Scan rule · RSC-SEC-089
TLS certificate expired
Reads the host's certificate and checks whether its validity date has passed.
Why this matters
An expired certificate is the most visible security problem a visitor can meet: the browser shows a full-page warning instead of your site. Most visitors turn around; those who click through connect with a certificate nobody trusts any more — protection against eavesdropping is effectively gone.
In AI and no-code projects this typically happens when a custom domain was placed in front of a platform and the first certificate was issued by hand. After 90 days it expires and nobody set up renewal. With personal data involved, unencrypted transport is also attackable under data protection law — the same question as missing HTTPS.
Check it yourself: open the site in a browser — the warning names the expiry date. Or click the padlock in the address bar → certificate → “Valid until”.
Scan tier
How to fix it
Renew the certificate immediately, set up automatic renewal (Let's Encrypt/ACME at the host) and add an expiry alert.