The TLS certificate uses a weak public key.

TLS_WEAK_KEY · Severity: Warning

• WarningTLS_WEAK_KEY

  The TLS certificate uses a weak public key.

  The key is RSA with fewer than 2048 bits or an elliptic curve key smaller than 256 bits. The CA/Browser Forum Baseline Requirements do not allow such keys for publicly trusted certificates, and clients refuse them.

  Recommendation: Issue a new certificate with an RSA 2048-bit or an ECDSA P-256 key.

Reported by

• Site health check
• TLS certificate check

Available through the API

• Site health check API
• TLS certificate check API

Related findings

• Warning TLS_WEAK_SIGNATURE A certificate in the chain is signed with SHA-1 or MD5.
• Error TLS_CERT_EXPIRED The TLS certificate has expired.
• Info TLS_CERT_EXPIRING The TLS certificate expires within 30 days.
• Warning TLS_CERT_EXPIRING_SOON The TLS certificate expires in less than 14 days.
• Error TLS_HOSTNAME_MISMATCH The TLS certificate is not valid for the domain name.
• Error TLS_UNAVAILABLE No TLS connection to the domain on port 443 could be made.

All findings