ERT-CONFIG-007
TLS certificate or protocol weakness
HighA04:2025CWE-295
Why it matters
An expiring certificate takes your app offline; old TLS versions are breakable.
How to fix it
Renew the certificate (or enable auto-renew) and disable TLS 1.0/1.1.
How we test it
Passive — runs in the free check, looks only at what a browser can see.
