Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

What is an SSL certificate and what role does it play in detection rate?

I've recently found that even though my files that I've been encrypting are scanning as FUD, it still sets off red flags for AV. I was told that my SSL certificate expired and that that was the cause for this. What does this mean? What can I do to fix this?
SSL stands for 'secure socket layer', it's a certificate that is meant to tell the browser that any information passed between the client and the server is encrypted and therefore, safe. It's the 's' in 'https'. Usually you get one for free from your web hosts.
(May 13, 2020 09:30 PM)JuiceTooLoose Wrote:  I've recently found that even though my files that I've been encrypting are scanning as FUD, it still sets off red flags for AV. I was told that my SSL certificate expired and that that was the cause for this. What does this mean? What can I do to fix this?

SSL has nothing to do with your crypted file as Its mostly used with web sites.
[Image: 6xBycLk.gif]


Website: nomorehome.work
(May 13, 2020 09:30 PM)JuiceTooLoose Wrote:  I've recently found that even though my files that I've been encrypting are scanning as FUD, it still sets off red flags for AV. I was told that my SSL certificate expired and that that was the cause for this. What does this mean? What can I do to fix this?

Look for either OV certificate or an EV certificate, either of those will build reputation for smart screen and help with antivirus as well.
SSL certificates (or x509 certificates is the format and is just associated with SSL, witch today is TLS. No one uses SSL anymore).

The x509 certificates implements a way to digitally sign binaries and the signature can be verified using the x509 certificate. x509 also implements a chain of trust mechanism. Operating systems has a set of root-certificates that it trusts and these certificates can sign your certificate in order for your computer to trust it.

x509 certificates are also valid between certain dates (don't have to, but most often) and it seems that yours have expired. The AV flags this as insecure since it could mean that someone is using a out-dated certificate (stolen or other reason) to sign malicious software.

The solution is to resign the certificate by a trusted authority.
Change the website and make sure your ssl isnt expired, any browser will flag it because of the security issue not because of the content of your website.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by ZappiiiJul 12, 2025 05:09 AM 56 3,495 Jul 12, 2025 05:09 AM
Last Post: Wigxxxx
by darkterrorApr 8, 2025 05:21 AM 151 6,150 Apr 8, 2025 05:21 AM
Last Post: darkterror
by latencyxDec 9, 2024 10:10 AM 11 878 Dec 9, 2024 10:10 AM
Last Post: latencyx