Protocol: Invalid SSL Certificate Validity Period¶

Identifier: issue_ssl_invalid_certificate_validity_period

Scanner Support¶

Description¶

A certificate validity period outside accepted browser and CA policy limits reduces trust in the TLS identity.

How we test: We inspect the certificate not-before and not-after dates and validity duration.

References:

• https://cabforum.org/uploads/CA-Browser-Forum-BR-2.1.8.pdf

Configuration¶

Example¶

Example configuration:

---
security_tests:
  issue_ssl_invalid_certificate_validity_period:
    skip: false

Reference¶

skip¶

Type: boolean

Skip the test if true.