How to remediate – SSL Certificate Expiry – Future Expiry 1. Introduction SSL Certificate Expiry – Future Expiry concerns certificates used to secure network connections that are approaching their expiration...
How to remediate – SSL / TLS Versions Supported 1. Introduction The SSL / TLS Versions Supported vulnerability means a remote service is encrypting communications. This is important because...
How to remediate – SSL 64-bit Block Size Cipher Suites Supported (SWEET32) 1. Introduction The SSL 64-bit Block Size Cipher Suites Supported vulnerability, also known as SWEET32, affects systems using TLS connections...
How to remediate – SSL Anonymous Cipher Suites Supported 1. Introduction The SSL Anonymous Cipher Suites Supported vulnerability means a service allows connections without verifying who is connecting. This...
How to remediate – SSL Certificate Chain Analysis 1. Introduction The SSL Certificate Chain Analysis plugin examines the X.509 certificates used by a service. This checks for issues...
How to remediate – SSL Certificate Chain Contains Certificates Expiring Soon 1. Introduction 2. Technical Explanation The issue occurs when SSL certificates in the chain are nearing their expiry date. Browsers...
How to remediate – SSL Certificate Chain Contains Illegitimate TURKTRUST Intermed… 1. Introduction The SSL Certificate Chain Contains Illegitimate TURKTRUST Intermediate… vulnerability means a service’s certificate chain includes an intermediate certificate...
How to remediate – SSL Certificate Chain Contains RSA Keys Less Than 2048 bits 1. Introduction The SSL Certificate Chain Contains RSA Keys Less Than 2048 bits vulnerability means that a service is presenting...
How to remediate – SSL Certificate with no Subject 1. Introduction This report covers SSL Certificate with no Subject vulnerabilities. This means an SSL/TLS certificate is being presented without...
How to remediate – SSL Certificate with Wrong Hostname 1. Introduction An SSL Certificate with Wrong Hostname means the certificate presented by a service doesn’t match the domain name...