIhAMxA9rnDEXXvFKFNKnRXoDCroIQPtky6dxT4Rj4yKPEMAHYAyzj3FYl8hKFEX1vB3fvJbvKaWc1HCmkFhbDLFMMUWOcAAAGci/KeGwAABAMARzBFAiAUzEDXOGaiVkTQ/G6Uj1Mv7x1dIEsiGB+TD2IZE3AAtAIhANmwvsjkqe872xeesHkCYtWTrRnKhdEvZKwdk8LDMbZqMA0GCSqGSIb3DQEBCwUAA4IBAQAQD+eWdolWA2I3iEKfLKw8aG8OWTgVCryXoTwxvDDglU9CJOZreGMMzztzfyvIgANKQXbyNgURRBqbknmgXCGv8zWpoCyyArMEKs15KgdLV6UatDEaJ6YkyLlmSRLeJLtNwEY8GleuapdfQCw5nTiUjbdYl51mmTdjJpK7OXybAT/fY+qHbXNqHX0kcnQHDlHcyExjT+xfnw1dzIPEHJc+eNEDQT0AsEKOrT+uc6DPXrAeKxEdxP98YUaLp92X7GC4hocDhfp8eOjx+3Boh9FqSGOKoTZITRkf8gQzU9bfFrKzdV1gfut2eAzPgA2TVFvzXOq8/eVzbAOmZXDqHA1R\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "cert_commonName ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "*.storage.googleapis.com"
          }
,         {
              "id"           : "cert_commonName_wo_SNI ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.storage.googleapis.com"
          }
,         {
              "id"           : "cert_subjectAltName ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.storage.googleapis.com *.googleapis.com commondatastorage.googleapis.com *.commondatastorage.googleapis.com storage.googleapis.com storage-p2.googleapis.com *.storage-p2.googleapis.com storage.mtls.googleapis.com *.appspot.com.storage.googleapis.com *.content-storage.googleapis.com *.content-storage-p2.googleapis.com *.content-storage-upload.googleapis.com *.content-storage-download.googleapis.com *.storage-upload.googleapis.com *.storage-download.googleapis.com"
          }
,         {
              "id"           : "cert_trust ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "Ok via SAN wildcard and CN wildcard (same w/o SNI)"
          }
,         {
              "id"           : "cert_trust _wildcard",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "trust is via wildcard"
          }
,         {
              "id"           : "cert_chain_of_trust ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "passed."
          }
,         {
              "id"           : "cert_certificatePolicies_EV ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_expirationStatus ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "MEDIUM",
              "finding"      : "expires < 60 days (55)"
          }
,         {
              "id"           : "cert_notBefore ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2026-02-23 18:20"
          }
,         {
              "id"           : "cert_notAfter ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "MEDIUM",
              "finding"      : "2026-05-18 18:20"
          }
,         {
              "id"           : "cert_extlifeSpan ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "certificate has no extended life time according to browser forum"
          }
,         {
              "id"           : "cert_eTLS ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not present"
          }
,         {
              "id"           : "cert_crlDistributionPoints ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://c.pki.goog/wr2/9UVbN0w5E6Y.crl"
          }
,         {
              "id"           : "cert_ocspURL ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://o.pki.goog/wr2"
          }
,         {
              "id"           : "OCSP_stapling ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "not offered"
          }
,         {
              "id"           : "cert_mustStapleExtension ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "--"
          }
,         {
              "id"           : "DNS_CAArecord ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "issue=pki.goog"
          }
,         {
              "id"           : "certificate_transparency ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "yes (certificate extension)"
          }
,         {
              "id"           : "certs_countServer ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "3"
          }
,         {
              "id"           : "certs_list_ordering_problem ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_caIssuers ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "WR2 (Google Trust Services from US)"
          }
,         {
              "id"           : "intermediate_cert <#1> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#1> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "E6FE22BF45E4F0D3B85C59E02C0F495418E1EB8D3210F788D48CD5E1CB547CD4"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#1> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2023-12-13 09:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#1> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2029-02-20 14:00"
          }
,         {
              "id"           : "intermediate_cert_expiration <#1> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#1> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "WR2 <-- GTS Root R1"
          }
,         {
              "id"           : "intermediate_cert <#2> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\nMIIFYjCCBEqgAwIBAgIQd70NbNs2+RrqIQ/E8FjTDTANBgkqhkiG9w0BAQsFADBXMQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEQMA4GA1UECxMHUm9vdCBDQTEbMBkGA1UEAxMSR2xvYmFsU2lnbiBSb290IENBMB4XDTIwMDYxOTAwMDA0MloXDTI4MDEyODAwMDA0MlowRzELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBMTEMxFDASBgNVBAMTC0dUUyBSb290IFIxMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAthECix7joXebO9y/lD63ladAPKH9gvl9MgaCcfb2jH/76Nu8ai6Xl6OMS/kr9rH5zoQdsfnFl97vufKj6bwSiV6nqlKr+CMny6SxnGPb15l+8Ape62im9MZaRw1NEDPjTrETo8gYbEvs/AmQ351kKSUjB6G00j0uYODP0gmHu81I8E3CwnqIiru6z1kZ1q+PsAewnjHxgsHA3y6mbWwZDrXYfiYaRQM9sHmklCitD38m5agI/pboPGiUU+6DOogrFZYJsuB6jC511pzrp1Zkj5ZPaK49l8KEj8C8QMALXL32h7M1bKwYUH+E4EzNktMg6TO8UpmvMrUpsyUqtEj5cuHKZPfmghCN6J3Cioj6OGaK/GP5Afl4/Xtcd/p2h/rs37EOeZVXtL0m79YB0esWCruOC7XFxYpVq9Os6pFLKcwZpDIlTirxZUTQAs6qzkm06p98g7BAe+dDq6dso499iYH6TKX/1Y7DzkvgtdizjkXPdsDtQCv9Uw+wp9U7DbGKogPeMa3Md+pvez7W35EiEua++tgy/BBjFFFy3l3WFpO9KWgz7zpm7AeKJt8T11dleCfeXkkUAKIAf5qoIbapsZWwpbkNFhHax2xIPEDgfg1azVY80ZcFuctL7TlLnMQ/0lUTbiSw1nH69MG6zO0b9f6BQdgAmD06yK56mDcYBZUCAwEAAaOCATgwggE0MA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTkrysmcRorSCeFL1JmLO/wiRNxPjAfBgNVHSMEGDAWgBRge2YaRQ2XyolQL30EzTSo//z9SzBgBggrBgEFBQcBAQRUMFIwJQYIKwYBBQUHMAGGGWh0dHA6Ly9vY3NwLnBraS5nb29nL2dzcjEwKQYIKwYBBQUHMAKGHWh0dHA6Ly9wa2kuZ29vZy9nc3IxL2dzcjEuY3J0MDIGA1UdHwQrMCkwJ6AloCOGIWh0dHA6Ly9jcmwucGtpLmdvb2cvZ3NyMS9nc3IxLmNybDA7BgNVHSAENDAyMAgGBmeBDAECATAIBgZngQwBAgIwDQYLKwYBBAHWeQIFAwIwDQYLKwYBBAHWeQIFAwMwDQYJKoZIhvcNAQELBQADggEBADSkHrEoo9C0dhemMXoh6dFSPsjbdBZBiLg9NR3t5P+T4Vxfq7vqfM/b5A3Ri1fyJm9bvhdGaJQ3b2t6yMAYN/olUazsaL+yyEn9WprKASOshIArAoyZl+tJaox118fessmXn1hIVw41oeQa1v1vg4Fv74zPl6/AhSrw9U5pCZEt4Wi4wStz6dTZ/CLANx8LZh1J7QJVj2fhMtfTJr9w4z30Z209fOU0iOMy+qduBmpvvYuR7hZL6Dupszfnw0Skfths18dG9ZKb59UhvmaSGZRVbNQpsg3BZlvid0lIKO2d1xozclOzgjXPYovJJIultzkMu34qQb9Sz/yilrbCgj8=\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#2> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "3EE0278DF71FA3C125C4CD487F01D774694E6FC57E0CD94C24EFD769133918E5"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#2> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2020-06-19 00:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#2> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2028-01-28 00:00"
          }
,         {
              "id"           : "intermediate_cert_expiration <#2> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#2> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "GTS Root R1 <-- GlobalSign Root CA"
          }
,         {
              "id"           : "intermediate_cert_badOCSP ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "intermediate certificate(s) is/are ok"
          }
,         {
              "id"           : "cert_signatureAlgorithm ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "SHA256 with RSA"
          }
,         {
              "id"           : "cert_keySize ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "EC 256 bits (curve P-256)"
          }
,         {
              "id"           : "cert_keyUsage ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Digital Signature"
          }
,         {
              "id"           : "cert_extKeyUsage ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "TLS Web Server Authentication"
          }
,         {
              "id"           : "cert_serialNumber ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "994570545E2BCBF010978FEA02E1B296"
          }
,         {
              "id"           : "cert_serialNumberLen ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "16"
          }
,         {
              "id"           : "cert_fingerprintSHA1 ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "24440F02D7BFC6053CF300A1583501EFDECD11FA"
          }
,         {
              "id"           : "cert_fingerprintSHA256 ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "C1B37001ED5E96BB7241C418F4B1A27A3CDAF8B433A6EA2FC995C289CB6B7A45"
          }
,         {
              "id"           : "cert ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "cert_commonName ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "*.storage.googleapis.com"
          }
,         {
              "id"           : "cert_commonName_wo_SNI ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.storage.googleapis.com"
          }
,         {
              "id"           : "cert_subjectAltName ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.storage.googleapis.com *.googleapis.com commondatastorage.googleapis.com *.commondatastorage.googleapis.com storage.googleapis.com storage-p2.googleapis.com *.storage-p2.googleapis.com storage.mtls.googleapis.com *.appspot.com.storage.googleapis.com *.content-storage.googleapis.com *.content-storage-p2.googleapis.com *.content-storage-upload.googleapis.com *.content-storage-download.googleapis.com *.storage-upload.googleapis.com *.storage-download.googleapis.com"
          }
,         {
              "id"           : "cert_trust ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "Ok via SAN wildcard and CN wildcard (same w/o SNI)"
          }
,         {
              "id"           : "cert_trust _wildcard",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "trust is via wildcard"
          }
,         {
              "id"           : "cert_chain_of_trust ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "passed."
          }
,         {
              "id"           : "cert_certificatePolicies_EV ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_expirationStatus ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "MEDIUM",
              "finding"      : "expires < 60 days (55)"
          }
,         {
              "id"           : "cert_notBefore ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2026-02-23 18:20"
          }
,         {
              "id"           : "cert_notAfter ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "MEDIUM",
              "finding"      : "2026-05-18 18:20"
          }
,         {
              "id"           : "cert_extlifeSpan ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "certificate has no extended life time according to browser forum"
          }
,         {
              "id"           : "cert_eTLS ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not present"
          }
,         {
              "id"           : "cert_crlDistributionPoints ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://c.pki.goog/wr2/GSyT1N4PBrg.crl"
          }
,         {
              "id"           : "cert_ocspURL ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://o.pki.goog/wr2"
          }
,         {
              "id"           : "OCSP_stapling ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "not offered"
          }
,         {
              "id"           : "cert_mustStapleExtension ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "--"
          }
,         {
              "id"           : "DNS_CAArecord ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "issue=pki.goog"
          }
,         {
              "id"           : "certificate_transparency ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "yes (certificate extension)"
          }
,         {
              "id"           : "certs_countServer ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "3"
          }
,         {
              "id"           : "certs_list_ordering_problem ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_caIssuers ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "WR2 (Google Trust Services from US)"
          }
,         {
              "id"           : "intermediate_cert <#1> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#1> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "E6FE22BF45E4F0D3B85C59E02C0F495418E1EB8D3210F788D48CD5E1CB547CD4"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#1> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2023-12-13 09:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#1> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2029-02-20 14:00"
          }
,         {
              "id"           : "intermediate_cert_expiration <#1> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#1> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "WR2 <-- GTS Root R1"
          }
,         {
              "id"           : "intermediate_cert <#2> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#2> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "3EE0278DF71FA3C125C4CD487F01D774694E6FC57E0CD94C24EFD769133918E5"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#2> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2020-06-19 00:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#2> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2028-01-28 00:00"
          }
,         {
              "id"           : "intermediate_cert_expiration <#2> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#2> ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "GTS Root R1 <-- GlobalSign Root CA"
          }
,         {
              "id"           : "intermediate_cert_badOCSP ",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "intermediate certificate(s) is/are ok"
          }
,         {
              "id"           : "scanTime",
              "ip"           : "nodal-time-474015-p5-bucket.storage.googleapis.com/142.251.111.207",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "16"
          }
]