This plugin audits SSL certificate parameters. One configurable parameter exists:

  • minExpireDays
  • CA PEM file path

Note: It’s only usefull when testing HTTPS sites.

Plugin type



Name Type Default Value Description Help
minExpireDays integer 30 Set minimal amount of days before expiration of the certificate for alerting If the certificate will expire in period of minExpireDays w3af will show an alert about it, which is useful for admins to remember to renew the certificate.
caFileName input_file plugins/audit/ssl_certificate/ca.pem CA PEM file path No detailed help available


For more information about this plugin and the associated tests, there’s always the source code to understand exactly what’s under the hood:
github-logoPlugin source code
Unittest source code


This plugin has no dependencies.