SSL Server Test: idp.fhi-berlin.mpg.de (Powered by Qualys SSL Labs)

SSL Report: idp.fhi-berlin.mpg.de (141.14.138.220)

Assessed on: Tue, 16 Dec 2025 15:25:10 UTC | HIDDEN | Clear cache

Due to a recently discovered bug in Apple's code, your browser is exposed to MITM attacks. Click here for more information.

Assessment failed: Unable to connect to the server

Known Problems

There are some errors that we cannot fix properly in the current version. They will be addressed in the next generation version, which is currently being developed.

No secure protocols supported - if you get this message, but you know that the site supports SSL, wait until the cache expires on its own, then try again, making sure the hostname you enter uses the "www" prefix (e.g., "www.ssllabs.com", not just "ssllabs.com").
no more data allowed for version 1 certificate - the certificate is invalid; it is declared as version 1, but uses extensions, which were introduced in version 3. Browsers might ignore this problem, but our parser is strict and refuses to proceed. We'll try to find a different parser to avoid this problem.
Failed to obtain certificate and Internal Error - errors of this type will often be reported for servers that use connection rate limits or block connections in response to unusual traffic. Problems of this type are very difficult to diagnose. If you have access to the server being tested, before reporting a problem to us, please check that there is no rate limiting or IDS in place.
NetScaler issues - some NetScaler versions appear to reject SSL handshakes that do not include certain suites or handshakes that use a few suites. If the test is failing and there is a NetScaler load balancer in place, that's most likely the reason.
Unexpected failure - our tests are designed to fail when unusual results are observed. This usually happens when there are multiple TLS servers behind the same IP address. In such cases we can't provide accurate results, which is why we fail.

Common Error Messages

Connect timed out - server did not respond to our connection request, sometimes before we are dynamically blocked when our tests are detected
No route to host - unable to reach the server
Unable to connect to server - failed to connect to the server, it usually happens due to firewall restrictions
Connection reset - we got disconnected from the server
Unrecognized SSL message, plaintext connection? - the server responded with plain-text HTTP on HTTPS port
Received fatal alert: handshake_failure - this is either a faulty SSL server or some other server listening on port 443; if the SSL version of the web site works in your browser, please report this issue to us
Failed to communicate with the secure server - No secure protocol supported. Possibly this server only supports a draft version of TLS 1.3

Certificate #1: RSA 4096 bits (SHA256withRSA)

Server Key and Certificate #1
Subject	idp.fhi-berlin.mpg.de Fingerprint SHA256: de80187eaa473baca8ca2c8b591620cb4db181f9e670fad2a6b8b4dc87e344ca Pin SHA256: RAYxhCpKEx1EIzfYVyfY2ISZyy5TsV2LXC9mMdQaKpo=
Common names	idp.fhi-berlin.mpg.de
Alternative names	idp.fhi-berlin.mpg.de www.idp.fhi-berlin.mpg.de idp.fhi.mpg.de www.idp.fhi.mpg.de
Serial Number	783bf8fe7313acc92298682574cd3c6b
Valid from	Sat, 07 Jun 2025 09:42:24 UTC
Valid until	Sun, 07 Jun 2026 09:42:24 UTC (expires in 5 months and 21 days)
Key	RSA 4096 bits (e 65537)
Weak key (Debian)	No
Issuer	GEANT TLS RSA 1 AIA: http://crt.harica.gr/HARICA-GEANT-TLS-R1.cer
Signature algorithm	SHA256withRSA
Extended Validation	No
Revocation information	CRL, OCSP CRL: http://crl.harica.gr/HARICA-GEANT-TLS-R1.crl OCSP: http://ocsp-tls.harica.gr
Revocation status	Good (not revoked) CRL ERROR: IOException occurred
DNS CAA	No (more info)
Trusted	Yes Mozilla Apple Android Java Windows

Additional Certificates (if supplied)
Certificates provided	3 (5348 bytes)
Chain issues	None
#2
Subject	GEANT TLS RSA 1 Fingerprint SHA256: 5b678dc44095a52895b63b31f27227f4b36c3e347491bf2bfa691837a5fb8c79 Pin SHA256: ohOFOLq+zz8NAHyMvWszE2NvERcSyv197Lg8VHU8Rac=
Valid until	Sat, 31 Dec 2039 11:14:59 UTC (expires in 14 years)
Key	RSA 3072 bits (e 65537)
Issuer	HARICA TLS RSA Root CA 2021
Signature algorithm	SHA256withRSA
#3
Subject	HARICA TLS RSA Root CA 2021 Fingerprint SHA256: 4acd8dc6020a545a858943a553b5e0f3fc5b859aea1746650d69cf1210f956d8 Pin SHA256: aTyaprJFs7AmFjd1CGPq22wkihblLW9LyQyGu/MtcEI=
Valid until	Fri, 31 Aug 2029 07:41:54 UTC (expires in 3 years and 8 months)
Key	RSA 4096 bits (e 65537)
Issuer	Hellenic Academic and Research Institutions RootCA 2015
Signature algorithm	SHA256withRSA

Certification Paths


Path #1: Trusted
1	Sent by server	idp.fhi-berlin.mpg.de Fingerprint SHA256: de80187eaa473baca8ca2c8b591620cb4db181f9e670fad2a6b8b4dc87e344ca Pin SHA256: RAYxhCpKEx1EIzfYVyfY2ISZyy5TsV2LXC9mMdQaKpo= RSA 4096 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
2	Sent by server	GEANT TLS RSA 1 Fingerprint SHA256: 5b678dc44095a52895b63b31f27227f4b36c3e347491bf2bfa691837a5fb8c79 Pin SHA256: ohOFOLq+zz8NAHyMvWszE2NvERcSyv197Lg8VHU8Rac= RSA 3072 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
3	In trust store	HARICA TLS RSA Root CA 2021 Self-signed Fingerprint SHA256: d95d0e8eda79525bf9beb11b14d2100d3294985f0c62d9fabd9cd999eccb7b1d Pin SHA256: aTyaprJFs7AmFjd1CGPq22wkihblLW9LyQyGu/MtcEI= RSA 4096 bits (e 65537) / SHA256withRSA
Path #2: Trusted
1	Sent by server	idp.fhi-berlin.mpg.de Fingerprint SHA256: de80187eaa473baca8ca2c8b591620cb4db181f9e670fad2a6b8b4dc87e344ca Pin SHA256: RAYxhCpKEx1EIzfYVyfY2ISZyy5TsV2LXC9mMdQaKpo= RSA 4096 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
2	Sent by server	GEANT TLS RSA 1 Fingerprint SHA256: 5b678dc44095a52895b63b31f27227f4b36c3e347491bf2bfa691837a5fb8c79 Pin SHA256: ohOFOLq+zz8NAHyMvWszE2NvERcSyv197Lg8VHU8Rac= RSA 3072 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
3	Sent by server	HARICA TLS RSA Root CA 2021 Fingerprint SHA256: 4acd8dc6020a545a858943a553b5e0f3fc5b859aea1746650d69cf1210f956d8 Pin SHA256: aTyaprJFs7AmFjd1CGPq22wkihblLW9LyQyGu/MtcEI= RSA 4096 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
4	In trust store	Hellenic Academic and Research Institutions RootCA 2015 Self-signed Fingerprint SHA256: a040929a02ce53b4acf4f2ffc6981ce4496f755e6d45fe0b2a692bcd52523f36 Pin SHA256: UMyGupbbMmPHmkPq0HVT2fVmWeaQfnLYwCZjehzchdw= RSA 4096 bits (e 65537) / SHA256withRSA
Path #1: Trusted
1	Sent by server	idp.fhi-berlin.mpg.de Fingerprint SHA256: de80187eaa473baca8ca2c8b591620cb4db181f9e670fad2a6b8b4dc87e344ca Pin SHA256: RAYxhCpKEx1EIzfYVyfY2ISZyy5TsV2LXC9mMdQaKpo= RSA 4096 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
2	Sent by server	GEANT TLS RSA 1 Fingerprint SHA256: 5b678dc44095a52895b63b31f27227f4b36c3e347491bf2bfa691837a5fb8c79 Pin SHA256: ohOFOLq+zz8NAHyMvWszE2NvERcSyv197Lg8VHU8Rac= RSA 3072 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
3	In trust store	HARICA TLS RSA Root CA 2021 Self-signed Fingerprint SHA256: d95d0e8eda79525bf9beb11b14d2100d3294985f0c62d9fabd9cd999eccb7b1d Pin SHA256: aTyaprJFs7AmFjd1CGPq22wkihblLW9LyQyGu/MtcEI= RSA 4096 bits (e 65537) / SHA256withRSA
Path #2: Trusted
1	Sent by server	idp.fhi-berlin.mpg.de Fingerprint SHA256: de80187eaa473baca8ca2c8b591620cb4db181f9e670fad2a6b8b4dc87e344ca Pin SHA256: RAYxhCpKEx1EIzfYVyfY2ISZyy5TsV2LXC9mMdQaKpo= RSA 4096 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
2	Sent by server	GEANT TLS RSA 1 Fingerprint SHA256: 5b678dc44095a52895b63b31f27227f4b36c3e347491bf2bfa691837a5fb8c79 Pin SHA256: ohOFOLq+zz8NAHyMvWszE2NvERcSyv197Lg8VHU8Rac= RSA 3072 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
3	Sent by server	HARICA TLS RSA Root CA 2021 Fingerprint SHA256: 4acd8dc6020a545a858943a553b5e0f3fc5b859aea1746650d69cf1210f956d8 Pin SHA256: aTyaprJFs7AmFjd1CGPq22wkihblLW9LyQyGu/MtcEI= RSA 4096 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
4	In trust store	Hellenic Academic and Research Institutions RootCA 2015 Self-signed Fingerprint SHA256: a040929a02ce53b4acf4f2ffc6981ce4496f755e6d45fe0b2a692bcd52523f36 Pin SHA256: UMyGupbbMmPHmkPq0HVT2fVmWeaQfnLYwCZjehzchdw= RSA 4096 bits (e 65537) / SHA256withRSA
Path #1: Trusted
1	Sent by server	idp.fhi-berlin.mpg.de Fingerprint SHA256: de80187eaa473baca8ca2c8b591620cb4db181f9e670fad2a6b8b4dc87e344ca Pin SHA256: RAYxhCpKEx1EIzfYVyfY2ISZyy5TsV2LXC9mMdQaKpo= RSA 4096 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
2	Sent by server	GEANT TLS RSA 1 Fingerprint SHA256: 5b678dc44095a52895b63b31f27227f4b36c3e347491bf2bfa691837a5fb8c79 Pin SHA256: ohOFOLq+zz8NAHyMvWszE2NvERcSyv197Lg8VHU8Rac= RSA 3072 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
3	In trust store	HARICA TLS RSA Root CA 2021 Self-signed Fingerprint SHA256: d95d0e8eda79525bf9beb11b14d2100d3294985f0c62d9fabd9cd999eccb7b1d Pin SHA256: aTyaprJFs7AmFjd1CGPq22wkihblLW9LyQyGu/MtcEI= RSA 4096 bits (e 65537) / SHA256withRSA
Path #2: Trusted
1	Sent by server	idp.fhi-berlin.mpg.de Fingerprint SHA256: de80187eaa473baca8ca2c8b591620cb4db181f9e670fad2a6b8b4dc87e344ca Pin SHA256: RAYxhCpKEx1EIzfYVyfY2ISZyy5TsV2LXC9mMdQaKpo= RSA 4096 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
2	Sent by server	GEANT TLS RSA 1 Fingerprint SHA256: 5b678dc44095a52895b63b31f27227f4b36c3e347491bf2bfa691837a5fb8c79 Pin SHA256: ohOFOLq+zz8NAHyMvWszE2NvERcSyv197Lg8VHU8Rac= RSA 3072 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
3	Sent by server	HARICA TLS RSA Root CA 2021 Fingerprint SHA256: 4acd8dc6020a545a858943a553b5e0f3fc5b859aea1746650d69cf1210f956d8 Pin SHA256: aTyaprJFs7AmFjd1CGPq22wkihblLW9LyQyGu/MtcEI= RSA 4096 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
4	In trust store	Hellenic Academic and Research Institutions RootCA 2015 Self-signed Fingerprint SHA256: a040929a02ce53b4acf4f2ffc6981ce4496f755e6d45fe0b2a692bcd52523f36 Pin SHA256: UMyGupbbMmPHmkPq0HVT2fVmWeaQfnLYwCZjehzchdw= RSA 4096 bits (e 65537) / SHA256withRSA
Path #1: Trusted
1	Sent by server	idp.fhi-berlin.mpg.de Fingerprint SHA256: de80187eaa473baca8ca2c8b591620cb4db181f9e670fad2a6b8b4dc87e344ca Pin SHA256: RAYxhCpKEx1EIzfYVyfY2ISZyy5TsV2LXC9mMdQaKpo= RSA 4096 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
2	Sent by server	GEANT TLS RSA 1 Fingerprint SHA256: 5b678dc44095a52895b63b31f27227f4b36c3e347491bf2bfa691837a5fb8c79 Pin SHA256: ohOFOLq+zz8NAHyMvWszE2NvERcSyv197Lg8VHU8Rac= RSA 3072 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
3	Sent by server	HARICA TLS RSA Root CA 2021 Fingerprint SHA256: 4acd8dc6020a545a858943a553b5e0f3fc5b859aea1746650d69cf1210f956d8 Pin SHA256: aTyaprJFs7AmFjd1CGPq22wkihblLW9LyQyGu/MtcEI= RSA 4096 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
4	In trust store	Hellenic Academic and Research Institutions RootCA 2015 Self-signed Fingerprint SHA256: a040929a02ce53b4acf4f2ffc6981ce4496f755e6d45fe0b2a692bcd52523f36 Pin SHA256: UMyGupbbMmPHmkPq0HVT2fVmWeaQfnLYwCZjehzchdw= RSA 4096 bits (e 65537) / SHA256withRSA
Path #2: Not trusted (path does not chain to a trusted anchor)
1	Sent by server	idp.fhi-berlin.mpg.de Fingerprint SHA256: de80187eaa473baca8ca2c8b591620cb4db181f9e670fad2a6b8b4dc87e344ca Pin SHA256: RAYxhCpKEx1EIzfYVyfY2ISZyy5TsV2LXC9mMdQaKpo= RSA 4096 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
2	Sent by server	GEANT TLS RSA 1 Fingerprint SHA256: 5b678dc44095a52895b63b31f27227f4b36c3e347491bf2bfa691837a5fb8c79 Pin SHA256: ohOFOLq+zz8NAHyMvWszE2NvERcSyv197Lg8VHU8Rac= RSA 3072 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
3	Extra download Not in trust store	HARICA TLS RSA Root CA 2021 Self-signed Fingerprint SHA256: d95d0e8eda79525bf9beb11b14d2100d3294985f0c62d9fabd9cd999eccb7b1d Pin SHA256: aTyaprJFs7AmFjd1CGPq22wkihblLW9LyQyGu/MtcEI= RSA 4096 bits (e 65537) / SHA256withRSA
Path #1: Trusted
1	Sent by server	idp.fhi-berlin.mpg.de Fingerprint SHA256: de80187eaa473baca8ca2c8b591620cb4db181f9e670fad2a6b8b4dc87e344ca Pin SHA256: RAYxhCpKEx1EIzfYVyfY2ISZyy5TsV2LXC9mMdQaKpo= RSA 4096 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
2	Sent by server	GEANT TLS RSA 1 Fingerprint SHA256: 5b678dc44095a52895b63b31f27227f4b36c3e347491bf2bfa691837a5fb8c79 Pin SHA256: ohOFOLq+zz8NAHyMvWszE2NvERcSyv197Lg8VHU8Rac= RSA 3072 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
3	In trust store	HARICA TLS RSA Root CA 2021 Self-signed Fingerprint SHA256: d95d0e8eda79525bf9beb11b14d2100d3294985f0c62d9fabd9cd999eccb7b1d Pin SHA256: aTyaprJFs7AmFjd1CGPq22wkihblLW9LyQyGu/MtcEI= RSA 4096 bits (e 65537) / SHA256withRSA
Path #2: Trusted
1	Sent by server	idp.fhi-berlin.mpg.de Fingerprint SHA256: de80187eaa473baca8ca2c8b591620cb4db181f9e670fad2a6b8b4dc87e344ca Pin SHA256: RAYxhCpKEx1EIzfYVyfY2ISZyy5TsV2LXC9mMdQaKpo= RSA 4096 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
2	Sent by server	GEANT TLS RSA 1 Fingerprint SHA256: 5b678dc44095a52895b63b31f27227f4b36c3e347491bf2bfa691837a5fb8c79 Pin SHA256: ohOFOLq+zz8NAHyMvWszE2NvERcSyv197Lg8VHU8Rac= RSA 3072 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
3	Sent by server	HARICA TLS RSA Root CA 2021 Fingerprint SHA256: 4acd8dc6020a545a858943a553b5e0f3fc5b859aea1746650d69cf1210f956d8 Pin SHA256: aTyaprJFs7AmFjd1CGPq22wkihblLW9LyQyGu/MtcEI= RSA 4096 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
4	In trust store	Hellenic Academic and Research Institutions RootCA 2015 Self-signed Fingerprint SHA256: a040929a02ce53b4acf4f2ffc6981ce4496f755e6d45fe0b2a692bcd52523f36 Pin SHA256: UMyGupbbMmPHmkPq0HVT2fVmWeaQfnLYwCZjehzchdw= RSA 4096 bits (e 65537) / SHA256withRSA

Click here to expand

SSL Report v2.4.1

Copyright © 2009-2025 Qualys, Inc. All Rights Reserved. Privacy Policy.	Terms and Conditions
Try Qualys for free! Experience the award-winning Qualys Cloud Platform and the entire collection of Qualys Cloud Apps, including certificate security solutions.