AnsweredAssumed Answered

Incorrect date calculation on Qualys own test

Question asked by pierre on Apr 19, 2014
Latest reply on Apr 22, 2014 by Ivan Ristić

Just for kicks I tested the Qualys web site itself with tis own tool. The results were A+ (is anyone surprised?)

 

Interestingly enough, the certificate date information indicated the following:

 

Server Key and Certificate #1
Common nameswww.ssllabs.com
Alternative nameswww.ssllabs.com ssllabs.com
Prefix handlingBoth (with and without WWW)
Valid fromWed Apr 16 00:00:00 UTC 2014
Valid until

Thu Apr 16 23:59:59 UTC 2015 (expires in 11 months and 32 days)

 

The "expires in" is interesting to say the least.

11 months and 32 days would be 12 months and 1 day (in my book), which would make it 1 year and 1 day, which is obviously incorrect. The correct calculation from today (April 19, 2014) to April 16, 2015 would be 1 year minus 3 days, or 11 months and 28 days (you can also verify it on timeanddate.com).

 

So if Qualys cannot do basic date calculations correctly, why should I trust it to accurately test the security of other web sites?

 

Not impressed

Outcomes