Emerald Red Team

ERT-CONFIG-007

TLS certificate or protocol weakness

HighA04:2025CWE-295

Why it matters

An expiring certificate takes your app offline; old TLS versions are breakable.

How to fix it

Renew the certificate (or enable auto-renew) and disable TLS 1.0/1.1.

How we test it

Passive — runs in the free check, looks only at what a browser can see.

Does your app have this problem?

The free Quick Check tests for it.

Scan my app — free