Property

ssl

Property Name	Type	Description
acceptable_cas	array of SslCas
alpn	array of string
cert	SslCertificate
chain	array of string	List of certificates in PEM format
chain_sha256	array of string
cipher	SslCipher	Default cipher used for the connection
dhparams	SslDhparams
handshake_states	array of string	Detailed breakdown of how the SSL/TLS connection was negotiated.
ja3s	string	JA3 fingerprint for the server SSL/TLS connection. Useful for pivoting or identifying SSL/TLS implementations.
jarm	string	JARM fingerprint for the server SSL/TLS connection. Useful for pivoting or identifying SSL/TLS implementations.
ocsp	#/definitions/SslOcsp, object
tlsext	array of SslExtension
trust	SslBrowserTrust
unstable	array of string	If the crawlers couldn't gather a property (ex. "versions") due to an unstable connection then the name of that property is added here.
versions	array of string	The crawlers explicitly check every SSL/TLS version. If the server doesn't support a version then a "-" is in front of the version value.

SslCas

Property Name	Type	Required
components	object	Yes
hash	integer	Yes
raw	string	Yes

SslCertificate

Property Name	Type	Required
expired	boolean	Yes
expires	string	Yes
extensions	array of SslCertificateExtension	Yes
fingerprint	SslCertificateFingerprint	Yes
issued	string
issuer	object	Yes
serial	integer	Yes
sig_alg	string	Yes
subject	object	Yes
version	integer	Yes

SslCertificateExtension

Property Name	Type	Required
critical	boolean
data	string	Yes
name	string	Yes

SslCertificateFingerprint

Property Name	Type	Description	Required
sha1	string		Yes
sha256	string		Yes

SslCipher

Property Name	Type	Required
bits	integer	Yes
name	string	Yes
version	string	Yes

SslDhparams

Property Name	Type	Required
bits	integer	Yes
fingerprint	string
generator	integer, string	Yes
prime	string	Yes
public_key	string	Yes

SslExtension

Property Name	Type	Description	Required
id	string, integer		Yes
name	string		Yes

SslBrowserTrust

Property Name	Type	Description	Required
browser	SslBrowserTrustVendor
revoked	boolean, object

SslBrowserTrustVendor

Property Name	Type	Required
apple	boolean	Yes
microsoft	boolean	Yes
mozilla	boolean	Yes

↑ TopSearch Queries

SearchWebsites that support TLS 1.3
HTTP ssl.version:tlsv1.3

SearchWebsites that only support SSLv2
HTTP -ftpd ssl.version:sslv2 -ssl.version:sslv3,tlsv1,tlsv1.1,tlsv1.2,tlsv1.3

SearchWebsites that support HTTP/2
ssl.alpn:h2

↑ TopExample

{
    "dhparams": {
        "bits": 1024,
        "fingerprint": "Embedthis Multithreaded Portable Runtime (MPR) 1024-bit prime",
        "generator": 2,
        "prime": "cd022c1143cdadf5545fedb12856df99fa802c70b5c8a812c3cd380d3be1e3a3e4e9cb58787ea6807efcc9933a861c8e0ba21cd00999299bc153b8f398a7d846be5bb96431cf02630f5df2beeff6558bfbf0b8f7a52ed26f581e463f743c02412f65537f1c7b8a72221d2be9a30f50c313126cd217a9a582fc91e33e288a9773",
        "public_key": "4e3bc15b9884a67809378e4b2ec611a5622fba16190280362edc7e9fdfdcaaca0eede0ca34d2349c35f094024fe5199991040083a1ab363fe9174a97cb3ebd2907bb1475f3fce58975ecb9d37d933a3f65e7eb91c9a9033d0f3da989d78dcaf13c5a7beb64b41cac52884eaa3b5368639978f8401b9e8088d258669d20028f33"
    },
    "tlsext": [
        {
            "id": 65281,
            "name": "renegotiation_info"
        },
        {
            "id": 11,
            "name": "ec_point_formats"
        },
        {
            "id": 35,
            "name": "SessionTicket"
        },
        {
            "id": 15,
            "name": "heartbeat"
        }
    ],
    "versions": [
        "TLSv1",
        "-SSLv2",
        "-SSLv3",
        "TLSv1.1",
        "TLSv1.2"
    ],
    "acceptable_cas": [
        {
            "raw": "MFoxCzAJBgNVBAYTAklFMRIwEAYDVQQKEwlCYWx0aW1vcmUxEzARBgNVBAsTCkN5YmVyVHJ1c3Qx\nIjAgBgNVBAMTGUJhbHRpbW9yZSBDeWJlclRydXN0IFJvb3Q=\n",
            "hash": 1698384202,
            "components": {
                "C": "IE",
                "OU": "CyberTrust",
                "O": "Baltimore",
                "CN": "Baltimore CyberTrust Root"
            }
        }
    ],
    "cert": {
        "sig_alg": "sha256WithRSAEncryption",
        "issued": "20171123000000Z",
        "expires": "20190121235959Z",
        "pubkey": {
            "bits": 2048,
            "type": "rsa"
        },
        "version": 2,
        "extensions": [
            {
                "data": "0\\x16\\x80\\x14\\x90\\xafj:\\x94Z\\x0b\\xd8\\x90\\xea\\x12Vs\\xdfC\\xb4:(\\xda\\xe7",
                "name": "authorityKeyIdentifier"
            },
            {
                "data": "\\x04\\x14A\\x8f\\x04lD\\xbdYA\\x12F\\x1a{/,\\xad\\'q\\x8e>\\x06",
                "name": "subjectKeyIdentifier"
            },
            {
                "critical": true,
                "data": "\\x03\\x02\\x05\\xa0",
                "name": "keyUsage"
            },
            {
                "critical": true,
                "data": "0\\x00",
                "name": "basicConstraints"
            },
            {
                "data": "0\\x14\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x03\\x01\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x03\\x02",
                "name": "extendedKeyUsage"
            },
            {
                "data": "0F0:\\x06\\x0b+\\x06\\x01\\x04\\x01\\xb21\\x01\\x02\\x02\\x070+0)\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x02\\x01\\x16\\x1dhttps://secure.comodo.com/CPS0\\x08\\x06\\x06g\\x81\\x0c\\x01\\x02\\x01",
                "name": "certificatePolicies"
            },
            {
                "data": "0K0I\\xa0G\\xa0E\\x86Chttp://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl",
                "name": "crlDistributionPoints"
            },
            {
                "data": "0w0O\\x06\\x08+\\x06\\x01\\x05\\x05\\x070\\x02\\x86Chttp://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt0$\\x06\\x08+\\x06\\x01\\x05\\x05\\x070\\x01\\x86\\x18http://ocsp.comodoca.com",
                "name": "authorityInfoAccess"
            },
            {
                "data": "0\\x1c\\x82\\ngitlab.com\\x82\\x0ewww.gitlab.com",
                "name": "subjectAltName"
            }
        ],
        "fingerprint": {
            "sha256": "0b1e768b492663d9d236c40de17be1a379a2e3146c2aa8890e613fb3095a0d92",
            "sha1": "e19d2258e5f9f5aa35e4c9be2f60c0a34c08492e"
        },
        "serial": 1.908545518767334e+38,
        "issuer": {
            "C": "GB",
            "ST": "Greater Manchester",
            "CN": "COMODO RSA Domain Validation Secure Server CA",
            "O": "COMODO CA Limited",
            "L": "Salford"
        },
        "expired": false,
        "subject": {
            "OU": "PositiveSSL",
            "CN": "gitlab.com"
        }
    },
    "cipher": {
        "version": "TLSv1/SSLv3",
        "bits": 256,
        "name": "ECDHE-RSA-AES256-GCM-SHA384"
    },
    "chain": [
        "-----BEGIN CERTIFICATE-----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\nQs9DuH2rOQ==\n-----END CERTIFICATE-----\n",
        "-----BEGIN CERTIFICATE-----\nMIIGCDCCA/CgAwIBAgIQKy5u6tl1NmwUim7bo3yMBzANBgkqhkiG9w0BAQwFADCB\nhTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G\nA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxKzApBgNV\nBAMTIkNPTU9ETyBSU0EgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMTQwMjEy\nMDAwMDAwWhcNMjkwMjExMjM1OTU5WjCBkDELMAkGA1UEBhMCR0IxGzAZBgNVBAgT\nEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMR\nQ09NT0RPIENBIExpbWl0ZWQxNjA0BgNVBAMTLUNPTU9ETyBSU0EgRG9tYWluIFZh\nbGlkYXRpb24gU2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP\nADCCAQoCggEBAI7CAhnhoFmk6zg1jSz9AdDTScBkxwtiBUUWOqigwAwCfx3M28Sh\nbXcDow+G+eMGnD4LgYqbSRutA776S9uMIO3Vzl5ljj4Nr0zCsLdFXlIvNN5IJGS0\nQa4Al/e+Z96e0HqnU4A7fK31llVvl0cKfIWLIpeNs4TgllfQcBhglo/uLQeTnaG6\nytHNe+nEKpooIZFNb5JPJaXyejXdJtxGpdCsWTWM/06RQ1A/WZMebFEh7lgUq/51\nUHg+TLAchhP6a5i84DuUHoVS3AOTJBhuyydRReZw3iVDpA3hSqXttn7IzW3uLh0n\nc13cRTCAquOyQQuvvUSH2rnlG51/ruWFgqUCAwEAAaOCAWUwggFhMB8GA1UdIwQY\nMBaAFLuvfgI9+qbxPISOre44mOzZMjLUMB0GA1UdDgQWBBSQr2o6lFoL2JDqElZz\n30O0Oija5zAOBgNVHQ8BAf8EBAMCAYYwEgYDVR0TAQH/BAgwBgEB/wIBADAdBgNV\nHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwGwYDVR0gBBQwEjAGBgRVHSAAMAgG\nBmeBDAECATBMBgNVHR8ERTBDMEGgP6A9hjtodHRwOi8vY3JsLmNvbW9kb2NhLmNv\nbS9DT01PRE9SU0FDZXJ0aWZpY2F0aW9uQXV0aG9yaXR5LmNybDBxBggrBgEFBQcB\nAQRlMGMwOwYIKwYBBQUHMAKGL2h0dHA6Ly9jcnQuY29tb2RvY2EuY29tL0NPTU9E\nT1JTQUFkZFRydXN0Q0EuY3J0MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5jb21v\nZG9jYS5jb20wDQYJKoZIhvcNAQEMBQADggIBAE4rdk+SHGI2ibp3wScF9BzWRJ2p\nmj6q1WZmAT7qSeaiNbz69t2Vjpk1mA42GHWx3d1Qcnyu3HeIzg/3kCDKo2cuH1Z/\ne+FE6kKVxF0NAVBGFfKBiVlsit2M8RKhjTpCipj4SzR7JzsItG8kO3KdY3RYPBps\nP0/HEZrIqPW1N+8QRcZs2eBelSaz662jue5/DJpmNXMyYE7l3YphLG5SEXdoltMY\ndVEVABt0iN3hxzgEQyjpFv3ZBdRdRydg1vs4O2xyopT4Qhrf7W8GjEXCBgCq5Ojc\n2bXhc3js9iPc0d1sjhqPpepUfJa3w/5Vjo1JXvxku88+vZbrac2/4EjxYoIQ5QxG\nV/Iz2tDIY+3GH5QFlkoakdH368+PUq4NCNk+qKBR6cGHdNXJ93SrLlP7u3r7l+L4\nHyaPs9Kg4DdbKDsx5Q5XLVq4rXmsXiBmGqW5prU5wfWYQ//u+aen/e7KJD2AFsQX\nj4rBYKEMrltDR5FL1ZoXX/nUh8HCjLfn4g8wGTeGrODcQgPmlKidrv0PJFGUzpII\n0fxQ8ANAe4hZ7Q7drNJ3gjTcBpUC2JD5Leo31Rpg0Gcg19hCC0Wvgmje3WYkN5Ap\nlBlGGSW4gNfL1IYoakRwJiNiqZ+Gb7+6kHDSVneFeO/qJakXzlByjAA6quPbYzSf\n+AZxAeKCINT+b72x\n-----END CERTIFICATE-----\n",
        "-----BEGIN CERTIFICATE-----\nMIIFdDCCBFygAwIBAgIQJ2buVutJ846r13Ci/ITeIjANBgkqhkiG9w0BAQwFADBv\nMQswCQYDVQQGEwJTRTEUMBIGA1UEChMLQWRkVHJ1c3QgQUIxJjAkBgNVBAsTHUFk\nZFRydXN0IEV4dGVybmFsIFRUUCBOZXR3b3JrMSIwIAYDVQQDExlBZGRUcnVzdCBF\neHRlcm5hbCBDQSBSb290MB4XDTAwMDUzMDEwNDgzOFoXDTIwMDUzMDEwNDgzOFow\ngYUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO\nBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMSswKQYD\nVQQDEyJDT01PRE8gUlNBIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MIICIjANBgkq\nhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAkehUktIKVrGsDSTdxc9EZ3SZKzejfSNw\nAHG8U9/E+ioSj0t/EFa9n3Byt2F/yUsPF6c947AEYe7/EZfH9IY+Cvo+XPmT5jR6\n2RRr55yzhaCCenavcZDX7P0N+pxs+t+wgvQUfvm+xKYvT3+Zf7X8Z0NyvQwA1onr\nayzT7Y+YHBSrfuXjbvzYqOSSJNpDa2K4Vf3qwbxstovzDo2a5JtsaZn4eEgwRdWt\n4Q08RWD8MpZRJ7xnw8outmvqRsfHIKCxH2XeSAi6pE6p8oNGN4Tr6MyBSENnTnIq\nm1y9TBsoilwie7SrmNnu4FGDwwlGTm0+mfqVF9p8M1dBPI1R7Qu2XK8sYxrfV8g/\nvOldxJuvRZnio1oktLqpVj3Pb6r/SVi+8Kj/9Lit6Tf7urj0Czr56ENCHonYhMsT\n8dm74YlguIwoVqwUHZwK53Hrzw7dPamWoUi9PPevtQ0iTMARgexWO/bTouJbt7IE\nIlKVgJNp6I5MZfGRAy1wdALqi2cVKWlSArvX31BqVUa/oKMoYX9w0MOiqiwhqkfO\nKJwGRXa/ghgntNWutMtQ5mv0TIZxMOmm3xaG4Nj/QN370EKIf6MzOi5cHkERgWPO\nGHFrK+ymircxXDpqR+DDeVnWIBqv8mqYqnK8V0rSS527EPywTEHl7R09XiidnMy/\ns1Hap0flhFMCAwEAAaOB9DCB8TAfBgNVHSMEGDAWgBStvZh6NLQm9/rEJlTvA73g\nJMtUGjAdBgNVHQ4EFgQUu69+Aj36pvE8hI6t7jiY7NkyMtQwDgYDVR0PAQH/BAQD\nAgGGMA8GA1UdEwEB/wQFMAMBAf8wEQYDVR0gBAowCDAGBgRVHSAAMEQGA1UdHwQ9\nMDswOaA3oDWGM2h0dHA6Ly9jcmwudXNlcnRydXN0LmNvbS9BZGRUcnVzdEV4dGVy\nbmFsQ0FSb290LmNybDA1BggrBgEFBQcBAQQpMCcwJQYIKwYBBQUHMAGGGWh0dHA6\nLy9vY3NwLnVzZXJ0cnVzdC5jb20wDQYJKoZIhvcNAQEMBQADggEBAGS/g/FfmoXQ\nzbihKVcN6Fr30ek+8nYEbvFScLsePP9NDXRqzIGCJdPDoCpdTPW6i6FtxFQJdcfj\nJw5dhHk3QBN39bSsHNA7qxcS1u80GH4r6XnTq1dFDK8o+tDb5VCViLvfhVdpfZLY\nUspzgb8c8+a4bmYRBbMelC1/kZWSWfFMzqORcUx8Rww7Cxn2obFshj5cqsQugsv5\nB5a6SE2Q8pTIqXOi6wZ7I53eovNNVZ96YUWYGGjHXkBrI/V5eu+MtWuLt29G9Hvx\nPUsE2JOAWVrgQSQdso8VYFhH2+9uRv0V9dlfmrPb2LjkQLPNlzmuhbsdjrzch5vR\npu/xO28QOG8=\n-----END CERTIFICATE-----\n"
    ],
    "alpn": []
}