Improper Validation of Certificate Expiration

A certificate expiration is not validated or is incorrectly validated.

We track 1 vulnerability of this type. 100% are rated high or critical, and the average CVSS score is 10.0.

How this weakness is prevented

• Architecture and Design: Check for expired certificates and provide the user with adequate information about the nature of the problem and how to proceed.
• Implementation: If certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the expiration.