{
    "href": "https://ssl-config.mozilla.org/guidelines/5.0.json",
    "configurations": {
        "modern": {
            "openssl_ciphers": [],
            "openssl_ciphersuites": [
                "TLS_AES_128_GCM_SHA256",
                "TLS_AES_256_GCM_SHA384",
                "TLS_CHACHA20_POLY1305_SHA256"
            ],
            "tls_versions": ["TLSv1.3"],
            "tls_curves": ["X25519", "prime256v1", "secp384r1"],
            "certificate_types": ["ecdsa"],
            "certificate_curves": ["prime256v1", "secp384r1"],
            "certificate_signatures": ["ecdsa-with-SHA256", "ecdsa-with-SHA384", "ecdsa-with-SHA512"],
            "rsa_key_size": 2048,
            "dh_param_size": null,
            "ecdh_param_size": 256,
            "hsts_min_age": 63072000,
            "oldest_clients": ["Firefox 63", "Android 10.0", "Chrome 70", "Edge 75", "Java 11", "OpenSSL 1.1.1", "Opera 57", "Safari 12.1"],
            "ocsp_staple": true,
            "server_preferred_order": false,
            "maximum_certificate_lifespan": 90
        },
        "intermediate": {
            "openssl_ciphers": [
                "ECDHE-ECDSA-AES128-GCM-SHA256",
                "ECDHE-RSA-AES128-GCM-SHA256",
                "ECDHE-ECDSA-AES256-GCM-SHA384",
                "ECDHE-RSA-AES256-GCM-SHA384",
                "ECDHE-ECDSA-CHACHA20-POLY1305",
                "ECDHE-RSA-CHACHA20-POLY1305",
                "DHE-RSA-AES128-GCM-SHA256",
                "DHE-RSA-AES256-GCM-SHA384"
            ],
            "openssl_ciphersuites": [
                "TLS_AES_128_GCM_SHA256",
                "TLS_AES_256_GCM_SHA384",
                "TLS_CHACHA20_POLY1305_SHA256"
            ],
            "tls_versions": ["TLSv1.2", "TLSv1.3"],
            "tls_curves": ["X25519", "secp256r1", "secp384r1"],
            "certificate_types": ["ecdsa", "rsa"],
            "certificate_curves": null,
            "certificate_signatures": ["sha256WithRSAEncryption", "ecdsa-with-SHA256", "ecdsa-with-SHA384", "ecdsa-with-SHA512"],
            "rsa_key_size": 2048,
            "dh_param_size": 2048,
            "ecdh_param_size": 256,
            "hsts_min_age": 63072000,
            "oldest_clients": ["Firefox 27", "Android 4.4.2", "Chrome 31", "Edge", "IE 11 on Windows 7", "Java 8u31", "OpenSSL 1.0.1", "Opera 20", "Safari 9"],
            "ocsp_staple": true,
            "server_preferred_order": false,
            "maximum_certificate_lifespan": 730
        },
        "old": {
            "openssl_ciphers": [
                "ECDHE-ECDSA-AES128-GCM-SHA256",
                "ECDHE-RSA-AES128-GCM-SHA256",
                "ECDHE-ECDSA-AES256-GCM-SHA384",
                "ECDHE-RSA-AES256-GCM-SHA384",
                "ECDHE-ECDSA-CHACHA20-POLY1305",
                "ECDHE-RSA-CHACHA20-POLY1305",
                "DHE-RSA-AES128-GCM-SHA256",
                "DHE-RSA-AES256-GCM-SHA384",
                "DHE-RSA-CHACHA20-POLY1305",
                "ECDHE-ECDSA-AES128-SHA256",
                "ECDHE-RSA-AES128-SHA256",
                "ECDHE-ECDSA-AES128-SHA",
                "ECDHE-RSA-AES128-SHA",
                "ECDHE-ECDSA-AES256-SHA384",
                "ECDHE-RSA-AES256-SHA384",
                "ECDHE-ECDSA-AES256-SHA",
                "ECDHE-RSA-AES256-SHA",
                "DHE-RSA-AES128-SHA256",
                "DHE-RSA-AES256-SHA256",
                "AES128-GCM-SHA256",
                "AES256-GCM-SHA384",
                "AES128-SHA256",
                "AES256-SHA256",
                "AES128-SHA",
                "AES256-SHA",
                "DES-CBC3-SHA"
            ],
            "openssl_ciphersuites": [
                "TLS_AES_128_GCM_SHA256",
                "TLS_AES_256_GCM_SHA384",
                "TLS_CHACHA20_POLY1305_SHA256"
            ],
            "tls_versions": ["TLSv1", "TLSv1.1", "TLSv1.2", "TLSv1.3"],
            "tls_curves": ["X25519", "secp256r1", "secp384r1"],
            "certificate_types": ["rsa"],
            "certificate_curves": null,
            "certificate_signatures": ["sha256WithRSAEncryption"],
            "rsa_key_size": 2048,
            "dh_param_size": 1024,
            "ecdh_param_size": 256,
            "hsts_min_age": 63072000,
            "oldest_clients": ["Firefox 1", "Android 2.3", "Chrome 1", "Edge 12", "IE8 on Windows XP", "Java 6", "OpenSSL 0.9.8", "Opera 5", "Safari 1"],
            "ocsp_staple": true,
            "server_preferred_order": true,
            "maximum_certificate_lifespan": 730
        }
    },
    "version": 5.0
}