SSL Server Test: web-hub.tyzx.com.cn (Powered by Qualys SSL Labs)

SSL Report: web-hub.tyzx.com.cn (180.97.234.247)

Assessed on: Tue, 13 Jan 2026 05:56:15 UTC | Clear cache

Due to a recently discovered bug in Apple's code, your browser is exposed to MITM attacks. Click here for more information.

Assessment failed: Unexpected failure

Known Problems

There are some errors that we cannot fix properly in the current version. They will be addressed in the next generation version, which is currently being developed.

No secure protocols supported - if you get this message, but you know that the site supports SSL, wait until the cache expires on its own, then try again, making sure the hostname you enter uses the "www" prefix (e.g., "www.ssllabs.com", not just "ssllabs.com").
no more data allowed for version 1 certificate - the certificate is invalid; it is declared as version 1, but uses extensions, which were introduced in version 3. Browsers might ignore this problem, but our parser is strict and refuses to proceed. We'll try to find a different parser to avoid this problem.
Failed to obtain certificate and Internal Error - errors of this type will often be reported for servers that use connection rate limits or block connections in response to unusual traffic. Problems of this type are very difficult to diagnose. If you have access to the server being tested, before reporting a problem to us, please check that there is no rate limiting or IDS in place.
NetScaler issues - some NetScaler versions appear to reject SSL handshakes that do not include certain suites or handshakes that use a few suites. If the test is failing and there is a NetScaler load balancer in place, that's most likely the reason.
Unexpected failure - our tests are designed to fail when unusual results are observed. This usually happens when there are multiple TLS servers behind the same IP address. In such cases we can't provide accurate results, which is why we fail.

Common Error Messages

Connect timed out - server did not respond to our connection request, sometimes before we are dynamically blocked when our tests are detected
No route to host - unable to reach the server
Unable to connect to server - failed to connect to the server, it usually happens due to firewall restrictions
Connection reset - we got disconnected from the server
Unrecognized SSL message, plaintext connection? - the server responded with plain-text HTTP on HTTPS port
Received fatal alert: handshake_failure - this is either a faulty SSL server or some other server listening on port 443; if the SSL version of the web site works in your browser, please report this issue to us
Failed to communicate with the secure server - No secure protocol supported. Possibly this server only supports a draft version of TLS 1.3

Certificate #1: RSA 2048 bits (SHA256withRSA)

Server Key and Certificate #1
Subject	*.tyzx.com.cn Fingerprint SHA256: 7bc1ce226fe6d29e19fad7407615ea90d55c1adb5e6a6a5e1ab562fd7e3ade5f Pin SHA256: 7YNOksPemA6BQRuk8aJM4U5DTruw1kh2al4QtytCmms=
Common names	*.tyzx.com.cn
Alternative names	*.tyzx.com.cn tyzx.com.cn
Serial Number	1e3f7086b35657f8cf9674c6bdbe0866
Valid from	Tue, 14 Oct 2025 10:09:56 UTC
Valid until	Mon, 14 Sep 2026 15:59:59 UTC (expires in 8 months and 1 day)
Key	RSA 2048 bits (e 65537)
Weak key (Debian)	No
Issuer	SHECA OV Server CA G5 AIA: http://certs.global.sheca.com/ovscag5.cer
Signature algorithm	SHA256withRSA
Extended Validation	No
Revocation information	CRL, OCSP CRL: http://crl.global.sheca.com/ovscag5.crl OCSP: http://ocsp.global.sheca.com/ovscag5
Revocation status	Good (not revoked) CRL ERROR: IOException occurred
DNS CAA	No (more info)
Trusted	Yes Mozilla Apple Android Java Windows

Additional Certificates (if supplied)
Certificates provided	3 (4501 bytes)
Chain issues	None
#2
Subject	SHECA OV Server CA G5 Fingerprint SHA256: 8ab3a0acf289e6ef754be449236843d67f45c191bddd66484b85e6e60556a9af Pin SHA256: Ml9jtIo6CaZwLt7q6tlW9x4oQNlrHC+AQOHP17SXtCk=
Valid until	Sun, 16 Mar 2036 15:59:59 UTC (expires in 10 years and 2 months)
Key	RSA 2048 bits (e 65537)
Issuer	UCA Global G2 Root
Signature algorithm	SHA256withRSA
#3
Subject	UCA Global G2 Root Fingerprint SHA256: bb61408aed9f530b2ec0545e53ba2c8ebeaa57d9976447db1663ced4600cd6b7 Pin SHA256: ElXKvoFS+mTflC96R0F+KflsHOEb+MhOy+KBXMEoCBA=
Valid until	Sat, 06 Jan 2029 11:07:19 UTC (expires in 2 years and 11 months)
Key	RSA 4096 bits (e 65537)
Issuer	Certum Trusted Network CA
Signature algorithm	SHA256withRSA

Certification Paths


Path #1: Trusted
1	Sent by server	.tyzx.com.cn Fingerprint SHA256: 7bc1ce226fe6d29e19fad7407615ea90d55c1adb5e6a6a5e1ab562fd7e3ade5f Pin SHA256: 7YNOksPemA6BQRuk8aJM4U5DTruw1kh2al4QtytCmms= RSA 2048 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred*
2	Sent by server	SHECA OV Server CA G5 Fingerprint SHA256: 8ab3a0acf289e6ef754be449236843d67f45c191bddd66484b85e6e60556a9af Pin SHA256: Ml9jtIo6CaZwLt7q6tlW9x4oQNlrHC+AQOHP17SXtCk= RSA 2048 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
3	In trust store	UCA Global G2 Root Self-signed Fingerprint SHA256: 9bea11c976fe014764c1be56a6f914b5a560317abd9988393382e5161aa0493c Pin SHA256: ElXKvoFS+mTflC96R0F+KflsHOEb+MhOy+KBXMEoCBA= RSA 4096 bits (e 65537) / SHA256withRSA
Path #2: Trusted
1	Sent by server	.tyzx.com.cn Fingerprint SHA256: 7bc1ce226fe6d29e19fad7407615ea90d55c1adb5e6a6a5e1ab562fd7e3ade5f Pin SHA256: 7YNOksPemA6BQRuk8aJM4U5DTruw1kh2al4QtytCmms= RSA 2048 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred*
2	Sent by server	SHECA OV Server CA G5 Fingerprint SHA256: 8ab3a0acf289e6ef754be449236843d67f45c191bddd66484b85e6e60556a9af Pin SHA256: Ml9jtIo6CaZwLt7q6tlW9x4oQNlrHC+AQOHP17SXtCk= RSA 2048 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
3	Sent by server	UCA Global G2 Root Fingerprint SHA256: bb61408aed9f530b2ec0545e53ba2c8ebeaa57d9976447db1663ced4600cd6b7 Pin SHA256: ElXKvoFS+mTflC96R0F+KflsHOEb+MhOy+KBXMEoCBA= RSA 4096 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
4	In trust store	Certum Trusted Network CA Self-signed Fingerprint SHA256: 5c58468d55f58e497e743982d2b50010b6d165374acf83a7d4a32db768c4408e Pin SHA256: qiYwp7YXsE0KKUureoyqpQFubb5gSDeoOoVxn6tmfrU= RSA 2048 bits (e 65537) / SHA1withRSA Weak or insecure signature, but no impact on root certificate
Path #1: Trusted
1	Sent by server	.tyzx.com.cn Fingerprint SHA256: 7bc1ce226fe6d29e19fad7407615ea90d55c1adb5e6a6a5e1ab562fd7e3ade5f Pin SHA256: 7YNOksPemA6BQRuk8aJM4U5DTruw1kh2al4QtytCmms= RSA 2048 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred*
2	Sent by server	SHECA OV Server CA G5 Fingerprint SHA256: 8ab3a0acf289e6ef754be449236843d67f45c191bddd66484b85e6e60556a9af Pin SHA256: Ml9jtIo6CaZwLt7q6tlW9x4oQNlrHC+AQOHP17SXtCk= RSA 2048 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
3	Sent by server	UCA Global G2 Root Fingerprint SHA256: bb61408aed9f530b2ec0545e53ba2c8ebeaa57d9976447db1663ced4600cd6b7 Pin SHA256: ElXKvoFS+mTflC96R0F+KflsHOEb+MhOy+KBXMEoCBA= RSA 4096 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
4	In trust store	Certum Trusted Network CA Self-signed Fingerprint SHA256: 5c58468d55f58e497e743982d2b50010b6d165374acf83a7d4a32db768c4408e Pin SHA256: qiYwp7YXsE0KKUureoyqpQFubb5gSDeoOoVxn6tmfrU= RSA 2048 bits (e 65537) / SHA1withRSA Weak or insecure signature, but no impact on root certificate
Path #2: Not trusted (path does not chain to a trusted anchor)
1	Sent by server	.tyzx.com.cn Fingerprint SHA256: 7bc1ce226fe6d29e19fad7407615ea90d55c1adb5e6a6a5e1ab562fd7e3ade5f Pin SHA256: 7YNOksPemA6BQRuk8aJM4U5DTruw1kh2al4QtytCmms= RSA 2048 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred*
2	Sent by server	SHECA OV Server CA G5 Fingerprint SHA256: 8ab3a0acf289e6ef754be449236843d67f45c191bddd66484b85e6e60556a9af Pin SHA256: Ml9jtIo6CaZwLt7q6tlW9x4oQNlrHC+AQOHP17SXtCk= RSA 2048 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
3	Extra download Not in trust store	UCA Global G2 Root Self-signed Fingerprint SHA256: 9bea11c976fe014764c1be56a6f914b5a560317abd9988393382e5161aa0493c Pin SHA256: ElXKvoFS+mTflC96R0F+KflsHOEb+MhOy+KBXMEoCBA= RSA 4096 bits (e 65537) / SHA256withRSA
Path #1: Trusted
1	Sent by server	.tyzx.com.cn Fingerprint SHA256: 7bc1ce226fe6d29e19fad7407615ea90d55c1adb5e6a6a5e1ab562fd7e3ade5f Pin SHA256: 7YNOksPemA6BQRuk8aJM4U5DTruw1kh2al4QtytCmms= RSA 2048 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred*
2	Sent by server	SHECA OV Server CA G5 Fingerprint SHA256: 8ab3a0acf289e6ef754be449236843d67f45c191bddd66484b85e6e60556a9af Pin SHA256: Ml9jtIo6CaZwLt7q6tlW9x4oQNlrHC+AQOHP17SXtCk= RSA 2048 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
3	In trust store	UCA Global G2 Root Self-signed Fingerprint SHA256: 9bea11c976fe014764c1be56a6f914b5a560317abd9988393382e5161aa0493c Pin SHA256: ElXKvoFS+mTflC96R0F+KflsHOEb+MhOy+KBXMEoCBA= RSA 4096 bits (e 65537) / SHA256withRSA
Path #2: Trusted
1	Sent by server	.tyzx.com.cn Fingerprint SHA256: 7bc1ce226fe6d29e19fad7407615ea90d55c1adb5e6a6a5e1ab562fd7e3ade5f Pin SHA256: 7YNOksPemA6BQRuk8aJM4U5DTruw1kh2al4QtytCmms= RSA 2048 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred*
2	Sent by server	SHECA OV Server CA G5 Fingerprint SHA256: 8ab3a0acf289e6ef754be449236843d67f45c191bddd66484b85e6e60556a9af Pin SHA256: Ml9jtIo6CaZwLt7q6tlW9x4oQNlrHC+AQOHP17SXtCk= RSA 2048 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
3	Sent by server	UCA Global G2 Root Fingerprint SHA256: bb61408aed9f530b2ec0545e53ba2c8ebeaa57d9976447db1663ced4600cd6b7 Pin SHA256: ElXKvoFS+mTflC96R0F+KflsHOEb+MhOy+KBXMEoCBA= RSA 4096 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
4	In trust store	Certum Trusted Network CA Self-signed Fingerprint SHA256: 5c58468d55f58e497e743982d2b50010b6d165374acf83a7d4a32db768c4408e Pin SHA256: qiYwp7YXsE0KKUureoyqpQFubb5gSDeoOoVxn6tmfrU= RSA 2048 bits (e 65537) / SHA1withRSA Weak or insecure signature, but no impact on root certificate
Path #1: Trusted
1	Sent by server	.tyzx.com.cn Fingerprint SHA256: 7bc1ce226fe6d29e19fad7407615ea90d55c1adb5e6a6a5e1ab562fd7e3ade5f Pin SHA256: 7YNOksPemA6BQRuk8aJM4U5DTruw1kh2al4QtytCmms= RSA 2048 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred*
2	Sent by server	SHECA OV Server CA G5 Fingerprint SHA256: 8ab3a0acf289e6ef754be449236843d67f45c191bddd66484b85e6e60556a9af Pin SHA256: Ml9jtIo6CaZwLt7q6tlW9x4oQNlrHC+AQOHP17SXtCk= RSA 2048 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
3	Sent by server	UCA Global G2 Root Fingerprint SHA256: bb61408aed9f530b2ec0545e53ba2c8ebeaa57d9976447db1663ced4600cd6b7 Pin SHA256: ElXKvoFS+mTflC96R0F+KflsHOEb+MhOy+KBXMEoCBA= RSA 4096 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
4	In trust store	Certum Trusted Network CA Self-signed Fingerprint SHA256: 5c58468d55f58e497e743982d2b50010b6d165374acf83a7d4a32db768c4408e Pin SHA256: qiYwp7YXsE0KKUureoyqpQFubb5gSDeoOoVxn6tmfrU= RSA 2048 bits (e 65537) / SHA1withRSA Weak or insecure signature, but no impact on root certificate
Path #2: Not trusted (path does not chain to a trusted anchor)
1	Sent by server	.tyzx.com.cn Fingerprint SHA256: 7bc1ce226fe6d29e19fad7407615ea90d55c1adb5e6a6a5e1ab562fd7e3ade5f Pin SHA256: 7YNOksPemA6BQRuk8aJM4U5DTruw1kh2al4QtytCmms= RSA 2048 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred*
2	Sent by server	SHECA OV Server CA G5 Fingerprint SHA256: 8ab3a0acf289e6ef754be449236843d67f45c191bddd66484b85e6e60556a9af Pin SHA256: Ml9jtIo6CaZwLt7q6tlW9x4oQNlrHC+AQOHP17SXtCk= RSA 2048 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
3	Extra download Not in trust store	UCA Global G2 Root Self-signed Fingerprint SHA256: 9bea11c976fe014764c1be56a6f914b5a560317abd9988393382e5161aa0493c Pin SHA256: ElXKvoFS+mTflC96R0F+KflsHOEb+MhOy+KBXMEoCBA= RSA 4096 bits (e 65537) / SHA256withRSA
Path #1: Trusted
1	Sent by server	.tyzx.com.cn Fingerprint SHA256: 7bc1ce226fe6d29e19fad7407615ea90d55c1adb5e6a6a5e1ab562fd7e3ade5f Pin SHA256: 7YNOksPemA6BQRuk8aJM4U5DTruw1kh2al4QtytCmms= RSA 2048 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred*
2	Sent by server	SHECA OV Server CA G5 Fingerprint SHA256: 8ab3a0acf289e6ef754be449236843d67f45c191bddd66484b85e6e60556a9af Pin SHA256: Ml9jtIo6CaZwLt7q6tlW9x4oQNlrHC+AQOHP17SXtCk= RSA 2048 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
3	In trust store	UCA Global G2 Root Self-signed Fingerprint SHA256: 9bea11c976fe014764c1be56a6f914b5a560317abd9988393382e5161aa0493c Pin SHA256: ElXKvoFS+mTflC96R0F+KflsHOEb+MhOy+KBXMEoCBA= RSA 4096 bits (e 65537) / SHA256withRSA
Path #2: Trusted
1	Sent by server	.tyzx.com.cn Fingerprint SHA256: 7bc1ce226fe6d29e19fad7407615ea90d55c1adb5e6a6a5e1ab562fd7e3ade5f Pin SHA256: 7YNOksPemA6BQRuk8aJM4U5DTruw1kh2al4QtytCmms= RSA 2048 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred*
2	Sent by server	SHECA OV Server CA G5 Fingerprint SHA256: 8ab3a0acf289e6ef754be449236843d67f45c191bddd66484b85e6e60556a9af Pin SHA256: Ml9jtIo6CaZwLt7q6tlW9x4oQNlrHC+AQOHP17SXtCk= RSA 2048 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
3	Sent by server	UCA Global G2 Root Fingerprint SHA256: bb61408aed9f530b2ec0545e53ba2c8ebeaa57d9976447db1663ced4600cd6b7 Pin SHA256: ElXKvoFS+mTflC96R0F+KflsHOEb+MhOy+KBXMEoCBA= RSA 4096 bits (e 65537) / SHA256withRSA CRL ERROR: IOException occurred
4	In trust store	Certum Trusted Network CA Self-signed Fingerprint SHA256: 5c58468d55f58e497e743982d2b50010b6d165374acf83a7d4a32db768c4408e Pin SHA256: qiYwp7YXsE0KKUureoyqpQFubb5gSDeoOoVxn6tmfrU= RSA 2048 bits (e 65537) / SHA1withRSA Weak or insecure signature, but no impact on root certificate

Click here to expand

Certificate #2: RSA 2048 bits (SHA256withRSA) No SNI

Server Key and Certificate #1
Subject	360Panyun[RSA] Fingerprint SHA256: 753d8a251f593a1e784772dd55a947cfa22b848d6a412e640e230db758ed2568 Pin SHA256: q+difg3WDFYaNvKFfaYmZfEuo39C/W8lnaihiwMjmDA=
Common names	360Panyun[RSA]
Alternative names	- INVALID
Serial Number	05fa39373919713e5054bddd8ad7f159baf80131
Valid from	Mon, 28 Feb 2022 03:08:14 UTC
Valid until	Tue, 28 Feb 2023 03:08:14 UTC (expired 2 years and 10 months ago) EXPIRED
Key	RSA 2048 bits (e 65537)
Weak key (Debian)	No
Issuer	360Panyun[RSA] Self-signed
Signature algorithm	SHA256withRSA
Extended Validation	No
Revocation information	None
Trusted	No NOT TRUSTED Mozilla Apple Android Java Windows

Additional Certificates (if supplied)
Certificates provided	1 (879 bytes)
Chain issues	None

Certification Paths


Path #1: Not trusted (path does not chain to a trusted anchor)
1	Sent by server Not in trust store	360Panyun[RSA] Self-signed Fingerprint SHA256: 753d8a251f593a1e784772dd55a947cfa22b848d6a412e640e230db758ed2568 Pin SHA256: q+difg3WDFYaNvKFfaYmZfEuo39C/W8lnaihiwMjmDA= RSA 2048 bits (e 65537) / SHA256withRSA Valid until: Tue, 28 Feb 2023 03:08:14 UTC EXPIRED
Path #1: Not trusted (path does not chain to a trusted anchor)
1	Sent by server Not in trust store	360Panyun[RSA] Self-signed Fingerprint SHA256: 753d8a251f593a1e784772dd55a947cfa22b848d6a412e640e230db758ed2568 Pin SHA256: q+difg3WDFYaNvKFfaYmZfEuo39C/W8lnaihiwMjmDA= RSA 2048 bits (e 65537) / SHA256withRSA Valid until: Tue, 28 Feb 2023 03:08:14 UTC EXPIRED
Path #1: Not trusted (path does not chain to a trusted anchor)
1	Sent by server Not in trust store	360Panyun[RSA] Self-signed Fingerprint SHA256: 753d8a251f593a1e784772dd55a947cfa22b848d6a412e640e230db758ed2568 Pin SHA256: q+difg3WDFYaNvKFfaYmZfEuo39C/W8lnaihiwMjmDA= RSA 2048 bits (e 65537) / SHA256withRSA Valid until: Tue, 28 Feb 2023 03:08:14 UTC EXPIRED
Path #1: Not trusted (path does not chain to a trusted anchor)
1	Sent by server Not in trust store	360Panyun[RSA] Self-signed Fingerprint SHA256: 753d8a251f593a1e784772dd55a947cfa22b848d6a412e640e230db758ed2568 Pin SHA256: q+difg3WDFYaNvKFfaYmZfEuo39C/W8lnaihiwMjmDA= RSA 2048 bits (e 65537) / SHA256withRSA Valid until: Tue, 28 Feb 2023 03:08:14 UTC EXPIRED
Path #1: Not trusted (path does not chain to a trusted anchor)
1	Sent by server Not in trust store	360Panyun[RSA] Self-signed Fingerprint SHA256: 753d8a251f593a1e784772dd55a947cfa22b848d6a412e640e230db758ed2568 Pin SHA256: q+difg3WDFYaNvKFfaYmZfEuo39C/W8lnaihiwMjmDA= RSA 2048 bits (e 65537) / SHA256withRSA Valid until: Tue, 28 Feb 2023 03:08:14 UTC EXPIRED

Click here to expand

SSL Report v2.4.1

Copyright © 2009-2026 Qualys, Inc. All Rights Reserved. Privacy Policy.	Terms and Conditions
Try Qualys for free! Experience the award-winning Qualys Cloud Platform and the entire collection of Qualys Cloud Apps, including certificate security solutions.