mismatched-ssl-certificate update

ssl/mismatched-ssl-certificate.yaml

@@ -0,0 +1,24 @@
+id: mismatched-ssl-certificate
+
+info:
+  name: Mismatched SSL Certificate
+  author: pdteam
+  severity: low
+  reference:
+    - https://www.invicti.com/web-vulnerability-scanner/vulnerabilities/ssl-certificate-name-hostname-mismatch/
+  tags: ssl,mismatched,tls
+
+ssl:
+  - address: "{{Host}}:{{Port}}"
+
+    matchers:
+      - type: dsl
+        dsl:
+          - "mismatched == true"
+          - "ip != host"
+        condition: and
+
+    extractors:
+      - type: dsl
+        dsl:
+          - '"CN: " + subject_cn'