Stale or untrusted certificates weaken encrypted-traffic protection.
TLS Certificates Are Expired or Invalid
CCC.LB.TH07
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.LB.CP11 | SSL/TLS Termination | The service can decrypt SSL or TLS encrypted traffic at the load balancer rather than at the backend servers, offloading the decryption task from the backend servers. |
Related Controls
| ID | Title | Description |
|---|---|---|
| CCC.LB.CN18 | Automate Listener Certificate Renewal | Ensure that certificates attached to listeners are renewed before expiry without manual intervention. |