id: expired-ssl

info:
  name: Expired SSL Certificate
  author: pdteam
  severity: low
  description: |
    After an SSL certificate expires, you will no longer be able to communicate over a secure, encrypted HTTPS connection.
  remediation: |
    Purchase or generate a new SSL/TLS certificate to replace the existing one.
  reference:
    - https://www.acunetix.com/vulnerabilities/web/tls-ssl-certificate-about-to-expire/
  metadata:
    max-request: 1
  tags: ssl
ssl:
  - address: "{{Host}}:{{Port}}"
    matchers:
      - type: dsl
        dsl:
          - "expired == true"

    extractors:
      - type: kval
        kval:
          - "not_after"

# digest: 4b0a00483046022100dcf1bcb397cf13dc038492bf626544898c33de0e0169b2a957c7462d88c99929022100a37d3c941bbe34aabd7a80ff27b5102e3fccfbaca56c13ea568ed5763eacfc47:922c64590222798bb761d5b6d8e72950