setting-cn-shanghai.data.aliyun.com
IP地址： 139.196.135.156:443（上海） 服务器： Tengine
| 站点标题： | redirect to https://sso.data.aliyun.com/login/login.htm?type=aliyunLoginAdapter&redirectUrl=http%3A%2F%2Fsetting-cn-shanghai.data.aliyun.com%2F |
|---|---|
| 检测时间： | 2022-09-12 19:46:51 ( 耗时：85秒 ) |
分享到：
检测到当前证书信息已发生变化，您可以点击 刷新报告 进行重新检测 。
证书信息
| 信任状态 | 可信 |
| 是 | |
| 通用名称 | *.aliyun.com |
| 颁发者 | GlobalSign Organization Validation CA - SHA256 - G2 |
| 启用SNI | 是 |
| 弱密钥检测 | 否 |
| 加密算法 | ECDSA 256 bits |
| 签名算法 | SHA256WithRSA |
| 证书透明(CT) | 是 （Google: (来自证书，有效); Apple: (来自证书，有效)） |
| 证书品牌 | GlobalSign |
| 证书类型 | OV SSL |
| 开始时间 | 2021-11-18 14:12:01 |
| 结束时间 | 2022-12-20 14:06:09 |
| 吊销状态 | 正常 |
| OCSP装订状态 | 不支持 |
| OCSP必须装订 | 否 |
| 组织机构 | Alibaba (China) Technology Co., Ltd. |
| 部门 | -- |
| 备用名称 | *.aliyun.com manager.channel.aliyun.com *.account.ltc.aliyun.com *.ace.aliyun.com *.acs-internal.aliyuncs.com ...... 查看全部 *.aliyun.com manager.channel.aliyun.com *.account.ltc.aliyun.com *.ace.aliyun.com *.acs-internal.aliyuncs.com *.acs.aliyun.com *.aicrowd.aliyun.com *.aiearth.aliyun.com *.alibabacloud.co.in *.alibabacloud.com *.alibabacloud.com.au *.alibabacloud.com.hk *.alibabacloud.com.my *.alibabacloud.com.sg *.alibabacloud.com.tw *.alibabacloudsso.com *.alicdn.com *.alicloud.com *.aligroup.aliyun.com *.alimei.com *.alink.aliyun.com *.alios.aliyuncs.com *.aliplus.com *.alitranx.aliyun.com *.aliyun-iot-share.com *.aliyuncs.com *.aliyunjinbao.com *.alyms.cn *.ap-northeast-1.aliyuncs.com *.ap-south-1.aliyuncs.com *.ap-southeast-1.aliyuncs.com *.ap-southeast-2.aliyuncs.com *.ap-southeast-3.aliyuncs.com *.ap-southeast-5.aliyuncs.com *.api.alibabacloud.com *.api.aliyun.com *.api.aliyunidaas.com *.apm.aliyun.com *.app.aliyun.com *.asmlink.cn *.banma.aliyuncs.com *.base.shuju.aliyun.com *.bi.aliyun.com *.biz.aliyun.com *.bridge.aliyun.com *.business.aliyun.com *.ccc.aliyuncs.com *.center.aliyun.com *.citybrain.aliyun.com *.cloudapp.aliyun.com *.cloudeagle.cn *.cloudgame.aliyun.com *.cn-beijing.aliyuncs.com *.cn-chengdu.aliyuncs.com *.cn-guizhou.aliyuncs.com *.cn-haidian.aliyuncs.com *.cn-hangzhou-finance.aliyuncs.com *.cn-hangzhou.aliyuncs.com *.cn-hongkong.aliyuncs.com *.cn-huhehaote.aliyuncs.com *.cn-ningxia.aliyuncs.com *.cn-north-2-gov-1.aliyuncs.com *.cn-qingdao-nebula.aliyuncs.com *.cn-qingdao.aliyuncs.com *.cn-shanghai-finance-1.aliyuncs.com *.cn-shanghai.aliyun.com *.cn-shanghai.aliyuncs.com *.cn-shenzhen-cloudstone.aliyuncs.com *.cn-shenzhen-finance-1.aliyuncs.com *.cn-shenzhen.aliyuncs.com *.cn-sichuan.aliyuncs.com *.cn-zhangjiakou.aliyuncs.com *.connect.aliyun.com *.console.alibabacloud.com *.console.alicloud.com *.console.aliyun.com *.console.aliyuncs.com *.cs.aliyun.com *.cschat-ccs.aliyun.com *.data.aliyun.com *.dataapi.aliyun.com *.dataq.aliyun.com *.dataq.aliyuncs.com *.datav.aliyun.com *.datav.aliyuncs.com *.dbs.aliyun.com *.devlops.aliyun.com *.devops.aliyun.com *.ditu.aliyun.com *.domain.aliyun.com *.dyiot.aliyun.com *.dyiot.aliyuncs.com *.ebs.aliyun.com *.edu.aliyun.com *.emas.aliyun.com *.emr.aliyun.com *.enterprise.aliyun.com *.env.aliyun.com *.et-industry.aliyun.com *.eu-central-1.aliyuncs.com *.eu-west-1.aliyuncs.com *.fc.aliyun.com *.fc.aliyuncs.com *.feedback.console.aliyun.com *.fintech.aliyuncs.com *.gts-x.aliyun.com *.gts.aliyun.com *.help-ccs.aliyun.com *.ialicdn.com *.im.aliyuncs.com *.in-mumbai.aliyuncs.com *.iot.aliyun.com *.jp-fudao.aliyuncs.com *.lancet.aliyuncs.com *.license-manage.aliyun.com *.linkedmall.aliyun.com *.linkwan.aliyun.com *.living.aliyun.com *.login-dev.aliyunidaas.com *.login.aliyunidaas.com *.luban.aliyun.com *.m.aliyun.com *.market.aliyun.com *.maxcompute.aliyun.com *.me-east-1.aliyuncs.com *.media.aliyun.com *.microdingtalk.aliyun.com *.mit.aliyun.com *.mobile.aliyun.com *.mp.aliyun.com *.msea.aliyun.com *.mts.aliyun.com *.mvp.aliyun.com *.nebula.aliyun.com *.nlp.aliyun.com *.nls.aliyuncs.com *.odps.aliyun.com *.ons.aliyun.com *.ose.aliyun.com *.pai.data.aliyun.com *.pcs-gw-cn-beijing.aliyun.com *.pcs-gw-cn-shanghai.aliyun.com *.phpwind.com *.phpwind.net *.pre-page.aliyun.com *.pre-sg-purchase.aliyun.com *.pre.aliyun.com *.prepub.aliyun.com *.product.center.aliyun.com *.proxy.aliyun.com *.pts.aliyun.com *.r-app-cn-beijing-data.aliyun.com *.r-app-cn-hangzhou-data.aliyun.com *.r-app-cn-shenzhen-data.aliyun.com *.r-app-data.aliyun.com *.rdc.aliyun.com *.rds.aliyun.com *.reid.aliyun.com *.rtc.aliyun.com *.rtc.aliyuncs.com *.sc-cmdb.aliyuncs.com *.scsp.aliyun.com *.service.aliyun.com *.sg.aliyun.com *.sg.aliyuncs.com *.shuju.aliyun.com *.smart.aliyun.com *.soc.aliyun.com *.soc.aliyuncs.com *.sparenode.com *.supet.com *.tburl.in *.teambition.com *.teambition.net *.teambitionapis.com *.tianchi.aliyun.com *.toolkit.aliyun.com *.tools.aliyun.com *.tv.aliyun.com *.tw-gaoxiong.aliyuncs.com *.us-east-1.aliyuncs.com *.us-west-1.aliyuncs.com *.webide.aliyun.com *.yuntu.aliyun.com account.www.net.cn alibabacloud.co.in alibabacloud.com alibabacloud.com.au alibabacloud.com.hk alibabacloud.com.my alibabacloud.com.sg alibabacloud.com.tw alicdn.com alicloud.com alimei.com aliyun-iot-share.com aliyuncs.com dc.www.net.cn dmp.www.net.cn dns.www.net.cn panda.www.net.cn pandavip.www.net.cn phpwind.com phpwind.net scdnphi6.com sparenode.com supet.com tburl.in teambition.com teambition.net teambitionapis.com tianchi-global.com whois.www.net.cn aliyun.com |
证书链信息 了解详细 下载证书链
| 颁发给： | *.aliyun.com（根证书来自服务器，会增加额外的握手开销） |
| 颁发者： | GlobalSign Organization Validation CA - SHA256 - G2 |
| 加密算法： | ECDSA 256 bits |
| 签名算法： | SHA256WithRSA |
| 证书指纹： | A9690F42A8F9ABF33C7BE2FE99D2F71344B02106 |
| 公钥PIN值： | QXXMVY6Gg98+fnjcNa+7IHScoc6LTYiwxutev56cL/o= |
| 有效期： | 2021-11-18 ~ 2022-12-20 （剩余 -483 天） |
| 颁发给： | GlobalSign Organization Validation CA - SHA256 - G2（根证书来自服务器，会增加额外的握手开销） |
| 颁发者： | GlobalSign Root CA |
| 加密算法： | RSA 2048 bits |
| 签名算法： | SHA256WithRSA |
| 证书指纹： | 902EF2DEEB3C5B13EA4C3D5193629309E231AE55 |
| 公钥PIN值： | IQBnNBEiFuhj+8x6X8XLgh01V9Ic5/V3IRQLNFFc7v4= |
| 有效期： | 2014-02-20 ~ 2024-02-20 （剩余 -56 天） |
| 颁发给： | GlobalSign Root CA（根证书来自服务器，会增加额外的握手开销） |
| 颁发者： | GlobalSign Root CA |
| 加密算法： | RSA 2048 bits |
| 签名算法： | SHA1WithRSA |
| 证书指纹： | B1BC968BD4F49D622AA89A81F2150152A41D829C |
| 公钥PIN值： | K87oWBWM9UZfyddvDfoxL+8lpNyoUB2ptGtn0fv6G2Q= |
| 有效期： | 1998-09-01 ~ 2028-01-28 （剩余 1382 天） |
| 颁发给： | *.aliyun.com （根证书来自服务器，会增加额外的握手开销） |
| 颁发者： | GlobalSign Organization Validation CA - SHA256 - G2 |
| 有效期： | 2021-11-18 ~ 2022-12-20 （剩余 -483 天） |
| 颁发给： | GlobalSign Organization Validation CA - SHA256 - G2 （根证书来自服务器，会增加额外的握手开销） |
| 颁发者： | GlobalSign Root CA |
| 有效期： | 2014-02-20 ~ 2024-02-20 （剩余 -56 天） |
| 颁发给： | GlobalSign Root CA （根证书来自服务器，会增加额外的握手开销） |
| 颁发者： | GlobalSign Root CA |
| 有效期： | 1998-09-01 ~ 2028-01-28 （剩余 1382 天） |
| 信任状态 | 可信 |
| 是 | |
| 通用名称 | *.aliyun.com |
| 颁发者 | GlobalSign Organization Validation CA - SHA256 - G2 |
| 启用SNI | 是 |
| 弱密钥检测 | 否 |
| 加密算法 | RSA 2048 bits |
| 签名算法 | SHA256WithRSA |
| 证书透明(CT) | 是 （Google: (来自证书，有效); Apple: (来自证书，有效)） |
| 证书品牌 | GlobalSign |
| 证书类型 | OV SSL |
| 开始时间 | 2021-11-18 14:06:09 |
| 结束时间 | 2022-12-20 14:06:09 |
| 吊销状态 | 正常 |
| OCSP装订状态 | 不支持 |
| OCSP必须装订 | 否 |
| 组织机构 | Alibaba (China) Technology Co., Ltd. |
| 部门 | -- |
| 备用名称 | *.aliyun.com *.aliyun-iot-share.com *.yuntu.aliyun.com *.help-ccs.aliyun.com *.alibabacloud.com.sg ...... 查看全部 *.aliyun.com *.aliyun-iot-share.com *.yuntu.aliyun.com *.help-ccs.aliyun.com *.alibabacloud.com.sg *.app.aliyun.com *.rtc.aliyun.com *.acs-internal.aliyuncs.com *.alibabacloud.com *.cn-hangzhou.aliyuncs.com *.tw-gaoxiong.aliyuncs.com *.account.ltc.aliyun.com *.teambition.net *.soc.aliyuncs.com *.supet.com *.cn-zhangjiakou.aliyuncs.com *.rdc.aliyun.com *.datav.aliyun.com *.pcs-gw-cn-beijing.aliyun.com *.pre-sg-purchase.aliyun.com *.m.aliyun.com alibabacloud.com.sg *.teambition.com *.alimei.com tianchi-global.com *.cn-shenzhen-finance-1.aliyuncs.com *.data.aliyun.com *.feedback.console.aliyun.com alibabacloud.co.in scdnphi6.com *.cn-chengdu.aliyuncs.com *.ap-southeast-1.aliyuncs.com *.soc.aliyun.com *.et-industry.aliyun.com *.product.center.aliyun.com *.ebs.aliyun.com *.cn-hangzhou-finance.aliyuncs.com *.cn-north-2-gov-1.aliyuncs.com *.ose.aliyun.com *.banma.aliyuncs.com *.ons.aliyun.com aliyun-iot-share.com alibabacloud.com.tw *.emr.aliyun.com *.alibabacloud.com.au *.mit.aliyun.com *.cn-beijing.aliyuncs.com dmp.www.net.cn *.mp.aliyun.com *.alyms.cn pandavip.www.net.cn *.asmlink.cn *.dataq.aliyun.com *.mts.aliyun.com *.ace.aliyun.com *.alibabacloudsso.com *.cn-shanghai-finance-1.aliyuncs.com *.edu.aliyun.com *.proxy.aliyun.com teambitionapis.com *.console.aliyun.com *.prepub.aliyun.com *.login.aliyunidaas.com *.gts-x.aliyun.com *.bridge.aliyun.com *.gts.aliyun.com *.linkwan.aliyun.com *.cschat-ccs.aliyun.com *.linkedmall.aliyun.com *.pcs-gw-cn-shanghai.aliyun.com *.fintech.aliyuncs.com *.smart.aliyun.com *.pai.data.aliyun.com *.me-east-1.aliyuncs.com *.lancet.aliyuncs.com sparenode.com *.datav.aliyuncs.com *.alink.aliyun.com *.cn-hongkong.aliyuncs.com *.rtc.aliyuncs.com *.ap-southeast-3.aliyuncs.com *.luban.aliyun.com *.devlops.aliyun.com *.ccc.aliyuncs.com *.center.aliyun.com *.im.aliyuncs.com *.cn-shenzhen-cloudstone.aliyuncs.com *.shuju.aliyun.com *.cn-sichuan.aliyuncs.com *.api.aliyun.com alimei.com *.phpwind.net *.alicloud.com *.api.alibabacloud.com *.alibabacloud.com.tw *.aliyuncs.com *.cn-qingdao.aliyuncs.com *.pre.aliyun.com *.microdingtalk.aliyun.com *.r-app-cn-shenzhen-data.aliyun.com *.odps.aliyun.com *.cloudeagle.cn *.living.aliyun.com *.phpwind.com alibabacloud.com.hk *.sg.aliyuncs.com *.sg.aliyun.com *.cn-shanghai.aliyuncs.com *.media.aliyun.com *.fc.aliyuncs.com *.sparenode.com alicdn.com aliyuncs.com *.apm.aliyun.com *.rds.aliyun.com *.msea.aliyun.com *.jp-fudao.aliyuncs.com dc.www.net.cn phpwind.net *.market.aliyun.com *.devops.aliyun.com alicloud.com *.mvp.aliyun.com *.citybrain.aliyun.com teambition.com *.aicrowd.aliyun.com *.cn-shanghai.aliyun.com *.env.aliyun.com *.cn-shenzhen.aliyuncs.com *.us-east-1.aliyuncs.com *.us-west-1.aliyuncs.com *.pre-page.aliyun.com phpwind.com *.nlp.aliyun.com *.dyiot.aliyun.com teambition.net dns.www.net.cn *.ap-southeast-5.aliyuncs.com *.cn-qingdao-nebula.aliyuncs.com *.nebula.aliyun.com *.alicdn.com *.cn-haidian.aliyuncs.com *.r-app-cn-beijing-data.aliyun.com alibabacloud.com alibabacloud.com.my *.cloudgame.aliyun.com *.login-dev.aliyunidaas.com *.aiearth.aliyun.com *.iot.aliyun.com *.aligroup.aliyun.com *.sc-cmdb.aliyuncs.com *.cn-guizhou.aliyuncs.com *.alibabacloud.com.hk *.enterprise.aliyun.com *.business.aliyun.com *.ialicdn.com *.base.shuju.aliyun.com *.service.aliyun.com *.acs.aliyun.com panda.www.net.cn *.biz.aliyun.com *.connect.aliyun.com *.dataapi.aliyun.com manager.channel.aliyun.com *.api.aliyunidaas.com *.ap-northeast-1.aliyuncs.com *.ditu.aliyun.com *.maxcompute.aliyun.com *.console.alibabacloud.com *.toolkit.aliyun.com *.tools.aliyun.com *.fc.aliyun.com *.in-mumbai.aliyuncs.com *.dbs.aliyun.com *.reid.aliyun.com *.alios.aliyuncs.com *.tburl.in *.cs.aliyun.com *.emas.aliyun.com *.r-app-cn-hangzhou-data.aliyun.com supet.com *.teambitionapis.com *.tianchi.aliyun.com *.ap-southeast-2.aliyuncs.com *.cn-ningxia.aliyuncs.com tburl.in *.domain.aliyun.com *.nls.aliyuncs.com *.console.aliyuncs.com *.r-app-data.aliyun.com *.ap-south-1.aliyuncs.com *.console.alicloud.com *.cn-huhehaote.aliyuncs.com account.www.net.cn *.alibabacloud.co.in *.aliplus.com *.aliyunjinbao.com *.dyiot.aliyuncs.com alibabacloud.com.au *.mobile.aliyun.com *.cloudapp.aliyun.com *.alitranx.aliyun.com *.eu-central-1.aliyuncs.com *.scsp.aliyun.com *.dataq.aliyuncs.com *.bi.aliyun.com *.eu-west-1.aliyuncs.com whois.www.net.cn *.tv.aliyun.com *.alibabacloud.com.my *.license-manage.aliyun.com *.webide.aliyun.com *.pts.aliyun.com aliyun.com |
证书链信息 了解详细 下载证书链
| 颁发给： | *.aliyun.com（根证书来自服务器，会增加额外的握手开销） |
| 颁发者： | GlobalSign Organization Validation CA - SHA256 - G2 |
| 加密算法： | RSA 2048 bits |
| 签名算法： | SHA256WithRSA |
| 证书指纹： | F4E98837D846EB804DA2266FB1BFC7CF6B851605 |
| 公钥PIN值： | SDXfELxrlHEMo+xwFQPQKMMHeoHqlFDM8ieZoQZWgD4= |
| 有效期： | 2021-11-18 ~ 2022-12-20 （剩余 -483 天） |
| 颁发给： | GlobalSign Organization Validation CA - SHA256 - G2（根证书来自服务器，会增加额外的握手开销） |
| 颁发者： | GlobalSign Root CA |
| 加密算法： | RSA 2048 bits |
| 签名算法： | SHA256WithRSA |
| 证书指纹： | 902EF2DEEB3C5B13EA4C3D5193629309E231AE55 |
| 公钥PIN值： | IQBnNBEiFuhj+8x6X8XLgh01V9Ic5/V3IRQLNFFc7v4= |
| 有效期： | 2014-02-20 ~ 2024-02-20 （剩余 -56 天） |
| 颁发给： | GlobalSign Root CA（根证书来自服务器，会增加额外的握手开销） |
| 颁发者： | GlobalSign Root CA |
| 加密算法： | RSA 2048 bits |
| 签名算法： | SHA1WithRSA |
| 证书指纹： | B1BC968BD4F49D622AA89A81F2150152A41D829C |
| 公钥PIN值： | K87oWBWM9UZfyddvDfoxL+8lpNyoUB2ptGtn0fv6G2Q= |
| 有效期： | 1998-09-01 ~ 2028-01-28 （剩余 1382 天） |
| 颁发给： | *.aliyun.com （根证书来自服务器，会增加额外的握手开销） |
| 颁发者： | GlobalSign Organization Validation CA - SHA256 - G2 |
| 有效期： | 2021-11-18 ~ 2022-12-20 （剩余 -483 天） |
| 颁发给： | GlobalSign Organization Validation CA - SHA256 - G2 （根证书来自服务器，会增加额外的握手开销） |
| 颁发者： | GlobalSign Root CA |
| 有效期： | 2014-02-20 ~ 2024-02-20 （剩余 -56 天） |
| 颁发给： | GlobalSign Root CA （根证书来自服务器，会增加额外的握手开销） |
| 颁发者： | GlobalSign Root CA |
| 有效期： | 1998-09-01 ~ 2028-01-28 （剩余 1382 天） |
支持协议
| TLS 1.3 | 不支持 | ||
| TLS 1.2 | 支持 | ||
| TLS 1.1 | 支持 | ||
| TLS 1.0 | 支持 | 1 | |
| SSL 3 | 不支持 | ||
| SSL 2 | 不支持 |
支持的加密套件
| TLS 1.2 (服务器顺序优先) |
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (0xC02B) 128 bits FS 名称：TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 代码：0xC02B 描述：ECDH x25519 (eq. 3072 bits RSA) 加密强度：128 bits 正向加密：YES 是否安全：YES TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (0xC02C) 256 bits FS 名称：TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 代码：0xC02C 描述：ECDH x25519 (eq. 3072 bits RSA) 加密强度：256 bits 正向加密：YES 是否安全：YES TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (0xC023) 128 bits FS 名称：TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 代码：0xC023 描述：ECDH x25519 (eq. 3072 bits RSA) 加密强度：128 bits 正向加密：YES 是否安全：YES TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (0xC024) 256 bits FS 名称：TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 代码：0xC024 描述：ECDH x25519 (eq. 3072 bits RSA) 加密强度：256 bits 正向加密：YES 是否安全：YES TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xC02F) 128 bits FS 名称：TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 代码：0xC02F 描述：ECDH x25519 (eq. 3072 bits RSA) 加密强度：128 bits 正向加密：YES 是否安全：YES TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xC030) 256 bits FS 名称：TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 代码：0xC030 描述：ECDH x25519 (eq. 3072 bits RSA) 加密强度：256 bits 正向加密：YES 是否安全：YES TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xC027) 128 bits FS 名称：TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 代码：0xC027 描述：ECDH x25519 (eq. 3072 bits RSA) 加密强度：128 bits 正向加密：YES 是否安全：YES TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xC028) 256 bits FS 名称：TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 代码：0xC028 描述：ECDH x25519 (eq. 3072 bits RSA) 加密强度：256 bits 正向加密：YES 是否安全：YES TLS_RSA_WITH_AES_128_GCM_SHA256 (0x9C) 128 bits 名称：TLS_RSA_WITH_AES_128_GCM_SHA256 代码：0x9C 描述： 加密强度：128 bits 正向加密：NO 是否安全：WEAK TLS_RSA_WITH_AES_256_GCM_SHA384 (0x9D) 256 bits 名称：TLS_RSA_WITH_AES_256_GCM_SHA384 代码：0x9D 描述： 加密强度：256 bits 正向加密：NO 是否安全：WEAK TLS_RSA_WITH_AES_128_CBC_SHA256 (0x3C) 128 bits 名称：TLS_RSA_WITH_AES_128_CBC_SHA256 代码：0x3C 描述： 加密强度：128 bits 正向加密：NO 是否安全：WEAK TLS_RSA_WITH_AES_256_CBC_SHA256 (0x3D) 256 bits 名称：TLS_RSA_WITH_AES_256_CBC_SHA256 代码：0x3D 描述： 加密强度：256 bits 正向加密：NO 是否安全：WEAK TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xC009) 128 bits FS 名称：TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA 代码：0xC009 描述：ECDH x25519 (eq. 3072 bits RSA) 加密强度：128 bits 正向加密：YES 是否安全：YES TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xC00A) 256 bits FS 名称：TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA 代码：0xC00A 描述：ECDH x25519 (eq. 3072 bits RSA) 加密强度：256 bits 正向加密：YES 是否安全：YES TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xC013) 128 bits FS 名称：TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA 代码：0xC013 描述：ECDH x25519 (eq. 3072 bits RSA) 加密强度：128 bits 正向加密：YES 是否安全：YES TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xC014) 256 bits FS 名称：TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA 代码：0xC014 描述：ECDH x25519 (eq. 3072 bits RSA) 加密强度：256 bits 正向加密：YES 是否安全：YES TLS_RSA_WITH_AES_128_CBC_SHA (0x2F) 128 bits 名称：TLS_RSA_WITH_AES_128_CBC_SHA 代码：0x2F 描述： 加密强度：128 bits 正向加密：NO 是否安全：WEAK TLS_RSA_WITH_AES_256_CBC_SHA (0x35) 256 bits 名称：TLS_RSA_WITH_AES_256_CBC_SHA 代码：0x35 描述： 加密强度：256 bits 正向加密：NO 是否安全：WEAK |
| TLS 1.1 (服务器顺序优先) |
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xC009) 128 bits FS 名称：TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA 代码：0xC009 描述：ECDH x25519 (eq. 3072 bits RSA) 加密强度：128 bits 正向加密：YES 是否安全：YES TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xC00A) 256 bits FS 名称：TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA 代码：0xC00A 描述：ECDH x25519 (eq. 3072 bits RSA) 加密强度：256 bits 正向加密：YES 是否安全：YES TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xC013) 128 bits FS 名称：TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA 代码：0xC013 描述：ECDH x25519 (eq. 3072 bits RSA) 加密强度：128 bits 正向加密：YES 是否安全：YES TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xC014) 256 bits FS 名称：TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA 代码：0xC014 描述：ECDH x25519 (eq. 3072 bits RSA) 加密强度：256 bits 正向加密：YES 是否安全：YES TLS_RSA_WITH_AES_128_CBC_SHA (0x2F) 128 bits 名称：TLS_RSA_WITH_AES_128_CBC_SHA 代码：0x2F 描述： 加密强度：128 bits 正向加密：NO 是否安全：WEAK TLS_RSA_WITH_AES_256_CBC_SHA (0x35) 256 bits 名称：TLS_RSA_WITH_AES_256_CBC_SHA 代码：0x35 描述： 加密强度：256 bits 正向加密：NO 是否安全：WEAK |
| TLS 1.0 (服务器顺序优先) |
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xC009) 128 bits FS 名称：TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA 代码：0xC009 描述：ECDH x25519 (eq. 3072 bits RSA) 加密强度：128 bits 正向加密：YES 是否安全：YES TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xC00A) 256 bits FS 名称：TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA 代码：0xC00A 描述：ECDH x25519 (eq. 3072 bits RSA) 加密强度：256 bits 正向加密：YES 是否安全：YES TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xC013) 128 bits FS 名称：TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA 代码：0xC013 描述：ECDH x25519 (eq. 3072 bits RSA) 加密强度：128 bits 正向加密：YES 是否安全：YES TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xC014) 256 bits FS 名称：TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA 代码：0xC014 描述：ECDH x25519 (eq. 3072 bits RSA) 加密强度：256 bits 正向加密：YES 是否安全：YES TLS_RSA_WITH_AES_128_CBC_SHA (0x2F) 128 bits 名称：TLS_RSA_WITH_AES_128_CBC_SHA 代码：0x2F 描述： 加密强度：128 bits 正向加密：NO 是否安全：WEAK TLS_RSA_WITH_AES_256_CBC_SHA (0x35) 256 bits 名称：TLS_RSA_WITH_AES_256_CBC_SHA 代码：0x35 描述： 加密强度：256 bits 正向加密：NO 是否安全：WEAK |
协议详情
| HTTP/2 | 支持 | |
| 新型的TLS配置 | 是 | |
| 支持TLS 1.3 | 不支持 | |
| 期望CT | 不支持 | |
| OCSP装订 | 不支持 | |
| 预防降级攻击 | 支持 | |
| 正向保密 | 支持 | |
| HTTP严格传输安全(HSTS) | 支持 | max-age=31536000 |
| 公钥固定(HPKP) | 不支持 | |
| 公钥固定报告 | 不支持 | |
| XSS保护 | 不支持 | |
| CAA | 不支持 | |
| NPN | 支持 | h2,http/1.1 |
| ALPN | 支持 | h2,http/1.1 |
| TLS心跳(扩展) | 不支持 | |
| 支持的EC椭圆曲线 | 支持 | x25519,secp256r1,x448,secp521r1,secp384r1 (服务器顺序优先) |
| SSL2握手兼容 | 支持 | |
| 会话恢复(caching) | 不支持 | 服务端分配SessionID，但是不接受 |
| 会话恢复(Ticket) | 支持 | |
| STARTTLS | 不支持 | |
| 过长的ClientHello兼容 | 不支持 | |
| 未知TLS版本兼容 | 不支持 | |
| 不正确的SNI警告 | 不支持 | |
| DH公钥参数重用 | 否 | 不支持DHE系列的加密套件 |
| ECDH公钥参数重用 | 否 | |
| 服务端安全重协商 | 支持 | |
| 客户端安全重协商 | 支持 | |
| 客户端不安全重协商 | 不支持 | |
| 支持RC4套件 | 不支持 | |
| 是否为邮件服务器 | 否 |
SSL漏洞
| 是否影响 | 危险系数 | 说明 | |
|---|---|---|---|
| 因系统升级改造，相关功能暂停服务! | |||
| DROWN 漏洞 | |||
| OpenSSL Padding Oracle 攻击 | |||
| FREAK漏洞 | |||
| Logjam漏洞 | |||
| OpenSSL CCS 注入漏洞 | |||
| 心血漏洞(Heartbleed) | |||
| POODLE漏洞 | |||
| CRIME漏洞 | |||
客户端握手模拟
| Android 4.4.2 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Android 5.0.0 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Android 6.0 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > http/1.1 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Android 7.0 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Android 8.0 No FS1 No SNI2 | 握手失败 （protocol_version） | |||
| Android 9.0 No FS1 No SNI2 | 握手失败 （protocol_version） | |||
| Baiduspider/2.0 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Googlebot/2.0 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| YandexBot July 2018 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| 360Spider July 2018 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| SougouSpider July 2018 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Baidu HTTPS认证 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| BingPreview Jan 2015 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Chrome 49 / XP SP3 No FS1 No SNI2 | RSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 FS | |
| Chrome 51 / Win 7 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Chrome 63 /macOS High Sierra 10.13.2 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Chrome 69 / Win 10 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Chrome 71 / Win 10 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Chrome 80 / Win 10 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Firefox 31.3.0 ESR / Win 7 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Firefox 47 / Win 7 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Firefox 49 / XP SP3 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Firefox 49 / Win 7 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Firefox 57 /macOS High Sierra 10.13.2 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Firefox 62 / Win 10 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Firefox 64 / win 10 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Firefox 73 / Win 10 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| IE 6 / XP No FS1 No SNI2 | 握手失败 （handshake_failure） | |||
| IE 7 / Vista No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.0 | TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA FS | |
| IE 8 / XP No FS1 No SNI2 | 握手失败 （handshake_failure） | |||
| IE 8-10 / Win 7 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.0 | TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA FS | |
| IE 11 / Win 7 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| IE 11 / Win 8.1 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > http/1.1 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| IE 10 / Win Phone 8.0 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.0 | TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA FS | |
| IE 11 / Win Phone 8.1 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > http/1.1 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| IE 11 / Win Phone 8.1 Update No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > http/1.1 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| IE 11 / Win 10 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Edge 13 / Win 10 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Edge 13 / Win Phone 10 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Java 6u45 No FS1 No SNI2 | RSA(SHA256) | TLSv1.0 | TLS_RSA_WITH_AES_128_CBC_SHA | |
| Java 7u25 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.0 | TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA FS | |
| Java 8u31 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Java 11.0.3 No FS1 No SNI2 | 握手失败 （protocol_version） | |||
| OpenSSL 0.9.8y No FS1 No SNI2 | RSA(SHA256) | TLSv1.0 | TLS_RSA_WITH_AES_128_CBC_SHA | |
| OpenSSL 1.0.1l No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| OpenSSL 1.0.2e No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Openssl 1.1.1 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Safari 5.1.9 / OS X 10.6.8 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.0 | TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA FS | |
| Safari 6 / iOS 6.0.1 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 FS | |
| Safari 6.0.4 / OS X 10.8.4 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.0 | TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA FS | |
| Safari 7 / iOS 7.1 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 FS | |
| Safari 7 / OS X 10.9 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 FS | |
| Safari 8 / iOS 8.4 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 FS | |
| Safari 8 / OS X 10.10 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 FS | |
| Safari 9 / iOS 9 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Safari 9 / OS X 10.11 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Safari 10 / iOS 10 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Safari 10 / OS X 10.12 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Apple ATS 9 / iOS 9 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| Yahoo Slurp Jan 2015 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| UC浏览器 6 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| 360浏览器 13 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| 360极速浏览器 8 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| 360浏览器 12 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| 360浏览器 8 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| QQ浏览器 9 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| 世界之窗浏览器 7 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| 猎豹浏览器 6 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| 傲游浏览器 5 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| 搜狗浏览器 7 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 > h2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
| 百度浏览器 8 No FS1 No SNI2 | ECDSA(SHA256) | TLSv1.2 | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 FS | |
证书兼容性测试
| ECC | RSA | |
|---|---|---|
| Android 2.3 (Gingerbread) | ||
| Android 4.0 (Ice Cream Sandwich) | ||
| Android 4.1 (Jelly Bean) | ||
| Android 4.2 (Jelly Bean) | ||
| Android 4.3 (Jelly Bean) | ||
| Android 4.4 (KitKat) | ||
| Android 5.0 (Lollipop) | ||
| Android 5.1 (Lollipop) | ||
| Android 6.0 (Marshmallow) | ||
| Android 7.0 (Android Nougat) | ||
| Android 7.1 (Android Nougat) | ||
| Android 8.0 (Android Oreo) | ||
| Android 9.0 (Android Pie) | ||
| Android 10.0 (Android Q) | ||
| Android 11.0 (Android R) | ||
| iOS 5-6 | ||
| iOS 7 | ||
| iOS 8 | ||
| iOS 9 | ||
| iOS 10 | ||
| iOS 11 | ||
| iOS 12 | ||
| iOS 13 | ||
| iOS 14 | ||
| OS X 10.9 (Mavericks) | ||
| OS X 10.10 (Yosemite) | ||
| OS X 10.11 (Eicapitan) | ||
| OS X 10.12 (Sierra) | ||
| OS X 10.13 (High Sierra) | ||
| OS X 10.14 (Mojave) | ||
| java 7u181 | ||
| java 8u161 | ||
| java_8u181 | ||
| java_8u202 | ||
| java 9 | ||
| java 10 | ||
| java 11 | ||
| java 12 | ||
| java 13 | ||
| java 17 | ||
| Firefox 3.0 | ||
| Firefox 3.5 | ||
| Firefox 3.6 | ||
| Firefox 6.0 | ||
| Firefox 16 | ||
| Firefox 23 | ||
| Firefox 32 | ||
| Firefox 42 | ||
| Firefox 50 | ||
| Firefox 51 | ||
| Firefox 54 | ||
| Firefox 58 | ||
| Firefox 63 | ||
| Firefox 65 | ||
| Windows XP | ||
| Windows 7 | ||
| Windows 8 | ||
| Windows 10 |
配置指南：
说明：
- SNI：服务器名称指示，这是一个的TLS扩展，允许服务器在相同的IP和端口上部署多个证书。
- PFS：PFS(perfect forward secrecy)完全正向保密，要求一个密钥只能用于一个连接，一个密钥被破解，并不影响其他密钥的安全性。
- HPKP：公钥固定，这是一种https网站防止攻击者使用CA错误颁发的证书进行中间人攻击的一种安全机制。
- HSTS：这是一个响应头，用来强制启用HTTPS协议，解决301跳转的劫持的问题。
- OCSP：Online Certificate Status Protocol 证书吊销状态在线检查协议。
- OCSP Stapling：OCSP装订，通过TLS握手时传输吊销状态，加快SSL完成握手的速度。
登录后查看更多信息
登录