SEC-003
TLS certificate problem
CriticalDefault severity · Security · Secrets, HTTPS and security headers
Last reviewed
What it checks
Certificate validity and expiry date on the HTTPS connection.
Why it matters
An invalid or expiring certificate shows a full-page browser warning and blocks most visitors.
Recommended fix
Renew the certificate and enable automatic renewal on the hosting platform.
How to verify
Open the site in a private window and confirm there is no certificate warning; check the expiry date is more than 30 days away.
Example fix prompt
Generic prompt (your report adds the evidence)
Please fix this production issue in my app.
Issue SEC-003: TLS certificate problem
Site: https://your-app.example
First confirm the issue in the code or live config. If it is not present, say so and change nothing.
Task: Check the TLS certificate configuration for the production domain: make sure it covers the exact hostname, is not expired, and renews automatically (for example via the hosting provider or Let’s Encrypt).
Constraints: make the smallest change that fixes this, keep the current design and behaviour, never paste secret values into code or chat, and tell me which files you changed.
Done when: Open the site in a private window and confirm there is no certificate warning; check the expiry date is more than 30 days away.