Certificates and the hosts in use do not line up

Checks

• Linked host not covered by certificate linked_host_not_covered
• Certificate for host that no longer exists certificate_for_host_that_no_longer_resolves
• Different issuers or expiry dates across hosts different_issuers_or_expiry_dates_across_hosts
• Wildcard certificate alongside forgotten ones wildcard_alongside_forgotten_single_certificates
• Certificate issued that owner does not recognize certificate_issued_that_the_owner_does_not_recognise

Findings

• The certificates and the hosts of the domain do not line up

What this relies on

Every host the site links to should be covered and known.

How to verify by hand

Certificate transparency logs for the domain.