{ "bomFormat": "CycloneDX", "specVersion": "1.7", "serialNumber": "urn:uuid:45581bc6-97d6-4c8a-88bb-5e9f8406417e", "version": 1, "metadata": { "timestamp": "2026-10-04T16:51:17Z", "tools": { "components": [ { "type": "application", "name": "VPQ-Audit", "version": "1.0.2", "publisher": "ATK" } ] }, "component": { "type": "application", "bom-ref": "org-ATK-self-assessment", "name": "ATK \u2014 self-assessment" }, "properties": [ { "name": "pqc:overall_risk", "value": "HIGH" }, { "name": "pqc:total_findings", "value": "42" }, { "name": "pqc:critical_findings", "value": "0" }, { "name": "pqc:quantum_vulnerable_count", "value": "24" }, { "name": "pqc:roadmap_id", "value": "383ae929-cac2-4513-8bed-9773857b88bd" } ] }, "components": [ { "type": "cryptographic-asset", "bom-ref": "crypto-0001-ECDSA-secp256r1-256", "name": "ECDSA-secp256r1-256", "description": "ECDSA-secp256r1-256 observed in Certificate Public Key at atkvn.com:443, CN=atkvn.com, leaf cert (risk score: 192)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "signature", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "sign", "verify", "keygen" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 128 } }, "evidence": { "occurrences": [ { "location": "atkvn.com:443, CN=atkvn.com, leaf cert" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0002-ECDSA-SHA384", "name": "ECDSA-SHA384", "description": "ECDSA-SHA384 observed in Certificate Signature at atkvn.com:443, CN=atkvn.com, leaf cert (risk score: 192)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "signature", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "sign", "verify", "keygen" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 192 } }, "evidence": { "occurrences": [ { "location": "atkvn.com:443, CN=atkvn.com, leaf cert" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0003-ECDSA-secp256r1-256", "name": "ECDSA-secp256r1-256", "description": "ECDSA-secp256r1-256 observed in Certificate Public Key at vct.atkvn.com:443, CN=vct.atkvn.com, leaf cert (risk score: 192)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "signature", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "sign", "verify", "keygen" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 128 } }, "evidence": { "occurrences": [ { "location": "vct.atkvn.com:443, CN=vct.atkvn.com, leaf cert" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0004-ECDSA-SHA384", "name": "ECDSA-SHA384", "description": "ECDSA-SHA384 observed in Certificate Signature at vct.atkvn.com:443, CN=vct.atkvn.com, leaf cert (risk score: 192)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "signature", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "sign", "verify", "keygen" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 192 } }, "evidence": { "occurrences": [ { "location": "vct.atkvn.com:443, CN=vct.atkvn.com, leaf cert" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0005-ECDSA-secp256r1-256", "name": "ECDSA-secp256r1-256", "description": "ECDSA-secp256r1-256 observed in Certificate Public Key at vpqaudit.atkvn.com:443, CN=vpqaudit.atkvn.com, leaf cert (risk score: 192)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "signature", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "sign", "verify", "keygen" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 128 } }, "evidence": { "occurrences": [ { "location": "vpqaudit.atkvn.com:443, CN=vpqaudit.atkvn.com, leaf cert" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0006-ECDSA-SHA384", "name": "ECDSA-SHA384", "description": "ECDSA-SHA384 observed in Certificate Signature at vpqaudit.atkvn.com:443, CN=vpqaudit.atkvn.com, leaf cert (risk score: 192)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "signature", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "sign", "verify", "keygen" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 192 } }, "evidence": { "occurrences": [ { "location": "vpqaudit.atkvn.com:443, CN=vpqaudit.atkvn.com, leaf cert" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0007-ECDSA-secp384r1-384", "name": "ECDSA-secp384r1-384", "description": "ECDSA-secp384r1-384 observed in Certificate Public Key at atkvn.com:443, CN=YE1, intermediate cert (risk score: 48)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "signature", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "sign", "verify", "keygen" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 192 } }, "evidence": { "occurrences": [ { "location": "atkvn.com:443, CN=YE1, intermediate cert" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0008-ECDSA-secp384r1-384", "name": "ECDSA-secp384r1-384", "description": "ECDSA-secp384r1-384 observed in Certificate Public Key at atkvn.com:443, CN=Root YE, intermediate cert (risk score: 48)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "signature", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "sign", "verify", "keygen" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 192 } }, "evidence": { "occurrences": [ { "location": "atkvn.com:443, CN=Root YE, intermediate cert" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0009-ECDSA-secp384r1-384", "name": "ECDSA-secp384r1-384", "description": "ECDSA-secp384r1-384 observed in Certificate Public Key at atkvn.com:443, CN=ISRG Root X2, intermediate cert (risk score: 48)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "signature", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "sign", "verify", "keygen" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 192 } }, "evidence": { "occurrences": [ { "location": "atkvn.com:443, CN=ISRG Root X2, intermediate cert" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0010-ECDSA-secp384r1-384", "name": "ECDSA-secp384r1-384", "description": "ECDSA-secp384r1-384 observed in Certificate Public Key at vct.atkvn.com:443, CN=YE1, intermediate cert (risk score: 48)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "signature", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "sign", "verify", "keygen" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 192 } }, "evidence": { "occurrences": [ { "location": "vct.atkvn.com:443, CN=YE1, intermediate cert" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0011-ECDSA-secp384r1-384", "name": "ECDSA-secp384r1-384", "description": "ECDSA-secp384r1-384 observed in Certificate Public Key at vct.atkvn.com:443, CN=Root YE, intermediate cert (risk score: 48)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "signature", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "sign", "verify", "keygen" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 192 } }, "evidence": { "occurrences": [ { "location": "vct.atkvn.com:443, CN=Root YE, intermediate cert" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0012-ECDSA-secp384r1-384", "name": "ECDSA-secp384r1-384", "description": "ECDSA-secp384r1-384 observed in Certificate Public Key at vct.atkvn.com:443, CN=ISRG Root X2, intermediate cert (risk score: 48)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "signature", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "sign", "verify", "keygen" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 192 } }, "evidence": { "occurrences": [ { "location": "vct.atkvn.com:443, CN=ISRG Root X2, intermediate cert" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0013-ECDSA-secp384r1-384", "name": "ECDSA-secp384r1-384", "description": "ECDSA-secp384r1-384 observed in Certificate Public Key at vpqaudit.atkvn.com:443, CN=YE2, intermediate cert (risk score: 48)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "signature", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "sign", "verify", "keygen" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 192 } }, "evidence": { "occurrences": [ { "location": "vpqaudit.atkvn.com:443, CN=YE2, intermediate cert" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0014-ECDSA-secp384r1-384", "name": "ECDSA-secp384r1-384", "description": "ECDSA-secp384r1-384 observed in Certificate Public Key at vpqaudit.atkvn.com:443, CN=Root YE, intermediate cert (risk score: 48)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "signature", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "sign", "verify", "keygen" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 192 } }, "evidence": { "occurrences": [ { "location": "vpqaudit.atkvn.com:443, CN=Root YE, intermediate cert" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0015-ECDSA-secp384r1-384", "name": "ECDSA-secp384r1-384", "description": "ECDSA-secp384r1-384 observed in Certificate Public Key at vpqaudit.atkvn.com:443, CN=ISRG Root X2, intermediate cert (risk score: 48)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "signature", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "sign", "verify", "keygen" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 192 } }, "evidence": { "occurrences": [ { "location": "vpqaudit.atkvn.com:443, CN=ISRG Root X2, intermediate cert" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0016-ECDSA-SHA384", "name": "ECDSA-SHA384", "description": "ECDSA-SHA384 observed in Certificate Signature at atkvn.com:443, CN=YE1, intermediate cert (risk score: 36)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "signature", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "sign", "verify", "keygen" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 192 } }, "evidence": { "occurrences": [ { "location": "atkvn.com:443, CN=YE1, intermediate cert" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0017-ECDSA-SHA384", "name": "ECDSA-SHA384", "description": "ECDSA-SHA384 observed in Certificate Signature at atkvn.com:443, CN=Root YE, intermediate cert (risk score: 36)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "signature", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "sign", "verify", "keygen" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 192 } }, "evidence": { "occurrences": [ { "location": "atkvn.com:443, CN=Root YE, intermediate cert" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0018-RSA-SHA256", "name": "RSA-SHA256", "description": "RSA-SHA256 observed in Certificate Signature at atkvn.com:443, CN=ISRG Root X2, intermediate cert (risk score: 36)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "pke", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "encrypt", "decrypt", "keygen" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 128 } }, "evidence": { "occurrences": [ { "location": "atkvn.com:443, CN=ISRG Root X2, intermediate cert" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0019-ECDSA-SHA384", "name": "ECDSA-SHA384", "description": "ECDSA-SHA384 observed in Certificate Signature at vct.atkvn.com:443, CN=YE1, intermediate cert (risk score: 36)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "signature", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "sign", "verify", "keygen" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 192 } }, "evidence": { "occurrences": [ { "location": "vct.atkvn.com:443, CN=YE1, intermediate cert" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0020-ECDSA-SHA384", "name": "ECDSA-SHA384", "description": "ECDSA-SHA384 observed in Certificate Signature at vct.atkvn.com:443, CN=Root YE, intermediate cert (risk score: 36)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "signature", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "sign", "verify", "keygen" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 192 } }, "evidence": { "occurrences": [ { "location": "vct.atkvn.com:443, CN=Root YE, intermediate cert" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0021-RSA-SHA256", "name": "RSA-SHA256", "description": "RSA-SHA256 observed in Certificate Signature at vct.atkvn.com:443, CN=ISRG Root X2, intermediate cert (risk score: 36)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "pke", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "encrypt", "decrypt", "keygen" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 128 } }, "evidence": { "occurrences": [ { "location": "vct.atkvn.com:443, CN=ISRG Root X2, intermediate cert" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0022-ECDSA-SHA384", "name": "ECDSA-SHA384", "description": "ECDSA-SHA384 observed in Certificate Signature at vpqaudit.atkvn.com:443, CN=YE2, intermediate cert (risk score: 36)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "signature", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "sign", "verify", "keygen" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 192 } }, "evidence": { "occurrences": [ { "location": "vpqaudit.atkvn.com:443, CN=YE2, intermediate cert" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0023-ECDSA-SHA384", "name": "ECDSA-SHA384", "description": "ECDSA-SHA384 observed in Certificate Signature at vpqaudit.atkvn.com:443, CN=Root YE, intermediate cert (risk score: 36)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "signature", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "sign", "verify", "keygen" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 192 } }, "evidence": { "occurrences": [ { "location": "vpqaudit.atkvn.com:443, CN=Root YE, intermediate cert" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0024-RSA-SHA256", "name": "RSA-SHA256", "description": "RSA-SHA256 observed in Certificate Signature at vpqaudit.atkvn.com:443, CN=ISRG Root X2, intermediate cert (risk score: 36)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "pke", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "encrypt", "decrypt", "keygen" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 128 } }, "evidence": { "occurrences": [ { "location": "vpqaudit.atkvn.com:443, CN=ISRG Root X2, intermediate cert" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0025-AES-128-GCM", "name": "AES-128-GCM", "description": "AES-128-GCM observed in Bulk Encryption at atkvn.com:443, TLSv1.3 cipher suite (risk score: 16)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "encrypt", "decrypt" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 128 } }, "evidence": { "occurrences": [ { "location": "atkvn.com:443, TLSv1.3 cipher suite" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0026-AES-128-GCM", "name": "AES-128-GCM", "description": "AES-128-GCM observed in Bulk Encryption at vct.atkvn.com:443, TLSv1.3 cipher suite (risk score: 16)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "encrypt", "decrypt" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 128 } }, "evidence": { "occurrences": [ { "location": "vct.atkvn.com:443, TLSv1.3 cipher suite" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0027-AES-128-GCM", "name": "AES-128-GCM", "description": "AES-128-GCM observed in Bulk Encryption at vpqaudit.atkvn.com:443, TLSv1.3 cipher suite (risk score: 16)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "block-cipher", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "encrypt", "decrypt" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 128 } }, "evidence": { "occurrences": [ { "location": "vpqaudit.atkvn.com:443, TLSv1.3 cipher suite" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0028-X25519MLKEM768", "name": "X25519MLKEM768", "description": "X25519MLKEM768 observed in TLS Key Exchange at atkvn.com:443, TLSv1.3 handshake (risk score: 0)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "kem", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "encapsulate", "decapsulate", "keygen" ], "nistQuantumSecurityLevel": 3, "classicalSecurityLevel": 128 } }, "evidence": { "occurrences": [ { "location": "atkvn.com:443, TLSv1.3 handshake" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0029-SHA-256", "name": "SHA-256", "description": "SHA-256 observed in Handshake Hash (HKDF) at atkvn.com:443, TLSv1.3 key schedule hash (risk score: 0)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "hash", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "digest" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 128 } }, "evidence": { "occurrences": [ { "location": "atkvn.com:443, TLSv1.3 key schedule hash" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0030-X25519MLKEM768", "name": "X25519MLKEM768", "description": "X25519MLKEM768 observed in TLS Key Exchange at vct.atkvn.com:443, TLSv1.3 handshake (risk score: 0)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "kem", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "encapsulate", "decapsulate", "keygen" ], "nistQuantumSecurityLevel": 3, "classicalSecurityLevel": 128 } }, "evidence": { "occurrences": [ { "location": "vct.atkvn.com:443, TLSv1.3 handshake" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0031-SHA-256", "name": "SHA-256", "description": "SHA-256 observed in Handshake Hash (HKDF) at vct.atkvn.com:443, TLSv1.3 key schedule hash (risk score: 0)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "hash", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "digest" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 128 } }, "evidence": { "occurrences": [ { "location": "vct.atkvn.com:443, TLSv1.3 key schedule hash" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0032-X25519MLKEM768", "name": "X25519MLKEM768", "description": "X25519MLKEM768 observed in TLS Key Exchange at vpqaudit.atkvn.com:443, TLSv1.3 handshake (risk score: 0)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "kem", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "encapsulate", "decapsulate", "keygen" ], "nistQuantumSecurityLevel": 3, "classicalSecurityLevel": 128 } }, "evidence": { "occurrences": [ { "location": "vpqaudit.atkvn.com:443, TLSv1.3 handshake" } ] } }, { "type": "cryptographic-asset", "bom-ref": "crypto-0033-SHA-256", "name": "SHA-256", "description": "SHA-256 observed in Handshake Hash (HKDF) at vpqaudit.atkvn.com:443, TLSv1.3 key schedule hash (risk score: 0)", "cryptoProperties": { "assetType": "algorithm", "algorithmProperties": { "primitive": "hash", "executionEnvironment": "software-plain-ram", "implementationPlatform": "generic", "cryptoFunctions": [ "digest" ], "nistQuantumSecurityLevel": 0, "classicalSecurityLevel": 128 } }, "evidence": { "occurrences": [ { "location": "vpqaudit.atkvn.com:443, TLSv1.3 key schedule hash" } ] } }, { "type": "cryptographic-asset", "bom-ref": "pubkey-9e7273f87f150283", "name": "ECDSA-secp256r1 public key of atkvn.com", "cryptoProperties": { "assetType": "related-crypto-material", "relatedCryptoMaterialProperties": { "type": "public-key", "algorithmRef": "crypto-0001-ECDSA-secp256r1-256", "size": 256 } } }, { "type": "cryptographic-asset", "bom-ref": "cert-9e7273f87f150283", "name": "atkvn.com", "description": "leaf certificate issued by YE1", "cryptoProperties": { "assetType": "certificate", "certificateProperties": { "subjectName": "atkvn.com", "issuerName": "YE1", "notValidBefore": "2026-09-30T15:10:52+00:00", "notValidAfter": "2026-12-29T15:10:51+00:00", "subjectPublicKeyRef": "pubkey-9e7273f87f150283", "certificateFormat": "X.509", "signatureAlgorithmRef": "crypto-0002-ECDSA-SHA384" } }, "properties": [ { "name": "vpq:chain_position", "value": "leaf" }, { "name": "vpq:serial_number", "value": "679cbc732ffb6474d21dcf40b05adafb96f" }, { "name": "vpq:fingerprint_sha256", "value": "9e7273f87f150283cb6d0ce3bc0fb7db950909296304dca3409b4e4427613ca9" } ], "evidence": { "occurrences": [ { "location": "atkvn.com:443" } ] } }, { "type": "cryptographic-asset", "bom-ref": "pubkey-6501da9d8d199dbe", "name": "ECDSA-secp256r1 public key of vct.atkvn.com", "cryptoProperties": { "assetType": "related-crypto-material", "relatedCryptoMaterialProperties": { "type": "public-key", "algorithmRef": "crypto-0003-ECDSA-secp256r1-256", "size": 256 } } }, { "type": "cryptographic-asset", "bom-ref": "cert-6501da9d8d199dbe", "name": "vct.atkvn.com", "description": "leaf certificate issued by YE1", "cryptoProperties": { "assetType": "certificate", "certificateProperties": { "subjectName": "vct.atkvn.com", "issuerName": "YE1", "notValidBefore": "2026-09-30T07:10:52+00:00", "notValidAfter": "2026-12-29T07:10:51+00:00", "subjectPublicKeyRef": "pubkey-6501da9d8d199dbe", "certificateFormat": "X.509", "signatureAlgorithmRef": "crypto-0004-ECDSA-SHA384" } }, "properties": [ { "name": "vpq:chain_position", "value": "leaf" }, { "name": "vpq:serial_number", "value": "6a0c5f1293a600c2fdcd32f09defd56ff88" }, { "name": "vpq:fingerprint_sha256", "value": "6501da9d8d199dbef1dfd185a5168690dce7cc0e52b51c43922b0334cb098d40" } ], "evidence": { "occurrences": [ { "location": "vct.atkvn.com:443" } ] } }, { "type": "cryptographic-asset", "bom-ref": "pubkey-b684450c553acf7f", "name": "ECDSA-secp256r1 public key of vpqaudit.atkvn.com", "cryptoProperties": { "assetType": "related-crypto-material", "relatedCryptoMaterialProperties": { "type": "public-key", "algorithmRef": "crypto-0005-ECDSA-secp256r1-256", "size": 256 } } }, { "type": "cryptographic-asset", "bom-ref": "cert-b684450c553acf7f", "name": "vpqaudit.atkvn.com", "description": "leaf certificate issued by YE2", "cryptoProperties": { "assetType": "certificate", "certificateProperties": { "subjectName": "vpqaudit.atkvn.com", "issuerName": "YE2", "notValidBefore": "2026-09-30T06:00:52+00:00", "notValidAfter": "2026-12-29T06:00:51+00:00", "subjectPublicKeyRef": "pubkey-b684450c553acf7f", "certificateFormat": "X.509", "signatureAlgorithmRef": "crypto-0006-ECDSA-SHA384" } }, "properties": [ { "name": "vpq:chain_position", "value": "leaf" }, { "name": "vpq:serial_number", "value": "562f12e2adb1418d33598c2cb4e11b14f40" }, { "name": "vpq:fingerprint_sha256", "value": "b684450c553acf7f254f4832d6b40f6b0c2b85e5fabd39f58f539dadd48746c2" } ], "evidence": { "occurrences": [ { "location": "vpqaudit.atkvn.com:443" } ] } }, { "type": "cryptographic-asset", "bom-ref": "pubkey-a2372d06431e9716", "name": "ECDSA-secp384r1 public key of YE1", "cryptoProperties": { "assetType": "related-crypto-material", "relatedCryptoMaterialProperties": { "type": "public-key", "algorithmRef": "crypto-0007-ECDSA-secp384r1-384", "size": 384 } } }, { "type": "cryptographic-asset", "bom-ref": "cert-a2372d06431e9716", "name": "YE1", "description": "intermediate certificate issued by Root YE", "cryptoProperties": { "assetType": "certificate", "certificateProperties": { "subjectName": "YE1", "issuerName": "Root YE", "notValidBefore": "2025-09-03T00:00:00+00:00", "notValidAfter": "2028-09-02T23:59:59+00:00", "subjectPublicKeyRef": "pubkey-a2372d06431e9716", "certificateFormat": "X.509", "signatureAlgorithmRef": "crypto-0016-ECDSA-SHA384" } }, "properties": [ { "name": "vpq:chain_position", "value": "intermediate" }, { "name": "vpq:serial_number", "value": "5ddd70dd31f801c85c186a7a04b80afe" }, { "name": "vpq:fingerprint_sha256", "value": "a2372d06431e9716365eeed47ec020351497d182fcc038e457e58168a03cac07" } ], "evidence": { "occurrences": [ { "location": "atkvn.com:443" }, { "location": "vct.atkvn.com:443" } ] } }, { "type": "cryptographic-asset", "bom-ref": "pubkey-0fc0901cca2bae9e", "name": "ECDSA-secp384r1 public key of Root YE", "cryptoProperties": { "assetType": "related-crypto-material", "relatedCryptoMaterialProperties": { "type": "public-key", "algorithmRef": "crypto-0008-ECDSA-secp384r1-384", "size": 384 } } }, { "type": "cryptographic-asset", "bom-ref": "cert-0fc0901cca2bae9e", "name": "Root YE", "description": "intermediate certificate issued by ISRG Root X2", "cryptoProperties": { "assetType": "certificate", "certificateProperties": { "subjectName": "Root YE", "issuerName": "ISRG Root X2", "notValidBefore": "2026-05-13T00:00:00+00:00", "notValidAfter": "2032-09-02T23:59:59+00:00", "subjectPublicKeyRef": "pubkey-0fc0901cca2bae9e", "certificateFormat": "X.509", "signatureAlgorithmRef": "crypto-0017-ECDSA-SHA384" } }, "properties": [ { "name": "vpq:chain_position", "value": "intermediate" }, { "name": "vpq:serial_number", "value": "872165fc34b6e5fba8add5b3705fb53a" }, { "name": "vpq:fingerprint_sha256", "value": "0fc0901cca2bae9e9fdbb02d50d02f1094f7b36672086991b9e897626dc485f0" } ], "evidence": { "occurrences": [ { "location": "atkvn.com:443" }, { "location": "vct.atkvn.com:443" }, { "location": "vpqaudit.atkvn.com:443" } ] } }, { "type": "cryptographic-asset", "bom-ref": "pubkey-ee5f7abd6981bb02", "name": "ECDSA-secp384r1 public key of ISRG Root X2", "cryptoProperties": { "assetType": "related-crypto-material", "relatedCryptoMaterialProperties": { "type": "public-key", "algorithmRef": "crypto-0009-ECDSA-secp384r1-384", "size": 384 } } }, { "type": "cryptographic-asset", "bom-ref": "cert-ee5f7abd6981bb02", "name": "ISRG Root X2", "description": "intermediate certificate issued by ISRG Root X1", "cryptoProperties": { "assetType": "certificate", "certificateProperties": { "subjectName": "ISRG Root X2", "issuerName": "ISRG Root X1", "notValidBefore": "2026-05-13T00:00:00+00:00", "notValidAfter": "2032-09-02T23:59:59+00:00", "subjectPublicKeyRef": "pubkey-ee5f7abd6981bb02", "certificateFormat": "X.509", "signatureAlgorithmRef": "crypto-0018-RSA-SHA256" } }, "properties": [ { "name": "vpq:chain_position", "value": "intermediate" }, { "name": "vpq:serial_number", "value": "6c8f1dc727c7117f7baf853ac980f9cd" }, { "name": "vpq:fingerprint_sha256", "value": "ee5f7abd6981bb0255632cd8f49283451b4b18844d12040b44ee00f07b8fe2c6" } ], "evidence": { "occurrences": [ { "location": "atkvn.com:443" }, { "location": "vct.atkvn.com:443" }, { "location": "vpqaudit.atkvn.com:443" } ] } }, { "type": "cryptographic-asset", "bom-ref": "pubkey-97658de8c68dfa98", "name": "ECDSA-secp384r1 public key of YE2", "cryptoProperties": { "assetType": "related-crypto-material", "relatedCryptoMaterialProperties": { "type": "public-key", "algorithmRef": "crypto-0013-ECDSA-secp384r1-384", "size": 384 } } }, { "type": "cryptographic-asset", "bom-ref": "cert-97658de8c68dfa98", "name": "YE2", "description": "intermediate certificate issued by Root YE", "cryptoProperties": { "assetType": "certificate", "certificateProperties": { "subjectName": "YE2", "issuerName": "Root YE", "notValidBefore": "2025-09-03T00:00:00+00:00", "notValidAfter": "2028-09-02T23:59:59+00:00", "subjectPublicKeyRef": "pubkey-97658de8c68dfa98", "certificateFormat": "X.509", "signatureAlgorithmRef": "crypto-0022-ECDSA-SHA384" } }, "properties": [ { "name": "vpq:chain_position", "value": "intermediate" }, { "name": "vpq:serial_number", "value": "4df3b15dd6c0784c507cd37b58e6f115" }, { "name": "vpq:fingerprint_sha256", "value": "97658de8c68dfa98ace1e5028a63d54a1aae911b3e21471076c6850cd08cbab4" } ], "evidence": { "occurrences": [ { "location": "vpqaudit.atkvn.com:443" } ] } } ] }