SSL Report: metropole.nantes.fr (80.247.12.103)
Assessed on:  Sun, 24 Aug 2025 12:00:52 UTC | Clear cache

Due to a recently discovered bug in Apple's code, your browser is exposed to MITM attacks. Click here for more information.

Summary
Overall Rating
A+
0
20
40
60
80
100
Certificate
 
Protocol Support
 
Key Exchange
 
Cipher Strength
 

Visit our documentation page for more information, configuration guides, and books. Known issues are documented here.
This server supports TLS 1.3.  MORE INFO »
HTTP Strict Transport Security (HSTS) with long duration deployed on this server.  MORE INFO »
Certificate #1: RSA 2048 bits (SHA256withRSA)
Server Key and Certificate #1
Subject metropole.nantes.fr
Fingerprint SHA256: 7d3983fe49a20495e323aa4667f51db4f40b6644427f26d76161e462d0103a21
Pin SHA256: xY5tkT8TVCLfAGAwm7xx6W+ebtH1deuOZ4auekvdpeo=
Common names metropole.nantes.fr
Alternative names metropole.nantes.fr www.metropole.nantes.fr
Serial Number 00884bba7791def10163b1f0aa7053f2d7
Valid from Tue, 01 Apr 2025 00:00:00 UTC
Valid until Sat, 02 May 2026 23:59:59 UTC (expires in 8 months and 8 days)
Key RSA 2048 bits (e 65537)
Weak key (Debian) No
Issuer Sectigo RSA Organization Validation Secure Server CA
AIA: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt
Signature algorithm SHA256withRSA
Extended Validation No
Certificate Transparency Yes (certificate)
OCSP Must Staple No
Revocation information CRL, OCSP
CRL: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
OCSP: http://ocsp.sectigo.com
Revocation status Good (not revoked)
DNS CAA No (more info)
Trusted Yes
Mozilla  Apple  Android  Java  Windows 


Additional Certificates (if supplied)
Certificates provided 3 (4773 bytes)
Chain issues None
#2
Subject Sectigo RSA Organization Validation Secure Server CA
Fingerprint SHA256: 72a34ac2b424aed3f6b0b04755b88cc027dccc806fddb22b4cd7c47773973ec0
Pin SHA256: RkhWTcfJAQN/YxOR12VkPo+PhmIoSfWd/JVkg44einY=
Valid until Tue, 31 Dec 2030 23:59:59 UTC (expires in 5 years and 4 months)
Key RSA 2048 bits (e 65537)
Issuer USERTrust RSA Certification Authority
Signature algorithm SHA384withRSA
#3
Subject USERTrust RSA Certification Authority
Fingerprint SHA256: 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
Pin SHA256: x4QzPSC810K5/cMjb05Qm4k3Bw5zBn4lTdO/nEW/Td4=
Valid until Sun, 31 Dec 2028 23:59:59 UTC (expires in 3 years and 4 months)
Key RSA 4096 bits (e 65537)
Issuer AAA Certificate Services
Signature algorithm SHA384withRSA


Certification Paths
Path #1: Trusted
1 Sent by server metropole.nantes.fr
Fingerprint SHA256: 7d3983fe49a20495e323aa4667f51db4f40b6644427f26d76161e462d0103a21
Pin SHA256: xY5tkT8TVCLfAGAwm7xx6W+ebtH1deuOZ4auekvdpeo=

RSA 2048 bits (e 65537) / SHA256withRSA
2 Sent by server Sectigo RSA Organization Validation Secure Server CA
Fingerprint SHA256: 72a34ac2b424aed3f6b0b04755b88cc027dccc806fddb22b4cd7c47773973ec0
Pin SHA256: RkhWTcfJAQN/YxOR12VkPo+PhmIoSfWd/JVkg44einY=

RSA 2048 bits (e 65537) / SHA384withRSA
3 In trust store USERTrust RSA Certification Authority   Self-signed
Fingerprint SHA256: e793c9b02fd8aa13e21c31228accb08119643b749c898964b1746d46c3d4cbd2
Pin SHA256: x4QzPSC810K5/cMjb05Qm4k3Bw5zBn4lTdO/nEW/Td4=

RSA 4096 bits (e 65537) / SHA384withRSA
Path #2: Trusted
1 Sent by server metropole.nantes.fr
Fingerprint SHA256: 7d3983fe49a20495e323aa4667f51db4f40b6644427f26d76161e462d0103a21
Pin SHA256: xY5tkT8TVCLfAGAwm7xx6W+ebtH1deuOZ4auekvdpeo=

RSA 2048 bits (e 65537) / SHA256withRSA
2 Sent by server Sectigo RSA Organization Validation Secure Server CA
Fingerprint SHA256: 72a34ac2b424aed3f6b0b04755b88cc027dccc806fddb22b4cd7c47773973ec0
Pin SHA256: RkhWTcfJAQN/YxOR12VkPo+PhmIoSfWd/JVkg44einY=

RSA 2048 bits (e 65537) / SHA384withRSA
3 Sent by server USERTrust RSA Certification Authority
Fingerprint SHA256: 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
Pin SHA256: x4QzPSC810K5/cMjb05Qm4k3Bw5zBn4lTdO/nEW/Td4=

RSA 4096 bits (e 65537) / SHA384withRSA
4 In trust store AAA Certificate Services   Self-signed
Fingerprint SHA256: d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
Pin SHA256: vRU+17BDT2iGsXvOi76E7TQMcTLXAqj0+jGPdW7L1vM=

RSA 2048 bits (e 65537) / SHA1withRSA
Weak or insecure signature, but no impact on root certificate
Path #1: Trusted
1 Sent by server metropole.nantes.fr
Fingerprint SHA256: 7d3983fe49a20495e323aa4667f51db4f40b6644427f26d76161e462d0103a21
Pin SHA256: xY5tkT8TVCLfAGAwm7xx6W+ebtH1deuOZ4auekvdpeo=

RSA 2048 bits (e 65537) / SHA256withRSA
2 Sent by server Sectigo RSA Organization Validation Secure Server CA
Fingerprint SHA256: 72a34ac2b424aed3f6b0b04755b88cc027dccc806fddb22b4cd7c47773973ec0
Pin SHA256: RkhWTcfJAQN/YxOR12VkPo+PhmIoSfWd/JVkg44einY=

RSA 2048 bits (e 65537) / SHA384withRSA
3 In trust store USERTrust RSA Certification Authority   Self-signed
Fingerprint SHA256: e793c9b02fd8aa13e21c31228accb08119643b749c898964b1746d46c3d4cbd2
Pin SHA256: x4QzPSC810K5/cMjb05Qm4k3Bw5zBn4lTdO/nEW/Td4=

RSA 4096 bits (e 65537) / SHA384withRSA
Path #2: Trusted
1 Sent by server metropole.nantes.fr
Fingerprint SHA256: 7d3983fe49a20495e323aa4667f51db4f40b6644427f26d76161e462d0103a21
Pin SHA256: xY5tkT8TVCLfAGAwm7xx6W+ebtH1deuOZ4auekvdpeo=

RSA 2048 bits (e 65537) / SHA256withRSA
2 Sent by server Sectigo RSA Organization Validation Secure Server CA
Fingerprint SHA256: 72a34ac2b424aed3f6b0b04755b88cc027dccc806fddb22b4cd7c47773973ec0
Pin SHA256: RkhWTcfJAQN/YxOR12VkPo+PhmIoSfWd/JVkg44einY=

RSA 2048 bits (e 65537) / SHA384withRSA
3 Sent by server USERTrust RSA Certification Authority
Fingerprint SHA256: 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
Pin SHA256: x4QzPSC810K5/cMjb05Qm4k3Bw5zBn4lTdO/nEW/Td4=

RSA 4096 bits (e 65537) / SHA384withRSA
4 In trust store AAA Certificate Services   Self-signed
Fingerprint SHA256: d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
Pin SHA256: vRU+17BDT2iGsXvOi76E7TQMcTLXAqj0+jGPdW7L1vM=

RSA 2048 bits (e 65537) / SHA1withRSA
Weak or insecure signature, but no impact on root certificate
Path #1: Trusted
1 Sent by server metropole.nantes.fr
Fingerprint SHA256: 7d3983fe49a20495e323aa4667f51db4f40b6644427f26d76161e462d0103a21
Pin SHA256: xY5tkT8TVCLfAGAwm7xx6W+ebtH1deuOZ4auekvdpeo=

RSA 2048 bits (e 65537) / SHA256withRSA
2 Sent by server Sectigo RSA Organization Validation Secure Server CA
Fingerprint SHA256: 72a34ac2b424aed3f6b0b04755b88cc027dccc806fddb22b4cd7c47773973ec0
Pin SHA256: RkhWTcfJAQN/YxOR12VkPo+PhmIoSfWd/JVkg44einY=

RSA 2048 bits (e 65537) / SHA384withRSA
3 In trust store USERTrust RSA Certification Authority   Self-signed
Fingerprint SHA256: e793c9b02fd8aa13e21c31228accb08119643b749c898964b1746d46c3d4cbd2
Pin SHA256: x4QzPSC810K5/cMjb05Qm4k3Bw5zBn4lTdO/nEW/Td4=

RSA 4096 bits (e 65537) / SHA384withRSA
Path #2: Trusted
1 Sent by server metropole.nantes.fr
Fingerprint SHA256: 7d3983fe49a20495e323aa4667f51db4f40b6644427f26d76161e462d0103a21
Pin SHA256: xY5tkT8TVCLfAGAwm7xx6W+ebtH1deuOZ4auekvdpeo=

RSA 2048 bits (e 65537) / SHA256withRSA
2 Sent by server Sectigo RSA Organization Validation Secure Server CA
Fingerprint SHA256: 72a34ac2b424aed3f6b0b04755b88cc027dccc806fddb22b4cd7c47773973ec0
Pin SHA256: RkhWTcfJAQN/YxOR12VkPo+PhmIoSfWd/JVkg44einY=

RSA 2048 bits (e 65537) / SHA384withRSA
3 Sent by server USERTrust RSA Certification Authority
Fingerprint SHA256: 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
Pin SHA256: x4QzPSC810K5/cMjb05Qm4k3Bw5zBn4lTdO/nEW/Td4=

RSA 4096 bits (e 65537) / SHA384withRSA
4 In trust store AAA Certificate Services   Self-signed
Fingerprint SHA256: d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
Pin SHA256: vRU+17BDT2iGsXvOi76E7TQMcTLXAqj0+jGPdW7L1vM=

RSA 2048 bits (e 65537) / SHA1withRSA
Weak or insecure signature, but no impact on root certificate
Path #1: Trusted
1 Sent by server metropole.nantes.fr
Fingerprint SHA256: 7d3983fe49a20495e323aa4667f51db4f40b6644427f26d76161e462d0103a21
Pin SHA256: xY5tkT8TVCLfAGAwm7xx6W+ebtH1deuOZ4auekvdpeo=

RSA 2048 bits (e 65537) / SHA256withRSA
2 Sent by server Sectigo RSA Organization Validation Secure Server CA
Fingerprint SHA256: 72a34ac2b424aed3f6b0b04755b88cc027dccc806fddb22b4cd7c47773973ec0
Pin SHA256: RkhWTcfJAQN/YxOR12VkPo+PhmIoSfWd/JVkg44einY=

RSA 2048 bits (e 65537) / SHA384withRSA
3 In trust store USERTrust RSA Certification Authority   Self-signed
Fingerprint SHA256: e793c9b02fd8aa13e21c31228accb08119643b749c898964b1746d46c3d4cbd2
Pin SHA256: x4QzPSC810K5/cMjb05Qm4k3Bw5zBn4lTdO/nEW/Td4=

RSA 4096 bits (e 65537) / SHA384withRSA
Path #2: Trusted
1 Sent by server metropole.nantes.fr
Fingerprint SHA256: 7d3983fe49a20495e323aa4667f51db4f40b6644427f26d76161e462d0103a21
Pin SHA256: xY5tkT8TVCLfAGAwm7xx6W+ebtH1deuOZ4auekvdpeo=

RSA 2048 bits (e 65537) / SHA256withRSA
2 Sent by server Sectigo RSA Organization Validation Secure Server CA
Fingerprint SHA256: 72a34ac2b424aed3f6b0b04755b88cc027dccc806fddb22b4cd7c47773973ec0
Pin SHA256: RkhWTcfJAQN/YxOR12VkPo+PhmIoSfWd/JVkg44einY=

RSA 2048 bits (e 65537) / SHA384withRSA
3 Sent by server USERTrust RSA Certification Authority
Fingerprint SHA256: 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
Pin SHA256: x4QzPSC810K5/cMjb05Qm4k3Bw5zBn4lTdO/nEW/Td4=

RSA 4096 bits (e 65537) / SHA384withRSA
4 In trust store AAA Certificate Services   Self-signed
Fingerprint SHA256: d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
Pin SHA256: vRU+17BDT2iGsXvOi76E7TQMcTLXAqj0+jGPdW7L1vM=

RSA 2048 bits (e 65537) / SHA1withRSA
Weak or insecure signature, but no impact on root certificate
Path #1: Trusted
1 Sent by server metropole.nantes.fr
Fingerprint SHA256: 7d3983fe49a20495e323aa4667f51db4f40b6644427f26d76161e462d0103a21
Pin SHA256: xY5tkT8TVCLfAGAwm7xx6W+ebtH1deuOZ4auekvdpeo=

RSA 2048 bits (e 65537) / SHA256withRSA
2 Sent by server Sectigo RSA Organization Validation Secure Server CA
Fingerprint SHA256: 72a34ac2b424aed3f6b0b04755b88cc027dccc806fddb22b4cd7c47773973ec0
Pin SHA256: RkhWTcfJAQN/YxOR12VkPo+PhmIoSfWd/JVkg44einY=

RSA 2048 bits (e 65537) / SHA384withRSA
3 In trust store USERTrust RSA Certification Authority   Self-signed
Fingerprint SHA256: e793c9b02fd8aa13e21c31228accb08119643b749c898964b1746d46c3d4cbd2
Pin SHA256: x4QzPSC810K5/cMjb05Qm4k3Bw5zBn4lTdO/nEW/Td4=

RSA 4096 bits (e 65537) / SHA384withRSA
Path #2: Trusted
1 Sent by server metropole.nantes.fr
Fingerprint SHA256: 7d3983fe49a20495e323aa4667f51db4f40b6644427f26d76161e462d0103a21
Pin SHA256: xY5tkT8TVCLfAGAwm7xx6W+ebtH1deuOZ4auekvdpeo=

RSA 2048 bits (e 65537) / SHA256withRSA
2 Sent by server Sectigo RSA Organization Validation Secure Server CA
Fingerprint SHA256: 72a34ac2b424aed3f6b0b04755b88cc027dccc806fddb22b4cd7c47773973ec0
Pin SHA256: RkhWTcfJAQN/YxOR12VkPo+PhmIoSfWd/JVkg44einY=

RSA 2048 bits (e 65537) / SHA384withRSA
3 Sent by server USERTrust RSA Certification Authority
Fingerprint SHA256: 68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b
Pin SHA256: x4QzPSC810K5/cMjb05Qm4k3Bw5zBn4lTdO/nEW/Td4=

RSA 4096 bits (e 65537) / SHA384withRSA
4 In trust store AAA Certificate Services   Self-signed
Fingerprint SHA256: d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4
Pin SHA256: vRU+17BDT2iGsXvOi76E7TQMcTLXAqj0+jGPdW7L1vM=

RSA 2048 bits (e 65537) / SHA1withRSA
Weak or insecure signature, but no impact on root certificate

Click here to expand

Configuration
Protocols
TLS 1.3 Yes
TLS 1.2 Yes
TLS 1.1 No
TLS 1.0 No
SSL 3 No
SSL 2 No


Cipher Suites
# TLS 1.3 (server has no preference)
TLS_AES_128_GCM_SHA256 (0x1301)   ECDH x25519 (eq. 3072 bits RSA)   FS 128
TLS_AES_256_GCM_SHA384 (0x1302)   ECDH x25519 (eq. 3072 bits RSA)   FS 256
TLS_CHACHA20_POLY1305_SHA256 (0x1303)   ECDH x25519 (eq. 3072 bits RSA)   FS 256
# TLS 1.2 (server has no preference)
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f)   ECDH secp521r1 (eq. 15360 bits RSA)   FS 128
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030)   ECDH secp521r1 (eq. 15360 bits RSA)   FS 256
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (0xcca8)   ECDH secp521r1 (eq. 15360 bits RSA)   FS 256


Handshake Simulation
Android 4.4.2 RSA 2048 (SHA256)   TLS 1.2 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384   ECDH secp521r1  FS
Android 5.0.0 RSA 2048 (SHA256)   TLS 1.2 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256   ECDH secp521r1  FS
Android 6.0 RSA 2048 (SHA256)   TLS 1.2 > http/1.1   TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256   ECDH secp256r1  FS
Android 7.0 RSA 2048 (SHA256)   TLS 1.2 > h2   TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256   ECDH x25519  FS
Android 8.0 RSA 2048 (SHA256)   TLS 1.2 > h2   TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256   ECDH x25519  FS
Android 8.1 -   TLS 1.3 TLS_CHACHA20_POLY1305_SHA256   ECDH x25519  FS
Android 9.0 -   TLS 1.3 TLS_CHACHA20_POLY1305_SHA256   ECDH x25519  FS
BingPreview Jan 2015 RSA 2048 (SHA256)   TLS 1.2 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384   ECDH secp521r1  FS
Chrome 49 / XP SP3 RSA 2048 (SHA256)   TLS 1.2 > h2   TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256   ECDH secp256r1  FS
Chrome 69 / Win 7  R RSA 2048 (SHA256)   TLS 1.2 > h2   TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256   ECDH x25519  FS
Chrome 70 / Win 10 -   TLS 1.3 TLS_AES_128_GCM_SHA256   ECDH x25519  FS
Chrome 80 / Win 10  R -   TLS 1.3 TLS_AES_128_GCM_SHA256   ECDH x25519  FS
Firefox 31.3.0 ESR / Win 7 RSA 2048 (SHA256)   TLS 1.2 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256   ECDH secp256r1  FS
Firefox 47 / Win 7  R RSA 2048 (SHA256)   TLS 1.2 > h2   TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256   ECDH secp256r1  FS
Firefox 49 / XP SP3 RSA 2048 (SHA256)   TLS 1.2 > h2   TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256   ECDH secp256r1  FS
Firefox 62 / Win 7  R RSA 2048 (SHA256)   TLS 1.2 > h2   TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256   ECDH x25519  FS
Firefox 73 / Win 10  R -   TLS 1.3 TLS_AES_128_GCM_SHA256   ECDH x25519  FS
Googlebot Feb 2018 RSA 2048 (SHA256)   TLS 1.2 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256   ECDH x25519  FS
IE 11 / Win 7  R Server sent fatal alert: handshake_failure
IE 11 / Win 8.1  R Server sent fatal alert: handshake_failure
IE 11 / Win Phone 8.1  R Server sent fatal alert: handshake_failure
IE 11 / Win Phone 8.1 Update  R Server sent fatal alert: handshake_failure
IE 11 / Win 10  R RSA 2048 (SHA256)   TLS 1.2 > h2   TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384   ECDH secp256r1  FS
Edge 15 / Win 10  R RSA 2048 (SHA256)   TLS 1.2 > h2   TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384   ECDH x25519  FS
Edge 16 / Win 10  R RSA 2048 (SHA256)   TLS 1.2 > h2   TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384   ECDH x25519  FS
Edge 18 / Win 10  R RSA 2048 (SHA256)   TLS 1.2 > h2   TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384   ECDH x25519  FS
Edge 13 / Win Phone 10  R RSA 2048 (SHA256)   TLS 1.2 > h2   TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384   ECDH secp256r1  FS
Java 8u161 RSA 2048 (SHA256)   TLS 1.2 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384   ECDH secp256r1  FS
Java 11.0.3 -   TLS 1.3 TLS_AES_128_GCM_SHA256   ECDH secp256r1  FS
Java 12.0.1 -   TLS 1.3 TLS_AES_128_GCM_SHA256   ECDH secp256r1  FS
OpenSSL 1.0.1l  R RSA 2048 (SHA256)   TLS 1.2 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384   ECDH secp521r1  FS
OpenSSL 1.0.2s  R RSA 2048 (SHA256)   TLS 1.2 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384   ECDH secp256r1  FS
OpenSSL 1.1.0k  R RSA 2048 (SHA256)   TLS 1.2 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384   ECDH x25519  FS
OpenSSL 1.1.1c  R -   TLS 1.3 TLS_AES_256_GCM_SHA384   ECDH x25519  FS
Safari 6 / iOS 6.0.1 Server sent fatal alert: handshake_failure
Safari 7 / iOS 7.1  R Server sent fatal alert: handshake_failure
Safari 7 / OS X 10.9  R Server sent fatal alert: handshake_failure
Safari 8 / iOS 8.4  R Server sent fatal alert: handshake_failure
Safari 8 / OS X 10.10  R Server sent fatal alert: handshake_failure
Safari 9 / iOS 9  R RSA 2048 (SHA256)   TLS 1.2 > h2   TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384   ECDH secp256r1  FS
Safari 9 / OS X 10.11  R RSA 2048 (SHA256)   TLS 1.2 > h2   TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384   ECDH secp256r1  FS
Safari 10 / iOS 10  R RSA 2048 (SHA256)   TLS 1.2 > h2   TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384   ECDH secp256r1  FS
Safari 10 / OS X 10.12  R RSA 2048 (SHA256)   TLS 1.2 > h2   TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384   ECDH secp256r1  FS
Safari 12.1.2 / MacOS 10.14.6 Beta  R -   TLS 1.3 TLS_CHACHA20_POLY1305_SHA256   ECDH x25519  FS
Safari 12.1.1 / iOS 12.3.1  R -   TLS 1.3 TLS_CHACHA20_POLY1305_SHA256   ECDH x25519  FS
Apple ATS 9 / iOS 9  R RSA 2048 (SHA256)   TLS 1.2 > h2   TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384   ECDH secp256r1  FS
Yahoo Slurp Jan 2015 RSA 2048 (SHA256)   TLS 1.2 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384   ECDH secp384r1  FS
YandexBot Jan 2015 RSA 2048 (SHA256)   TLS 1.2 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384   ECDH secp521r1  FS
# Not simulated clients (Protocol mismatch)
Android 2.3.7   No SNI 2 Protocol mismatch (not simulated)
Android 4.0.4 Protocol mismatch (not simulated)
Android 4.1.1 Protocol mismatch (not simulated)
Android 4.2.2 Protocol mismatch (not simulated)
Android 4.3 Protocol mismatch (not simulated)
Baidu Jan 2015 Protocol mismatch (not simulated)
IE 6 / XP   No FS 1   No SNI 2 Protocol mismatch (not simulated)
IE 7 / Vista Protocol mismatch (not simulated)
IE 8 / XP   No FS 1   No SNI 2 Protocol mismatch (not simulated)
IE 8-10 / Win 7  R Protocol mismatch (not simulated)
IE 10 / Win Phone 8.0 Protocol mismatch (not simulated)
Java 6u45   No SNI 2 Protocol mismatch (not simulated)
Java 7u25 Protocol mismatch (not simulated)
OpenSSL 0.9.8y Protocol mismatch (not simulated)
Safari 5.1.9 / OS X 10.6.8 Protocol mismatch (not simulated)
Safari 6.0.4 / OS X 10.8.4  R Protocol mismatch (not simulated)

Click here to expand

(1) Clients that do not support Forward Secrecy (FS) are excluded when determining support for it.
(2) No support for virtual SSL hosting (SNI). Connects to the default site if the server uses SNI.
(3) Only first connection attempt simulated. Browsers sometimes retry with a lower protocol version.
(R) Denotes a reference browser or client, with which we expect better effective security.
(All) We use defaults, but some platforms do not use their best protocols and features (e.g., Java 6 & 7, older IE).
(All) Certificate trust is not checked in handshake simulation, we only perform TLS handshake.


Protocol Details
Secure Renegotiation Supported
Secure Client-Initiated Renegotiation No
Insecure Client-Initiated Renegotiation No
BEAST attack Mitigated server-side (more info)  
POODLE (SSLv3) No, SSL 3 not supported (more info)
POODLE (TLS) No (more info)
Zombie POODLE No (more info)  
GOLDENDOODLE No (more info)  
OpenSSL 0-Length No (more info)  
Sleeping POODLE No (more info)  
Downgrade attack prevention Yes, TLS_FALLBACK_SCSV supported (more info)
SSL/TLS compression No
RC4 No
Heartbeat (extension) No
Heartbleed (vulnerability) No (more info)
Ticketbleed (vulnerability) No (more info)
OpenSSL CCS vuln. (CVE-2014-0224) No (more info)
OpenSSL Padding Oracle vuln.
(CVE-2016-2107)
No (more info)
ROBOT (vulnerability) No (more info)
Forward Secrecy Yes (with most browsers)   ROBUST (more info)
ALPN Yes   h2 http/1.1
NPN No
Session resumption (caching) Yes
Session resumption (tickets) Yes
OCSP stapling No
Strict Transport Security (HSTS) Yes
max-age=63072000
HSTS Preloading Not in: Chrome  Edge  Firefox  IE 
Public Key Pinning (HPKP) No (more info)
Public Key Pinning Report-Only No
Public Key Pinning (Static) No (more info)
Long handshake intolerance No
TLS extension intolerance No
TLS version intolerance No
Incorrect SNI alerts No
Uses common DH primes No, DHE suites not supported
DH public server param (Ys) reuse No, DHE suites not supported
ECDH public server param reuse No
Supported Named Groups secp256r1, secp384r1, secp521r1, x25519, x448 (Server has no preference)
SSL 2 handshake compatibility No
0-RTT enabled No


HTTP Requests
1 https://metropole.nantes.fr/  (HTTP/1.1 200 OK)
1
Server nginx
Date Sun, 24 Aug 2025 11:59:54 GMT
Content-Type text/html; charset=UTF-8
Content-Length 96608
Connection close
Vary Accept-Encoding
Vary Accept-Encoding, Accept-Encoding, Cookie
Cache-Control max-age=86400, must-revalidate, public
Content-language fr
X-Content-Type-Options nosniff
X-Frame-Options SAMEORIGIN
Expires Sun, 19 Nov 1978 05:00:00 GMT
Last-Modified Fri, 22 Aug 2025 14:21:29 GMT
ETag W/"1755872489"
Strict-Transport-Security max-age=63072000
X-XSS-Protection 1; mode=block
X-Content-Type-Options nosniff
X-Permitted-Cross-Domain-Policies master-only
Cache-Tags config:block_list config:access_unpublished.settings config:block.block.nantes_contenudelapageprincipale config:block.block.nantes_nantessamethematicnews node:1 config:block.block.nantes_nantessamerequirementsprojects config:block.block.nantes_nantesrelatedequipmentsblock config:block.block.nantes_nantesrelatedassociations config:block.block.nantes_nantesassociationpushedblock config:block.block.nantes_filsdariane config:block.block.nantes_messages config:block.block.nantes_nantesheaderbannernavigation config:block.block.nantes_nanteshighlightedbanner config:block.block.nantes_socials_footer config:block.block.nantes_nantestopfooter config:block.block.nantes_left_footer config:block.block.nantes_footer config:block.block.nantes_mentions config:block.block.nantes_other_links_footer config:block.block.nantes_nantesleftfootermaintenance config:block.block.nantes_adimeoalertbanner config:extlink.settings block_view config:system.menu.mention node:21308 node:9388 node:9385 node:9386 taxonomy_term_list:social_network adimeo_configuration_list taxonomy_term_view taxonomy_term:120 taxonomy_term:2 taxonomy_term:4 taxonomy_term:119 taxonomy_term:3 taxonomy_term:1 config:system.menu.other-links-footer node:9595 node:10455 node:10458 node:9391 node:9392 node:9648 node:9580 node:14080 config:system.menu.footer node:9467 node:14054 node:14043 node:9542 node:3939 media_view media:71 config:image.style.logo_footer file:120 media:70 file:119 media:19826 media:19827 media:19828 paragraph_view paragraph:4 config:image.style.useful_links_footer file:17983 paragraph:3 file:17982 paragraph:98 file:17981 node_view paragraph:607530 config:paragraphs.settings taxonomy_term:736 taxonomy_term:1190 taxonomy_term:1183 media:21442 config:responsive_image.styles.serie_teaser_cover config:image.style.serie_teaser_cover config:image.style.serie_teaser_cover_x2 node_list:episode media:21436 media:21424 media:37 config:image.style.paragraph_service_type file:76 media:21533 config:responsive_image.styles.home_dossier_image config:image.style.home_dossier_image_x1 config:image.style.home_dossier_image_x2 media:20422 config:responsive_image.styles.responsive_full_page config:image.style.landscape_full_page_1920w config:image.style.landscape_full_page_1280w config:image.style.landscape_full_page_1366w config:image.style.landscape_full_page_1440w config:image.style.landscape_full_page_2560w config:image.style.landscape_full_page_2732w config:image.style.landscape_full_page_2880w config:image.style.landscape_full_page_450w config:image.style.landscape_full_page_5116w config:image.style.landscape_full_page_900w node:29300 node:14404 node:14041 node:28293 taxonomy_term:71 taxonomy_term:1148 taxonomy_term:61 taxonomy_term:107 taxonomy_term:73 taxonomy_term_list:quick_access taxonomy_term:112 media:19971 taxonomy_term:111 media:19972 taxonomy_term:110 media:19968 taxonomy_term:109 media:19967 taxonomy_term:1181 media:20129 taxonomy_term:1175 media:19964 taxonomy_term:1180 media:20128 taxonomy_term:1179 media:20127 taxonomy_term:1174 media:19962 taxonomy_term:113 media:19965 media:21539 media:21538 config:node.type.home config:system.site paragraph:42 node:31625 paragraph:49 node:9973 taxonomy_term:1145 paragraph:48 node:31992 taxonomy_term:54 paragraph:50 node:29289 paragraph:40 node:22686 paragraph:41 node:31993 taxonomy_term:72 config:system.menu.main node:9440 node:9441 node:9439 node:9444 node:9443 node:9445 node:9446 node:9448 node:9449 node:9450 node:9456 node:9451 node:9455 node:9454 node:9546 node:9598 node:14042 node:14064 node:10400 node:10454 node:9452 node:10409 node:10410 node:10435 node:10397 node:10446 node:18182 node:10398 node:9581 node:14062 node:10328 node:21648 node:9453 node:10337 node:10338 node:10371 node:10254 node:10384 node:10339 node:10383 node:10326 node:18179 node:29013 node:10 node:10275 taxonomy_term_list:secondary_navigation taxonomy_term:116 media:14 file:15 taxonomy_term:115 media:13 file:14 taxonomy_term:114 media:20 file:29 media:5 file:6 alert_banner alert_banner_list alert_banner_list:alert alert_banner:23 rendered http_response config:user.role.anonymous CACHE_MISS_IF_UNCACHEABLE_HTTP_METHOD:form config:antibot.settings config:honeypot.settings search_api_autocomplete_search_list:views:search_list config:search_api_autocomplete.search.search_list
X-Cache-Tags config:block_list config:access_unpublished.settings config:block.block.nantes_contenudelapageprincipale config:block.block.nantes_nantessamethematicnews node:1 config:block.block.nantes_nantessamerequirementsprojects config:block.block.nantes_nantesrelatedequipmentsblock config:block.block.nantes_nantesrelatedassociations config:block.block.nantes_nantesassociationpushedblock config:block.block.nantes_filsdariane config:block.block.nantes_messages config:block.block.nantes_nantesheaderbannernavigation config:block.block.nantes_nanteshighlightedbanner config:block.block.nantes_socials_footer config:block.block.nantes_nantestopfooter config:block.block.nantes_left_footer config:block.block.nantes_footer config:block.block.nantes_mentions config:block.block.nantes_other_links_footer config:block.block.nantes_nantesleftfootermaintenance config:block.block.nantes_adimeoalertbanner config:extlink.settings block_view config:system.menu.mention node:21308 node:9388 node:9385 node:9386 taxonomy_term_list:social_network adimeo_configuration_list taxonomy_term_view taxonomy_term:120 taxonomy_term:2 taxonomy_term:4 taxonomy_term:119 taxonomy_term:3 taxonomy_term:1 config:system.menu.other-links-footer node:9595 node:10455 node:10458 node:9391 node:9392 node:9648 node:9580 node:14080 config:system.menu.footer node:9467 node:14054 node:14043 node:9542 node:3939 media_view media:71 config:image.style.logo_footer file:120 media:70 file:119 media:19826 media:19827 media:19828 paragraph_view paragraph:4 config:image.style.useful_links_footer file:17983 paragraph:3 file:17982 paragraph:98 file:17981 node_view paragraph:607530 config:paragraphs.settings taxonomy_term:736 taxonomy_term:1190 taxonomy_term:1183 media:21442 config:responsive_image.styles.serie_teaser_cover config:image.style.serie_teaser_cover config:image.style.serie_teaser_cover_x2 node_list:episode media:21436 media:21424 media:37 config:image.style.paragraph_service_type file:76 media:21533 config:responsive_image.styles.home_dossier_image config:image.style.home_dossier_image_x1 config:image.style.home_dossier_image_x2 media:20422 config:responsive_image.styles.responsive_full_page config:image.style.landscape_full_page_1920w config:image.style.landscape_full_page_1280w config:image.style.landscape_full_page_1366w config:image.style.landscape_full_page_1440w config:image.style.landscape_full_page_2560w config:image.style.landscape_full_page_2732w config:image.style.landscape_full_page_2880w config:image.style.landscape_full_page_450w config:image.style.landscape_full_page_5116w config:image.style.landscape_full_page_900w node:29300 node:14404 node:14041 node:28293 taxonomy_term:71 taxonomy_term:1148 taxonomy_term:61 taxonomy_term:107 taxonomy_term:73 taxonomy_term_list:quick_access taxonomy_term:112 media:19971 taxonomy_term:111 media:19972 taxonomy_term:110 media:19968 taxonomy_term:109 media:19967 taxonomy_term:1181 media:20129 taxonomy_term:1175 media:19964 taxonomy_term:1180 media:20128 taxonomy_term:1179 media:20127 taxonomy_term:1174 media:19962 taxonomy_term:113 media:19965 media:21539 media:21538 config:node.type.home config:system.site paragraph:42 node:31625 paragraph:49 node:9973 taxonomy_term:1145 paragraph:48 node:31992 taxonomy_term:54 paragraph:50 node:29289 paragraph:40 node:22686 paragraph:41 node:31993 taxonomy_term:72 config:system.menu.main node:9440 node:9441 node:9439 node:9444 node:9443 node:9445 node:9446 node:9448 node:9449 node:9450 node:9456 node:9451 node:9455 node:9454 node:9546 node:9598 node:14042 node:14064 node:10400 node:10454 node:9452 node:10409 node:10410 node:10435 node:10397 node:10446 node:18182 node:10398 node:9581 node:14062 node:10328 node:21648 node:9453 node:10337 node:10338 node:10371 node:10254 node:10384 node:10339 node:10383 node:10326 node:18179 node:29013 node:10 node:10275 taxonomy_term_list:secondary_navigation taxonomy_term:116 media:14 file:15 taxonomy_term:115 media:13 file:14 taxonomy_term:114 media:20 file:29 media:5 file:6 alert_banner alert_banner_list alert_banner_list:alert alert_banner:23 rendered http_response config:user.role.anonymous CACHE_MISS_IF_UNCACHEABLE_HTTP_METHOD:form config:antibot.settings config:honeypot.settings search_api_autocomplete_search_list:views:search_list config:search_api_autocomplete.search.search_list
X-Varnish 21671348 19983846
Age 1538
Accept-Ranges bytes
X-Cache HIT
X-Cache-Hits 248
Content-Security-Policy default-src 'self'; font-src 'self' https://cdn.plyr.io https://fonts.gstatic.com data: https://js.arcgis.com; img-src 'self' https://medias-metropole.nantes.fr https://f.info.nantesmetropole.fr https://tiles.arcgis.com https://api-infonantes.nantesmetropole.fr https://vkjdfnn.pa-cd.com https://metropole.nantes.fr https://js.arcgis.com data: https://scontent.xx.fbcdn.net https://static.cdninstagram.com https://image.ausha.co https://media.licdn.com https://scontent-cdg4-2.cdninstagram.com https://yt3.ggpht.com https://calameo-beacon.global.ssl.fastly.net https://syndication.twitter.com https://nte-prod-toolbox-drupalfiles.oos.cloudgouv-eu-west-1.outscale.com https://cdn.arcgis.com https://basemaps.arcgis.com https://cdn.openagenda.com https://metropole-fas.nantes.fr https://nte-prod-drupalfiles.oos.cloudgouv-eu-west-1.outscale.com https://media-infonantes.nantesmetropole.fr; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://welkom-editor.io https://tag.aticdn.net https://tarteaucitron.io https://js.arcgis.com https://unpkg.com https://v.calameo.com https://www.google.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://static.doubleclick.net https://platform.twitter.com https://player.ausha.co https://static.cdninstagram.com https://static.licdn.com https://static.xx.fbcdn.net https://www.facebook.com https://www.instagram.com https://www.youtube.com https://cdn.jsdelivr.net https://platform.linkedin.com https://www.calameo.com; style-src 'self' 'unsafe-inline' https://tarteaucitron.io https://js.arcgis.com https://cdn.jsdelivr.net https://v.calameo.com https://fonts.googleapis.com https://player.ausha.co https://static.cdninstagram.com https://static.licdn.com https://static.xx.fbcdn.net https://www.youtube.com https://www.calameo.com; object-src 'none'; connect-src 'self' https://tiles.arcgis.com https://v.calameo.com https://cdn.jsdelivr.net https://platform.twitter.com https://www.youtube.com https://www.instagram.com https://vkjdfnn.pa-cd.com https://jnn-pa.googleapis.com https://www.googleapis.com https://js.arcgis.com https://www.arcgis.com https://basemaps.arcgis.com https://services.arcgisonline.com https://server.arcgisonline.com https://static.arcgis.com https://cdn.arcgis.com; frame-src *; media-src 'self' https://medias-metropole.nantes.fr https://nte-prod-drupalfiles.oos.cloudgouv-eu-west-1.outscale.com ; frame-ancestors 'self' https://metropole-fas.nantes.fr https://metropole.nantes.fr https://toolbox-metropole.nantes.fr https://v.calameo.com https://www.calameo.com https://cartographie-internationale.nantesmetropole.fr; form-action 'self' https://authcm.nantesmetropole.fr https://auth-v2.nantesmetropole.fr; base-uri 'self'; manifest-src 'self'; worker-src 'self' blob: https://v.calameo.com; upgrade-insecure-requests;


Miscellaneous
Test date Sun, 24 Aug 2025 11:59:42 UTC
Test duration 69.463 seconds
HTTP status code 200
HTTP server signature nginx
Server hostname ows-80-247-12-103.cloudgouv-eu-west-1.compute.outscale.com


SSL Report v2.4.1