The TLS certificate has expired.

TLS_CERT_EXPIRED · Severity: Error

• ErrorTLS_CERT_EXPIRED

  The TLS certificate has expired.

  The certificate's notAfter date (RFC 5280) has passed. Browsers show a full-page warning, and most API clients and mail servers refuse the connection.

  Recommendation: Renew the certificate and install it together with its intermediate certificates. Automate renewal (for example with ACME) so it cannot lapse again.

Reported by

• Site health check
• TLS certificate check

Available through the API

• Site health check API
• TLS certificate check API

Related findings

• Info TLS_CERT_EXPIRING The TLS certificate expires within 30 days.
• Warning TLS_CERT_EXPIRING_SOON The TLS certificate expires in less than 14 days.
• Error TLS_HOSTNAME_MISMATCH The TLS certificate is not valid for the domain name.
• Error TLS_UNAVAILABLE No TLS connection to the domain on port 443 could be made.
• Error TLS_UNTRUSTED The TLS certificate does not chain to a trusted certificate authority.
• Warning TLS_WEAK_KEY The TLS certificate uses a weak public key.

All findings