SSL Server Test: opi.payone.io (Powered by Qualys SSL Labs)

SSL Report: opi.payone.io (81.208.160.227)

Assessed on: Thu, 29 Jan 2026 13:18:20 UTC | Clear cache

Due to a recently discovered bug in Apple's code, your browser is exposed to MITM attacks. Click here for more information.

Assessment failed: Unexpected failure

Known Problems

There are some errors that we cannot fix properly in the current version. They will be addressed in the next generation version, which is currently being developed.

No secure protocols supported - if you get this message, but you know that the site supports SSL, wait until the cache expires on its own, then try again, making sure the hostname you enter uses the "www" prefix (e.g., "www.ssllabs.com", not just "ssllabs.com").
no more data allowed for version 1 certificate - the certificate is invalid; it is declared as version 1, but uses extensions, which were introduced in version 3. Browsers might ignore this problem, but our parser is strict and refuses to proceed. We'll try to find a different parser to avoid this problem.
Failed to obtain certificate and Internal Error - errors of this type will often be reported for servers that use connection rate limits or block connections in response to unusual traffic. Problems of this type are very difficult to diagnose. If you have access to the server being tested, before reporting a problem to us, please check that there is no rate limiting or IDS in place.
NetScaler issues - some NetScaler versions appear to reject SSL handshakes that do not include certain suites or handshakes that use a few suites. If the test is failing and there is a NetScaler load balancer in place, that's most likely the reason.
Unexpected failure - our tests are designed to fail when unusual results are observed. This usually happens when there are multiple TLS servers behind the same IP address. In such cases we can't provide accurate results, which is why we fail.

Common Error Messages

Connect timed out - server did not respond to our connection request, sometimes before we are dynamically blocked when our tests are detected
No route to host - unable to reach the server
Unable to connect to server - failed to connect to the server, it usually happens due to firewall restrictions
Connection reset - we got disconnected from the server
Unrecognized SSL message, plaintext connection? - the server responded with plain-text HTTP on HTTPS port
Received fatal alert: handshake_failure - this is either a faulty SSL server or some other server listening on port 443; if the SSL version of the web site works in your browser, please report this issue to us
Failed to communicate with the secure server - No secure protocol supported. Possibly this server only supports a draft version of TLS 1.3

Certificate #1: EC 256 bits (SHA256withECDSA)

Server Key and Certificate #1
Subject	*.payone.io Fingerprint SHA256: 6bbe068de4139aa6a2883e5a9720c5bfadf4d7ebfbcadffca29fcea83fa2b1ba Pin SHA256: DlYnEZde9OEM6nvARN4CDFVXL1FXJw32nxWXZLQoalI=
Common names	*.payone.io
Alternative names	*.payone.io payone.io
Serial Number	00ba42ca1724ddf6e965efbc2cc905b4f7
Valid from	Thu, 24 Jul 2025 00:00:00 UTC
Valid until	Wed, 15 Jul 2026 23:59:59 UTC (expires in 5 months and 16 days)
Key	EC 256 bits
Weak key (Debian)	No
Issuer	Sectigo ECC Organization Validation Secure Server CA AIA: http://crt.sectigo.com/SectigoECCOrganizationValidationSecureServerCA.crt
Signature algorithm	SHA256withECDSA
Extended Validation	No
Revocation information	CRL, OCSP CRL: http://crl.sectigo.com/SectigoECCOrganizationValidationSecureServerCA.crl OCSP: http://ocsp.sectigo.com
Revocation status	Good (not revoked)
DNS CAA	Yes policy host: payone.io issue: comodoca.com flags:0 issue: ssl.com flags:0 issue: geotrust.com flags:0 issuewild: pki.goog; cansignhttpexchanges=yes flags:0 issuewild: digicert.com; cansignhttpexchanges=yes flags:0 issue: pki.goog; cansignhttpexchanges=yes flags:0 issue: digicert.com; cansignhttpexchanges=yes flags:0 issuewild: comodoca.com flags:0 issuewild: ssl.com flags:0 issue: visa.com flags:0 issue: letsencrypt.org flags:0 issue: godaddy.com flags:0 issue: sectigo.com flags:0 issuewild: sectigo.com flags:0 issuewild: letsencrypt.org flags:0
Trusted	Yes Mozilla Apple Android Java Windows

Additional Certificates (if supplied)
Certificates provided	4 (4349 bytes)
Chain issues	Contains anchor
#2
Subject	Sectigo ECC Organization Validation Secure Server CA Fingerprint SHA256: 3457106752400212903a3545ca3b2ef384a456972bd951d8d840c1b0a379efa1 Pin SHA256: NodEgLRdUtj/Cm5LdQFzr6BIONhbXlzcV7NAqMo879U=
Valid until	Tue, 31 Dec 2030 23:59:59 UTC (expires in 4 years and 11 months)
Key	EC 256 bits
Issuer	USERTrust ECC Certification Authority
Signature algorithm	SHA384withECDSA
#3
Subject	USERTrust ECC Certification Authority Fingerprint SHA256: a6cf64dbb4c8d5fd19ce48896068db03b533a8d1336c6256a87d00cbb3def3ea Pin SHA256: ICGRfpgmOUXIWcQ/HXPLQTkFPEFPoDyjvH7ohhQpjzs=
Valid until	Sun, 31 Dec 2028 23:59:59 UTC (expires in 2 years and 11 months)
Key	EC 384 bits
Issuer	AAA Certificate Services
Signature algorithm	SHA384withRSA
#4
Subject	AAA Certificate Services In trust store Fingerprint SHA256: d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4 Pin SHA256: vRU+17BDT2iGsXvOi76E7TQMcTLXAqj0+jGPdW7L1vM=
Valid until	Sun, 31 Dec 2028 23:59:59 UTC (expires in 2 years and 11 months)
Key	RSA 2048 bits (e 65537)
Issuer	AAA Certificate Services Self-signed
Signature algorithm	SHA1withRSA Weak, but no impact on root certificate

Certification Paths


Path #1: Trusted
1	Sent by server	*.payone.io Fingerprint SHA256: 6bbe068de4139aa6a2883e5a9720c5bfadf4d7ebfbcadffca29fcea83fa2b1ba Pin SHA256: DlYnEZde9OEM6nvARN4CDFVXL1FXJw32nxWXZLQoalI= EC 256 bits / SHA256withECDSA
2	Sent by server	Sectigo ECC Organization Validation Secure Server CA Fingerprint SHA256: 3457106752400212903a3545ca3b2ef384a456972bd951d8d840c1b0a379efa1 Pin SHA256: NodEgLRdUtj/Cm5LdQFzr6BIONhbXlzcV7NAqMo879U= EC 256 bits / SHA384withECDSA
3	In trust store	USERTrust ECC Certification Authority Self-signed Fingerprint SHA256: 4ff460d54b9c86dabfbcfc5712e0400d2bed3fbc4d4fbdaa86e06adcd2a9ad7a Pin SHA256: ICGRfpgmOUXIWcQ/HXPLQTkFPEFPoDyjvH7ohhQpjzs= EC 384 bits / SHA384withECDSA
Path #2: Trusted
1	Sent by server	*.payone.io Fingerprint SHA256: 6bbe068de4139aa6a2883e5a9720c5bfadf4d7ebfbcadffca29fcea83fa2b1ba Pin SHA256: DlYnEZde9OEM6nvARN4CDFVXL1FXJw32nxWXZLQoalI= EC 256 bits / SHA256withECDSA
2	Sent by server	Sectigo ECC Organization Validation Secure Server CA Fingerprint SHA256: 3457106752400212903a3545ca3b2ef384a456972bd951d8d840c1b0a379efa1 Pin SHA256: NodEgLRdUtj/Cm5LdQFzr6BIONhbXlzcV7NAqMo879U= EC 256 bits / SHA384withECDSA
3	Sent by server	USERTrust ECC Certification Authority Fingerprint SHA256: a6cf64dbb4c8d5fd19ce48896068db03b533a8d1336c6256a87d00cbb3def3ea Pin SHA256: ICGRfpgmOUXIWcQ/HXPLQTkFPEFPoDyjvH7ohhQpjzs= EC 384 bits / SHA384withRSA
4	Sent by server In trust store	AAA Certificate Services Self-signed Fingerprint SHA256: d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4 Pin SHA256: vRU+17BDT2iGsXvOi76E7TQMcTLXAqj0+jGPdW7L1vM= RSA 2048 bits (e 65537) / SHA1withRSA Weak or insecure signature, but no impact on root certificate
Path #1: Trusted
1	Sent by server	*.payone.io Fingerprint SHA256: 6bbe068de4139aa6a2883e5a9720c5bfadf4d7ebfbcadffca29fcea83fa2b1ba Pin SHA256: DlYnEZde9OEM6nvARN4CDFVXL1FXJw32nxWXZLQoalI= EC 256 bits / SHA256withECDSA
2	Sent by server	Sectigo ECC Organization Validation Secure Server CA Fingerprint SHA256: 3457106752400212903a3545ca3b2ef384a456972bd951d8d840c1b0a379efa1 Pin SHA256: NodEgLRdUtj/Cm5LdQFzr6BIONhbXlzcV7NAqMo879U= EC 256 bits / SHA384withECDSA
3	In trust store	USERTrust ECC Certification Authority Self-signed Fingerprint SHA256: 4ff460d54b9c86dabfbcfc5712e0400d2bed3fbc4d4fbdaa86e06adcd2a9ad7a Pin SHA256: ICGRfpgmOUXIWcQ/HXPLQTkFPEFPoDyjvH7ohhQpjzs= EC 384 bits / SHA384withECDSA
Path #2: Trusted
1	Sent by server	*.payone.io Fingerprint SHA256: 6bbe068de4139aa6a2883e5a9720c5bfadf4d7ebfbcadffca29fcea83fa2b1ba Pin SHA256: DlYnEZde9OEM6nvARN4CDFVXL1FXJw32nxWXZLQoalI= EC 256 bits / SHA256withECDSA
2	Sent by server	Sectigo ECC Organization Validation Secure Server CA Fingerprint SHA256: 3457106752400212903a3545ca3b2ef384a456972bd951d8d840c1b0a379efa1 Pin SHA256: NodEgLRdUtj/Cm5LdQFzr6BIONhbXlzcV7NAqMo879U= EC 256 bits / SHA384withECDSA
3	Sent by server	USERTrust ECC Certification Authority Fingerprint SHA256: a6cf64dbb4c8d5fd19ce48896068db03b533a8d1336c6256a87d00cbb3def3ea Pin SHA256: ICGRfpgmOUXIWcQ/HXPLQTkFPEFPoDyjvH7ohhQpjzs= EC 384 bits / SHA384withRSA
4	Sent by server In trust store	AAA Certificate Services Self-signed Fingerprint SHA256: d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4 Pin SHA256: vRU+17BDT2iGsXvOi76E7TQMcTLXAqj0+jGPdW7L1vM= RSA 2048 bits (e 65537) / SHA1withRSA Weak or insecure signature, but no impact on root certificate
Path #1: Trusted
1	Sent by server	*.payone.io Fingerprint SHA256: 6bbe068de4139aa6a2883e5a9720c5bfadf4d7ebfbcadffca29fcea83fa2b1ba Pin SHA256: DlYnEZde9OEM6nvARN4CDFVXL1FXJw32nxWXZLQoalI= EC 256 bits / SHA256withECDSA
2	Sent by server	Sectigo ECC Organization Validation Secure Server CA Fingerprint SHA256: 3457106752400212903a3545ca3b2ef384a456972bd951d8d840c1b0a379efa1 Pin SHA256: NodEgLRdUtj/Cm5LdQFzr6BIONhbXlzcV7NAqMo879U= EC 256 bits / SHA384withECDSA
3	In trust store	USERTrust ECC Certification Authority Self-signed Fingerprint SHA256: 4ff460d54b9c86dabfbcfc5712e0400d2bed3fbc4d4fbdaa86e06adcd2a9ad7a Pin SHA256: ICGRfpgmOUXIWcQ/HXPLQTkFPEFPoDyjvH7ohhQpjzs= EC 384 bits / SHA384withECDSA
Path #2: Trusted
1	Sent by server	*.payone.io Fingerprint SHA256: 6bbe068de4139aa6a2883e5a9720c5bfadf4d7ebfbcadffca29fcea83fa2b1ba Pin SHA256: DlYnEZde9OEM6nvARN4CDFVXL1FXJw32nxWXZLQoalI= EC 256 bits / SHA256withECDSA
2	Sent by server	Sectigo ECC Organization Validation Secure Server CA Fingerprint SHA256: 3457106752400212903a3545ca3b2ef384a456972bd951d8d840c1b0a379efa1 Pin SHA256: NodEgLRdUtj/Cm5LdQFzr6BIONhbXlzcV7NAqMo879U= EC 256 bits / SHA384withECDSA
3	Sent by server	USERTrust ECC Certification Authority Fingerprint SHA256: a6cf64dbb4c8d5fd19ce48896068db03b533a8d1336c6256a87d00cbb3def3ea Pin SHA256: ICGRfpgmOUXIWcQ/HXPLQTkFPEFPoDyjvH7ohhQpjzs= EC 384 bits / SHA384withRSA
4	Sent by server In trust store	AAA Certificate Services Self-signed Fingerprint SHA256: d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4 Pin SHA256: vRU+17BDT2iGsXvOi76E7TQMcTLXAqj0+jGPdW7L1vM= RSA 2048 bits (e 65537) / SHA1withRSA Weak or insecure signature, but no impact on root certificate
Path #1: Trusted
1	Sent by server	*.payone.io Fingerprint SHA256: 6bbe068de4139aa6a2883e5a9720c5bfadf4d7ebfbcadffca29fcea83fa2b1ba Pin SHA256: DlYnEZde9OEM6nvARN4CDFVXL1FXJw32nxWXZLQoalI= EC 256 bits / SHA256withECDSA
2	Sent by server	Sectigo ECC Organization Validation Secure Server CA Fingerprint SHA256: 3457106752400212903a3545ca3b2ef384a456972bd951d8d840c1b0a379efa1 Pin SHA256: NodEgLRdUtj/Cm5LdQFzr6BIONhbXlzcV7NAqMo879U= EC 256 bits / SHA384withECDSA
3	In trust store	USERTrust ECC Certification Authority Self-signed Fingerprint SHA256: 4ff460d54b9c86dabfbcfc5712e0400d2bed3fbc4d4fbdaa86e06adcd2a9ad7a Pin SHA256: ICGRfpgmOUXIWcQ/HXPLQTkFPEFPoDyjvH7ohhQpjzs= EC 384 bits / SHA384withECDSA
Path #2: Trusted
1	Sent by server	*.payone.io Fingerprint SHA256: 6bbe068de4139aa6a2883e5a9720c5bfadf4d7ebfbcadffca29fcea83fa2b1ba Pin SHA256: DlYnEZde9OEM6nvARN4CDFVXL1FXJw32nxWXZLQoalI= EC 256 bits / SHA256withECDSA
2	Sent by server	Sectigo ECC Organization Validation Secure Server CA Fingerprint SHA256: 3457106752400212903a3545ca3b2ef384a456972bd951d8d840c1b0a379efa1 Pin SHA256: NodEgLRdUtj/Cm5LdQFzr6BIONhbXlzcV7NAqMo879U= EC 256 bits / SHA384withECDSA
3	Sent by server	USERTrust ECC Certification Authority Fingerprint SHA256: a6cf64dbb4c8d5fd19ce48896068db03b533a8d1336c6256a87d00cbb3def3ea Pin SHA256: ICGRfpgmOUXIWcQ/HXPLQTkFPEFPoDyjvH7ohhQpjzs= EC 384 bits / SHA384withRSA
4	Sent by server In trust store	AAA Certificate Services Self-signed Fingerprint SHA256: d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4 Pin SHA256: vRU+17BDT2iGsXvOi76E7TQMcTLXAqj0+jGPdW7L1vM= RSA 2048 bits (e 65537) / SHA1withRSA Weak or insecure signature, but no impact on root certificate
Path #1: Trusted
1	Sent by server	*.payone.io Fingerprint SHA256: 6bbe068de4139aa6a2883e5a9720c5bfadf4d7ebfbcadffca29fcea83fa2b1ba Pin SHA256: DlYnEZde9OEM6nvARN4CDFVXL1FXJw32nxWXZLQoalI= EC 256 bits / SHA256withECDSA
2	Sent by server	Sectigo ECC Organization Validation Secure Server CA Fingerprint SHA256: 3457106752400212903a3545ca3b2ef384a456972bd951d8d840c1b0a379efa1 Pin SHA256: NodEgLRdUtj/Cm5LdQFzr6BIONhbXlzcV7NAqMo879U= EC 256 bits / SHA384withECDSA
3	In trust store	USERTrust ECC Certification Authority Self-signed Fingerprint SHA256: 4ff460d54b9c86dabfbcfc5712e0400d2bed3fbc4d4fbdaa86e06adcd2a9ad7a Pin SHA256: ICGRfpgmOUXIWcQ/HXPLQTkFPEFPoDyjvH7ohhQpjzs= EC 384 bits / SHA384withECDSA
Path #2: Trusted
1	Sent by server	*.payone.io Fingerprint SHA256: 6bbe068de4139aa6a2883e5a9720c5bfadf4d7ebfbcadffca29fcea83fa2b1ba Pin SHA256: DlYnEZde9OEM6nvARN4CDFVXL1FXJw32nxWXZLQoalI= EC 256 bits / SHA256withECDSA
2	Sent by server	Sectigo ECC Organization Validation Secure Server CA Fingerprint SHA256: 3457106752400212903a3545ca3b2ef384a456972bd951d8d840c1b0a379efa1 Pin SHA256: NodEgLRdUtj/Cm5LdQFzr6BIONhbXlzcV7NAqMo879U= EC 256 bits / SHA384withECDSA
3	Sent by server	USERTrust ECC Certification Authority Fingerprint SHA256: a6cf64dbb4c8d5fd19ce48896068db03b533a8d1336c6256a87d00cbb3def3ea Pin SHA256: ICGRfpgmOUXIWcQ/HXPLQTkFPEFPoDyjvH7ohhQpjzs= EC 384 bits / SHA384withRSA
4	Sent by server In trust store	AAA Certificate Services Self-signed Fingerprint SHA256: d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4 Pin SHA256: vRU+17BDT2iGsXvOi76E7TQMcTLXAqj0+jGPdW7L1vM= RSA 2048 bits (e 65537) / SHA1withRSA Weak or insecure signature, but no impact on root certificate

Click here to expand

SSL Report v2.4.1

Copyright © 2009-2026 Qualys, Inc. All Rights Reserved. Privacy Policy.	Terms and Conditions
Try Qualys for free! Experience the award-winning Qualys Cloud Platform and the entire collection of Qualys Cloud Apps, including certificate security solutions.