AnsweredAssumed Answered

SSL DROWN tests - certificate data out of date?

Question asked by Paul Dicovitsky on Apr 6, 2018
Latest reply on Apr 10, 2018 by Bhushan Lokhande

As a huge fans of SSL Labs over the years, I just wanted to report that it looks like the DROWN test is ... busticated.

 

We've updated certs on several systems, even installing brand new, never used before, unique certs on systems, but the SSL Labs DROWN check still reports issues with the old certs. 

 

Censys.io is up-to-date, i.e. they've rescanned and picked up the new cert.

 

Is the data feed from Censys.io to SSL Labs borked?

 

drown

Outcomes