logo

Database

Ssl Tls Certificate Expiration Not Validated

Description

Detects expired SSL/TLS certificates by validating the certificate's expiration date. An expired certificate represents a significant security risk as it can lead to man-in-the-middle attacks, browser security warnings, and loss of trusted HTTPS connections.

Weakness:

313 - Insecure service configuration - Certificates

Category: Functionality Abuse

Detection Strategy

    Retrieves the SSL/TLS certificate from the target web server

    Compares the certificate's 'not valid after' date against the current UTC time

    Reports a vulnerability if the current time is later than the certificate's expiration date