🥒 CCC.ObjStor Test: ccc-test-container-1775043178

Test Parameters

PortNumber443
HostNamestoragecfitest1775043178.blob.core.windows.net
Protocolhttps
ServiceTypeobject-storage
ProviderServiceTypeMicrosoft.Storage/storageAccounts
CatalogTypesCCC.ObjStor
TagFilter@object-storage, @PerPort, @tls, ~@ftp, ~@telnet, ~@ssh, ~@smtp, ~@dns, ~@ldap
UID/subscriptions/c1cedd8e-bf91-4d7d-a4cc-45700402a2a1/resourceGroups/cfi_test_1775043178/providers/Microsoft.Storage/storageAccounts/storagecfitest1775043178
ResourceNameccc-test-container-1775043178
ReportFileccc-test-container-1775043178-port
ReportTitlestoragecfitest1775043178.blob.core.windows.net:443
Instance
{
  "ID": "main-azure",
  "Properties": {
    "Provider": "azure",
    "Region": "eastus",
    "AzureResourceGroup": "cfi_test_1775043178",
    "AzureSubscriptionID": "c1cedd8e-bf91-4d7d-a4cc-45700402a2a1",
    "GcpProjectId": ""
  },
  "Services": [
    {
      "Type": "object-storage",
      "Properties": {
        "azure-storage-account": "storagecfitest1775043178",
        "default-container": "ccc-test-container-1775043178",
        "object-storage-retention-period-days": 2
      }
    },
    {
      "Type": "logging",
      "Properties": {}
    }
  ],
  "Rules": {
    "permitted-destination-storage-accounts": [],
    "permitted-regions": [
      "eastus"
    ],
    "replication-locations": [
      "eastus",
      "westus"
    ]
  }
}
AzureResourceGroupcfi_test_1775043178
AzureStorageAccountstoragecfitest1775043178
AzureSubscriptionIDc1cedd8e-bf91-4d7d-a4cc-45700402a2a1
DefaultContainerccc-test-container-1775043178
ObjectStorageRetentionPeriodDays2
PermittedDestinationStorageAccounts
[]
PermittedRegions
[
  "eastus"
]
Providerazure
Regioneastus
ReplicationLocations
[
  "eastus",
  "westus"
]
ResourceGroupcfi_test_1775043178
SubscriptionIdc1cedd8e-bf91-4d7d-a4cc-45700402a2a1

Summary

Generated: 2026-04-01 12:55:24

Total Run Time: 1m8s

Features: 4

Scenarios: 11 (✅ 8 | ❌ 3)

Steps: 45 (✅ 39 | ❌ 3 | ⏭️ 3 | ❓ 0)

Feature: CCC.Core.CN01.AR01
Scenario: Service accepts TLS 1.3 encrypted traffic @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"44µs
Given an openssl s_client request using "tls1_3" to "{portNumber}" on "{hostName}" protocol "{protocol}"551µs
And I refer to "{result}" as "connection"25µs
And "{connection}" state is open28µs
And "{connection.State}" is "open"27µs
And I close connection "{connection}"31µs
Then "{connection}" state is closed57µs
Scenario: Service rejects TLS 1.2 traffic @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"28µs
Given an openssl s_client request using "tls1_2" to "{portNumber}" on "{hostName}" protocol "{protocol}"420µs
And I refer to "{result}" as "connection"26µs
And we wait for a period of "40" ms41ms
Then "{connection.State}" is "closed"29µs
Scenario: Service rejects TLS 1.1 traffic @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"35µs
Given an openssl s_client request using "tls1_1" to "{portNumber}" on "{hostName}" protocol "{protocol}"474µs
And I refer to "{result}" as "connection"27µs
And we wait for a period of "40" ms40ms
Then "{connection.State}" is "closed"29µs
Scenario: Service rejects TLS 1.0 traffic @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"35µs
Given an openssl s_client request using "tls1" to "{portNumber}" on "{hostName}" protocol "{protocol}"472µs
And I refer to "{result}" as "connection"26µs
And we wait for a period of "40" ms41ms
Then "{connection.State}" is "closed"27µs
Scenario: Verify SSL/TLS protocol support @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"35µs
Given "report" contains details of SSL Support type "protocols" for "{hostName}" on port "{portNumber}"7s
Then "{report}" is an array of objects which doesn't contain any of585µs
idfinding
SSLv2offered
SSLv3offered
TLS1offered
TLS1_1offered
TLS1_2offered
unwanted row found in array: map[finding:offered id:TLS1_2]
And "{report}" is an array of objects with at least the following contents13µs
idfinding
TLS1_3offered with final
📎 Attachments:
testssl_protocols_storagecfitest1775043178.blob.core.windows.net_443.json
View JSON (3744 bytes)
[
         {
              "id"           : "engine_problem",
              "ip"           : "/",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "No engine or GOST support via engine with your /opt/testssl/bin/openssl.Linux.x86_64"
          }
,         {
              "id"           : "service",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "HTTP"
          }
,         {
              "id"           : "pre_128cipher",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "No 128 cipher limit bug"
          }
,         {
              "id"           : "SSLv2",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "not offered"
          }
,         {
              "id"           : "SSLv3",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "not offered"
          }
,         {
              "id"           : "TLS1",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "offered (deprecated)"
          }
,         {
              "id"           : "TLS1_1",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "offered (deprecated)"
          }
,         {
              "id"           : "TLS1_2",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "offered"
          }
,         {
              "id"           : "TLS1_3",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "offered with final"
          }
,         {
              "id"           : "QUIC",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "not tested due to lack of local OpenSSL support"
          }
,         {
              "id"           : "NPN",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not offered"
          }
,         {
              "id"           : "ALPN",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not offered"
          }
,         {
              "id"           : "scanTime",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "7"
          }
]
Scenario: Verify no known SSL/TLS vulnerabilities @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"32µs
Given "report" contains details of SSL Support type "vulnerable" for "{hostName}" on port "{portNumber}"29s
Then "{report}" is an array of objects with at least the following contents369µs
idseverity
heartbleedOK
CCSOK
ticketbleedOK
ROBOTOK
secure_renegoOK
📎 Attachments:
testssl_vulnerable_storagecfitest1775043178.blob.core.windows.net_443.json
View JSON (10043 bytes)
[
         {
              "id"           : "engine_problem",
              "ip"           : "/",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "No engine or GOST support via engine with your /opt/testssl/bin/openssl.Linux.x86_64"
          }
,         {
              "id"           : "service",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "HTTP"
          }
,         {
              "id"           : "pre_128cipher",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "No 128 cipher limit bug"
          }
,         {
              "id"           : "heartbleed",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2014-0160",
              "cwe"          : "CWE-119",
              "finding"      : "not vulnerable, no heartbeat extension"
          }
,         {
              "id"           : "CCS",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2014-0224",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "ticketbleed",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2016-9244",
              "cwe"          : "CWE-200",
              "finding"      : "no session ticket extension"
          }
,         {
              "id"           : "opossum",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2025-49812",
              "cwe"          : "CWE-287",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "ROBOT",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168",
              "cwe"          : "CWE-203",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "secure_renego",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "cwe"          : "CWE-310",
              "finding"      : "supported"
          }
,         {
              "id"           : "secure_client_renego",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2011-1473",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "CRIME_TLS",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2012-4929",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "BREACH",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2013-3587",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable, no gzip/deflate/compress/br HTTP compression  - only supplied '/' tested"
          }
,         {
              "id"           : "POODLE_SSL",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2014-3566",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "fallback_SCSV",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "MEDIUM",
              "finding"      : "NOT supported"
          }
,         {
              "id"           : "SWEET32",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "LOW",
              "cve"          : "CVE-2016-2183 CVE-2016-6329",
              "cwe"          : "CWE-327",
              "finding"      : "uses 64 bit block ciphers"
          }
,         {
              "id"           : "FREAK",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2015-0204",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "DROWN",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2016-0800 CVE-2016-0703",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable on this host and port"
          }
,         {
              "id"           : "DROWN_hint",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "cve"          : "CVE-2016-0800 CVE-2016-0703",
              "cwe"          : "CWE-310",
              "finding"      : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://search.censys.io/search?resource=hosts&virtual_hosts=INCLUDE&q=C4D4B66428BCD1F6F9870C4A6CA06E73AFA650508E8F1AE74A649DF3548F8D0F"
          }
,         {
              "id"           : "LOGJAM",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2015-4000",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable, no DH EXPORT ciphers,"
          }
,         {
              "id"           : "LOGJAM-common_primes",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2015-4000",
              "cwe"          : "CWE-310",
              "finding"      : "no DH key with <= TLS 1.2"
          }
,         {
              "id"           : "BEAST_CBC_TLS1",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "MEDIUM",
              "cve"          : "CVE-2011-3389",
              "cwe"          : "CWE-20",
              "finding"      : "ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA AES256-SHA AES128-SHA DES-CBC3-SHA"
          }
,         {
              "id"           : "BEAST",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "LOW",
              "cve"          : "CVE-2011-3389",
              "cwe"          : "CWE-20",
              "finding"      : "VULNERABLE -- but also supports higher protocols  TLSv1.1 TLSv1.2 (likely mitigated)"
          }
,         {
              "id"           : "LUCKY13",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "LOW",
              "cve"          : "CVE-2013-0169",
              "cwe"          : "CWE-310",
              "finding"      : "potentially vulnerable, uses TLS CBC ciphers"
          }
,         {
              "id"           : "winshock",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2014-6321",
              "cwe"          : "CWE-94",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "RC4",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "cve"          : "CVE-2013-2566 CVE-2015-2808",
              "cwe"          : "CWE-310",
              "finding"      : "not vulnerable"
          }
,         {
              "id"           : "scanTime",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "29"
          }
]
Scenario: Verify TLS 1.3 only certificate validity @CCC.Core @tlp-green @tlp-amber @tlp-red @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given a cloud api for "{Instance}" in "api"41µs
Given "report" contains details of SSL Support type "server-defaults" for "{hostName}" on port "{portNumber}"12s
Then "{report}" is an array of objects with at least the following contents588µs
idseverity
cert_expirationStatusOK
cert_chain_of_trustOK
📎 Attachments:
testssl_server-defaults_storagecfitest1775043178.blob.core.windows.net_443.json
View JSON (24961 bytes)
[
         {
              "id"           : "engine_problem",
              "ip"           : "/",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "No engine or GOST support via engine with your /opt/testssl/bin/openssl.Linux.x86_64"
          }
,         {
              "id"           : "service",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "HTTP"
          }
,         {
              "id"           : "pre_128cipher",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "No 128 cipher limit bug"
          }
,         {
              "id"           : "TLS_extensions",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "'status request/#5' 'extended master secret/#23' 'supported versions/#43' 'key share/#51' 'renegotiation info/#65281'"
          }
,         {
              "id"           : "TLS_misses_extension_23",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Extended master secret extension detected"
          }
,         {
              "id"           : "TLS_session_ticket",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no -- no lifetime advertised"
          }
,         {
              "id"           : "SSL_sessionID_support",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "yes"
          }
,         {
              "id"           : "sessionresumption_ticket",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not supported"
          }
,         {
              "id"           : "sessionresumption_ID",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not supported"
          }
,         {
              "id"           : "early_data",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "No early data"
          }
,         {
              "id"           : "TLS_timestamp",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "off by 0 seconds from your localtime"
          }
,         {
              "id"           : "certificate_compression",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "none"
          }
,         {
              "id"           : "clientAuth",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "none"
          }
,         {
              "id"           : "cert_numbers",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "1"
          }
,         {
              "id"           : "cert_signatureAlgorithm",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "SHA384 with RSA"
          }
,         {
              "id"           : "cert_keySize",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "RSA 2048 bits (exponent is 65537)"
          }
,         {
              "id"           : "cert_keyUsage",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Digital Signature, Key Encipherment"
          }
,         {
              "id"           : "cert_extKeyUsage",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "TLS Web Client Authentication, TLS Web Server Authentication"
          }
,         {
              "id"           : "cert_serialNumber",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "330318E503C85478452CF05ED600000318E503"
          }
,         {
              "id"           : "cert_serialNumberLen",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "19"
          }
,         {
              "id"           : "cert_fingerprintSHA1",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "9EB02EFB8DF8B480C089E8E13E80E91D9F89CDBF"
          }
,         {
              "id"           : "cert_fingerprintSHA256",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "C4D4B66428BCD1F6F9870C4A6CA06E73AFA650508E8F1AE74A649DF3548F8D0F"
          }
,         {
              "id"           : "cert",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "cert_commonName",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "*.blob.core.windows.net"
          }
,         {
              "id"           : "cert_commonName_wo_SNI",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.blob.core.windows.net"
          }
,         {
              "id"           : "cert_subjectAltName",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.blob.core.windows.net *.blz22prdstr07a.store.core.windows.net *.blob.storage.azure.net *.z1.blob.storage.azure.net *.z2.blob.storage.azure.net *.z3.blob.storage.azure.net *.z4.blob.storage.azure.net *.z5.blob.storage.azure.net *.z6.blob.storage.azure.net *.z7.blob.storage.azure.net *.z8.blob.storage.azure.net *.z9.blob.storage.azure.net *.z10.blob.storage.azure.net *.z11.blob.storage.azure.net *.z12.blob.storage.azure.net *.z13.blob.storage.azure.net *.z14.blob.storage.azure.net *.z15.blob.storage.azure.net *.z16.blob.storage.azure.net *.z17.blob.storage.azure.net *.z18.blob.storage.azure.net *.z19.blob.storage.azure.net *.z20.blob.storage.azure.net *.z21.blob.storage.azure.net *.z22.blob.storage.azure.net *.z23.blob.storage.azure.net *.z24.blob.storage.azure.net *.z25.blob.storage.azure.net *.z26.blob.storage.azure.net *.z27.blob.storage.azure.net *.z28.blob.storage.azure.net *.z29.blob.storage.azure.net *.z30.blob.storage.azure.net *.z31.blob.storage.azure.net *.z32.blob.storage.azure.net *.z33.blob.storage.azure.net *.z34.blob.storage.azure.net *.z35.blob.storage.azure.net *.z36.blob.storage.azure.net *.z37.blob.storage.azure.net *.z38.blob.storage.azure.net *.z39.blob.storage.azure.net *.z40.blob.storage.azure.net *.z41.blob.storage.azure.net *.z42.blob.storage.azure.net *.z43.blob.storage.azure.net *.z44.blob.storage.azure.net *.z45.blob.storage.azure.net *.z46.blob.storage.azure.net *.z47.blob.storage.azure.net *.z48.blob.storage.azure.net *.z49.blob.storage.azure.net *.z50.blob.storage.azure.net"
          }
,         {
              "id"           : "cert_trust",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "Ok via SAN wildcard and CN wildcard (same w/o SNI)"
          }
,         {
              "id"           : "cert_trust_wildcard",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "trust is via wildcard"
          }
,         {
              "id"           : "cert_chain_of_trust",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "passed."
          }
,         {
              "id"           : "cert_certificatePolicies_EV",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_expirationStatus",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "112 >= 60 days"
          }
,         {
              "id"           : "cert_notBefore",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2026-01-23 13:21"
          }
,         {
              "id"           : "cert_notAfter",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2026-07-22 13:21"
          }
,         {
              "id"           : "cert_extlifeSpan",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "certificate has no extended life time according to browser forum"
          }
,         {
              "id"           : "cert_eTLS",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not present"
          }
,         {
              "id"           : "cert_crlDistributionPoints",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crl"
          }
,         {
              "id"           : "cert_ocspURL",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://oneocsp.microsoft.com/ocsp"
          }
,         {
              "id"           : "OCSP_stapling",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "offered"
          }
,         {
              "id"           : "cert_ocspRevoked",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "not revoked"
          }
,         {
              "id"           : "cert_mustStapleExtension",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "--"
          }
,         {
              "id"           : "DNS_CAArecord",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "contactemail=caarecordaware@microsoft.com"
          }
,         {
              "id"           : "certificate_transparency",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "yes (certificate extension)"
          }
,         {
              "id"           : "certs_countServer",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2"
          }
,         {
              "id"           : "certs_list_ordering_problem",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_caIssuers",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Microsoft Azure RSA TLS Issuing CA 07 (Microsoft Corporation from US)"
          }
,         {
              "id"           : "intermediate_cert <#1>",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#1>",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "724247794951C93F3E41711617E95CE143263E3196C345A1DA78F6639749EC03"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#1>",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2023-06-08 00:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#1>",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2026-08-25 23:59"
          }
,         {
              "id"           : "intermediate_cert_expiration <#1>",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#1>",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Microsoft Azure RSA TLS Issuing CA 07 <-- DigiCert Global Root G2"
          }
,         {
              "id"           : "intermediate_cert_badOCSP",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "intermediate certificate(s) is/are ok"
          }
,         {
              "id"           : "scanTime",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "12"
          }
]
Feature: CCC.Core.CN01.AR03
Scenario: HTTP redirects to HTTPS @tlp-green @tlp-amber @tlp-red @CCC.Core @CCC.Core.CN01 @PerPort @Behavioural @http @tls @object-storage
Given a client connects to "{hostName}" with protocol "http" on port "80"651µs
And I refer to "{result}" as "connection"29µs
And "{connection}" is not an error36µs
And I transmit "GET / HTTP/1.1\r\nHost: {hostName}\r\n\r\n" to "{connection}"500ms
And I attach "{connection}" to the test output as "HTTP response"91µs
And "{connection.Output}" contains "301"40µs
expected {connection.Output} to contain '301', but got 'HTTP/1.1 400 The account being accessed does not support http. Content-Length: 289 Content-Type: application/xml Server: Microsoft-HTTPAPI/2.0 x-ms-request-id: 0b04e79c-001e-001b-18d6-c11c66000000 Date: Wed, 01 Apr 2026 12:56:11 GMT AccountRequiresHttpsThe account being accessed does not support http. RequestId:0b04e79c-001e-001b-18d6-c11c66000000 Time:2026-04-01T12:56:12.3162000Zstoragecfitest1775043178'
And I call "{connection}" with "Close"25µs
Then "{connection.State}" is "closed"36µs
📎 Attachments:
HTTP response
View JSON (679 bytes)
{"State":"open","Input":{},"Output":"HTTP/1.1 400 The account being accessed does not support http.\r\nContent-Length: 289\r\nContent-Type: application/xml\r\nServer: Microsoft-HTTPAPI/2.0\r\nx-ms-request-id: 0b04e79c-001e-001b-18d6-c11c66000000\r\nDate: Wed, 01 Apr 2026 12:56:11 GMT\r\n\r\n\u003c?xml version=\"1.0\" encoding=\"utf-8\"?\u003e\u003cError\u003e\u003cCode\u003eAccountRequiresHttps\u003c/Code\u003e\u003cMessage\u003eThe account being accessed does not support http.\nRequestId:0b04e79c-001e-001b-18d6-c11c66000000\nTime:2026-04-01T12:56:12.3162000Z\u003c/Message\u003e\u003cAccountName\u003estoragecfitest1775043178\u003c/AccountName\u003e\u003c/Error\u003e"}
Scenario: Only secure protocols are exposed @tlp-green @tlp-amber @tlp-red @CCC.Core @CCC.Core.CN01 @PerPort @Behavioural @tls @object-storage
Given "report" contains details of SSL Support type "protocols" for "{hostName}" on port "{portNumber}"7s
Then "{report}" is an array of objects with at least the following contents265µs
idseverity
TLS1_2OK
TLS1_3OK
📎 Attachments:
testssl_protocols_storagecfitest1775043178.blob.core.windows.net_443.json
View JSON (3744 bytes)
[
         {
              "id"           : "engine_problem",
              "ip"           : "/",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "No engine or GOST support via engine with your /opt/testssl/bin/openssl.Linux.x86_64"
          }
,         {
              "id"           : "service",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "HTTP"
          }
,         {
              "id"           : "pre_128cipher",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "No 128 cipher limit bug"
          }
,         {
              "id"           : "SSLv2",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "not offered"
          }
,         {
              "id"           : "SSLv3",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "not offered"
          }
,         {
              "id"           : "TLS1",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "offered (deprecated)"
          }
,         {
              "id"           : "TLS1_1",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "offered (deprecated)"
          }
,         {
              "id"           : "TLS1_2",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "offered"
          }
,         {
              "id"           : "TLS1_3",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "offered with final"
          }
,         {
              "id"           : "QUIC",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "not tested due to lack of local OpenSSL support"
          }
,         {
              "id"           : "NPN",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not offered"
          }
,         {
              "id"           : "ALPN",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not offered"
          }
,         {
              "id"           : "scanTime",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "7"
          }
]
Feature: CCC.Core.CN01.AR07
Scenario: Verify HTTPS uses IANA-assigned port 443 @tlp-clear @tlp-green @tlp-amber @tlp-red @CCC.Core @CCC.Core.CN01 @Behavioural @PerPort @http @tls @object-storage
Then "{portNumber}" is "443"43µs
Feature: CCC.Core.CN01.AR08
Scenario: Verify mTLS requires client certificate authentication @tls @tlp-amber @tlp-red @CCC.Core @CCC.Core.CN01 @Behavioural @PerPort @tls @object-storage
Given "report" contains details of SSL Support type "server-defaults" for "{hostName}" on port "{portNumber}"12s
Then "{report}" is an array of objects with at least the following contents547µs
idfinding
clientAuthrequired
expected row not found: map[finding:required id:clientAuth]
📎 Attachments:
testssl_server-defaults_storagecfitest1775043178.blob.core.windows.net_443.json
View JSON (24961 bytes)
[
         {
              "id"           : "engine_problem",
              "ip"           : "/",
              "port"         : "443",
              "severity"     : "WARN",
              "finding"      : "No engine or GOST support via engine with your /opt/testssl/bin/openssl.Linux.x86_64"
          }
,         {
              "id"           : "service",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "HTTP"
          }
,         {
              "id"           : "pre_128cipher",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "No 128 cipher limit bug"
          }
,         {
              "id"           : "TLS_extensions",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "'status request/#5' 'extended master secret/#23' 'supported versions/#43' 'key share/#51' 'renegotiation info/#65281'"
          }
,         {
              "id"           : "TLS_misses_extension_23",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Extended master secret extension detected"
          }
,         {
              "id"           : "TLS_session_ticket",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no -- no lifetime advertised"
          }
,         {
              "id"           : "SSL_sessionID_support",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "yes"
          }
,         {
              "id"           : "sessionresumption_ticket",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not supported"
          }
,         {
              "id"           : "sessionresumption_ID",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not supported"
          }
,         {
              "id"           : "early_data",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "No early data"
          }
,         {
              "id"           : "TLS_timestamp",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "off by 0 seconds from your localtime"
          }
,         {
              "id"           : "certificate_compression",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "none"
          }
,         {
              "id"           : "clientAuth",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "none"
          }
,         {
              "id"           : "cert_numbers",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "1"
          }
,         {
              "id"           : "cert_signatureAlgorithm",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "SHA384 with RSA"
          }
,         {
              "id"           : "cert_keySize",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "RSA 2048 bits (exponent is 65537)"
          }
,         {
              "id"           : "cert_keyUsage",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Digital Signature, Key Encipherment"
          }
,         {
              "id"           : "cert_extKeyUsage",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "TLS Web Client Authentication, TLS Web Server Authentication"
          }
,         {
              "id"           : "cert_serialNumber",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "330318E503C85478452CF05ED600000318E503"
          }
,         {
              "id"           : "cert_serialNumberLen",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "19"
          }
,         {
              "id"           : "cert_fingerprintSHA1",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "9EB02EFB8DF8B480C089E8E13E80E91D9F89CDBF"
          }
,         {
              "id"           : "cert_fingerprintSHA256",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "C4D4B66428BCD1F6F9870C4A6CA06E73AFA650508E8F1AE74A649DF3548F8D0F"
          }
,         {
              "id"           : "cert",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "cert_commonName",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "*.blob.core.windows.net"
          }
,         {
              "id"           : "cert_commonName_wo_SNI",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.blob.core.windows.net"
          }
,         {
              "id"           : "cert_subjectAltName",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "*.blob.core.windows.net *.blz22prdstr07a.store.core.windows.net *.blob.storage.azure.net *.z1.blob.storage.azure.net *.z2.blob.storage.azure.net *.z3.blob.storage.azure.net *.z4.blob.storage.azure.net *.z5.blob.storage.azure.net *.z6.blob.storage.azure.net *.z7.blob.storage.azure.net *.z8.blob.storage.azure.net *.z9.blob.storage.azure.net *.z10.blob.storage.azure.net *.z11.blob.storage.azure.net *.z12.blob.storage.azure.net *.z13.blob.storage.azure.net *.z14.blob.storage.azure.net *.z15.blob.storage.azure.net *.z16.blob.storage.azure.net *.z17.blob.storage.azure.net *.z18.blob.storage.azure.net *.z19.blob.storage.azure.net *.z20.blob.storage.azure.net *.z21.blob.storage.azure.net *.z22.blob.storage.azure.net *.z23.blob.storage.azure.net *.z24.blob.storage.azure.net *.z25.blob.storage.azure.net *.z26.blob.storage.azure.net *.z27.blob.storage.azure.net *.z28.blob.storage.azure.net *.z29.blob.storage.azure.net *.z30.blob.storage.azure.net *.z31.blob.storage.azure.net *.z32.blob.storage.azure.net *.z33.blob.storage.azure.net *.z34.blob.storage.azure.net *.z35.blob.storage.azure.net *.z36.blob.storage.azure.net *.z37.blob.storage.azure.net *.z38.blob.storage.azure.net *.z39.blob.storage.azure.net *.z40.blob.storage.azure.net *.z41.blob.storage.azure.net *.z42.blob.storage.azure.net *.z43.blob.storage.azure.net *.z44.blob.storage.azure.net *.z45.blob.storage.azure.net *.z46.blob.storage.azure.net *.z47.blob.storage.azure.net *.z48.blob.storage.azure.net *.z49.blob.storage.azure.net *.z50.blob.storage.azure.net"
          }
,         {
              "id"           : "cert_trust",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "Ok via SAN wildcard and CN wildcard (same w/o SNI)"
          }
,         {
              "id"           : "cert_trust_wildcard",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "LOW",
              "finding"      : "trust is via wildcard"
          }
,         {
              "id"           : "cert_chain_of_trust",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "passed."
          }
,         {
              "id"           : "cert_certificatePolicies_EV",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_expirationStatus",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "112 >= 60 days"
          }
,         {
              "id"           : "cert_notBefore",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2026-01-23 13:21"
          }
,         {
              "id"           : "cert_notAfter",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2026-07-22 13:21"
          }
,         {
              "id"           : "cert_extlifeSpan",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "certificate has no extended life time according to browser forum"
          }
,         {
              "id"           : "cert_eTLS",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "not present"
          }
,         {
              "id"           : "cert_crlDistributionPoints",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crl"
          }
,         {
              "id"           : "cert_ocspURL",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "http://oneocsp.microsoft.com/ocsp"
          }
,         {
              "id"           : "OCSP_stapling",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "offered"
          }
,         {
              "id"           : "cert_ocspRevoked",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "not revoked"
          }
,         {
              "id"           : "cert_mustStapleExtension",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "--"
          }
,         {
              "id"           : "DNS_CAArecord",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "contactemail=caarecordaware@microsoft.com"
          }
,         {
              "id"           : "certificate_transparency",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "yes (certificate extension)"
          }
,         {
              "id"           : "certs_countServer",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2"
          }
,         {
              "id"           : "certs_list_ordering_problem",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "no"
          }
,         {
              "id"           : "cert_caIssuers",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Microsoft Azure RSA TLS Issuing CA 07 (Microsoft Corporation from US)"
          }
,         {
              "id"           : "intermediate_cert <#1>",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "-----BEGIN CERTIFICATE-----\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\n-----END CERTIFICATE-----"
          }
,         {
              "id"           : "intermediate_cert_fingerprintSHA256 <#1>",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "724247794951C93F3E41711617E95CE143263E3196C345A1DA78F6639749EC03"
          }
,         {
              "id"           : "intermediate_cert_notBefore <#1>",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "2023-06-08 00:00"
          }
,         {
              "id"           : "intermediate_cert_notAfter <#1>",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "2026-08-25 23:59"
          }
,         {
              "id"           : "intermediate_cert_expiration <#1>",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "ok > 40 days"
          }
,         {
              "id"           : "intermediate_cert_chain <#1>",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "Microsoft Azure RSA TLS Issuing CA 07 <-- DigiCert Global Root G2"
          }
,         {
              "id"           : "intermediate_cert_badOCSP",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "OK",
              "finding"      : "intermediate certificate(s) is/are ok"
          }
,         {
              "id"           : "scanTime",
              "ip"           : "storagecfitest1775043178.blob.core.windows.net/52.239.169.228",
              "port"         : "443",
              "severity"     : "INFO",
              "finding"      : "13"
          }
]