Bad SSL (TLS) sample #4 [1][2][3]

from Fortune 500 and Forbes Global 2000 companies to a Root Certificate Authority, going through:
the United Nations, the Vatican,
some major insurance organizations,
7 banks,
the passport office,
a public service broadcaster,
air traffic control,
a hospital,
elections and payment offices,
an university,
3 major telecom companies,
the largest national electronic banking/payment circuits,
a government trusted IBM owned company

Splunk#1869 Forbes Global 2000, Home page (between May and August 2019)FOpenSSL Padding OracleAUG-15-2019
Capgemini#670 Forbes Global 2000, Corporate WebmailFZombie POODLEJUL-10-2019
NXP#577 Forbes Global 2000, Quality and Integrated Management SystemFanonymous ciphers, insecure ciphersMAY-14-2019
Nvidia#529 Forbes Global 2000, Home pageFPOODLE, Zombie POODLEAUG-15-2019
LG Electronics#502 Forbes Global 2000, Business web applicationFSSL2NOV-06-2019
Kia Motors#447 Forbes Global 2000, Home pageFZombie POODLE, GOLDENDOODLE, OpenSSL 0-LengthJUN-06-2019
3M#380 Fortune 500, Home pageFZombie POODLEJUN-07-2019
ENI#91 Forbes Global 2000, Corporate authentication portalFanonymous ciphers, insecure ciphers, POODLEAPR-05-2019
Apple#3 Fortune 500, Home pageFFFZombie POODLENOV-26-2019

United NationsField (IT) Support SuiteFZombie POODLEJUN-12-2019
Vatican StateHome pageFinsecure ciphersSEP-24-2019

Banca 5Web APIFROBOTJUL-18-2019
GeneraliWebmail (mail.bancagenerali.it, mail.generali.it)FFinsecure ciphers, POODLE, Zombie POODLE, GOLDENPOODLE, OpenSSL 0-Length
insecure ciphers, POODLE, Zombie POODLE, GOLDENPOODLE, OpenSSL 0-Length
MAY-15-2019
MAY-15-2019
Lloyd's of LondonUnidentified web applicationFanonymous ciphers, insecure ciphers, ~FREAKAPR-12-2019

BancomatHome pageFinsecure renegotiationAUG-19-2019
Banco di SardegnaWeb applicationFPOODLE, ROBOTAPR-05-2019
Intesa San PaoloSlovenian home pageFPOODLE, POODLE TLS, Zombie POODLE, Sleeping POODLESEP-20-2019
MediolanumCorporate Resource ManagementFanonymous ciphers, insecure ciphers, POODLEJUN-24-2019
Monte dei Paschi di SienaSSL_ERROR_WEAK_SERVER_EPHEMERAL_DH_KEYFanonymous ciphers, insecure ciphers, Logjam, ~FREAK, POODLE, ROBOTSEP-24-2019
DASCustomer loginFinsecure ciphers, OpenSSL Padding Oracle, OpenSSL 0-LengthOCT-22-2019
UnicreditUnidentified web applicationFinsecure ciphers, ~FREAKOCT-29-2019

Agenzia delle EntrateHome pageFZombie POODLEJUN-04-2019
Ministero degli InterniPassport Office Home pageFinsecure ciphers, ~FREAK, POODLE, ROBOTFEB-04-2019
Sistema Sanità Italian National Medical ArchiveFROBOTMAR-19-2019
Agenzia Italiana del FarmacoHome pageFZombie POODLEJUL-18-2019
Istituto Nazionale per l'Assicurazione
contro gli Infortuni sul Lavoro
Home page, web APIFFPOODLE TLS, GOLDENDOODLE, OpenSSL 0-Length, Sleeping POODLE
GOLDENDOODLE, OpenSSL 0-Length, Sleeping POODLE
MAY-09-2019
SEP-30-2019

Commissione Nazionale per le Società e la BorsaHome page (HTTPS redirects to HTTP)Finsecure ciphers, ~FREAK, POODLE TLS, ROBOTMAY-02-2019
Ente Nazionale Assistenza VoloHome pageFROBOT, Zombie POODLEOCT-29-2019
Azienda Unità Sanitaria Locale BolognaMedical Diagnostics Online PortalFDROWN, POODLEMAY-28-2019
Comune di PratoCity Hall Voting SystemFDROWN, SSL2, insecure ciphers, Logjam, ~FREAK, POODLEOCT-29-2019
Radio Televisione ItalianaHome pageFPOODLE TLSFEB-04-2019
Comune di GenovaCity Hall Payment APIFanonymous ciphers, insecure ciphers, ~FREAK, POODLEMAR-19-2019
Università di NapoliProfessors' Directory and AccessFPOODLE, OpenSSL Padding OracleJUN-12-2019

VodafoneHome page, SSO (probably Single Sign On)FFZombie POODLE, GOLDENDOODLE, OpenSSL 0-Length
Zombie POODLE, GOLDENDOODLE, OpenSSL 0-Length
JUN-12-2019
JUN-13-2019
Telecom ItaliaCorporate Resources Management PortalFSSL2, insecure ciphers, ~FREAKOCT-29-2019
PirelliBusiness application (Copyright © Milano 2000-2001)Finsecure ciphers, ~FREAKMAY-24-2019
LottomaticaElectronic payment portalFPOODLE, OpenSSL Padding OracleOCT-29-2019
TelepassHome pageFinsecure ciphersOCT-29-2019
WindOracle Application Server 10g, 10.1.3.5.0FPOODLE, POODLE TLSMAY-09-2019
Automobile Club d'ItaliaServices portalFPOODLE, POODLE TLS, Zombie POODLE, Sleeping POODLEMAY-27-2019

In.te.s.a.Trusted Hub for Electronic Business Integration
Apache/1.3.28 (2003 - server online until summer 2019)
FFPOODLE TLS, Zombie POODLE, Sleeping POODLE
SSL2, anonymous ciphers, insecure ciphers, ~FREAK, POODLE, POODLE TLS, insecure renegotiation
JUN-19-2019
JUL-08-2018
ArubaCertified email Webmail, Root CA CRLFFSSSL2, insecure ciphers, Logjam, ~FREAK, POODLE, insecure renegotiation
anonymous ciphers
MAY-05-2019
NOV-13-2019


Agenzia per l'Italia digitale 🤔Zimbra (2014)Fcertificate not trusted, insecure signature, Logjam, POODLENOV-13-2019


Bad SSL home page

Disclaimer: my employer has no relation with this initiative. Data collected over time from publicly available SSLLabs test reports. This collection work does not imply the expression of any opinion.