SSL Certificate Signed with the Revoked DigiNotar Certificate Authority

This script is Copyright (C) 2011-2013 Tenable Network Security, Inc.


Synopsis :

The SSL certificate for this service was signed by a compromised CA
certificate.

Description :

The X.509 certificate of the remote host was signed by a certificate
belonging to a Certificate Authority (CA) called DigiNotar, which was
revoked due to a known compromise. You should verify that the remote
certificate indeed was obtained legally, and you should get a new CA
to sign it, as most web browsers are being updated to stop trusting
this authority.

See also :

http://www.nessus.org/u?f3fc8e9a
http://www.nessus.org/u?baa49230

Solution :

Purchase or generate a new certificate for this service.

Risk factor :

Medium / CVSS Base Score : 6.4
(CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N)

Family: General

Nessus Plugin ID: 56043 ()

Bugtraq ID:

CVE ID: