In this article:
Question
When reviewing findings of 'SSL/TLS Service Supports Weak Protocol' and clicking on 'Observations' there may be multiple observations from different IP addresses and/or domains.
Answer
When a wildcard certificate is used, the subdomains will be grouped under the apex domain and will show as different observations. The finding is still against one certificate.
- SNI is the exact (sub-)domain where the issue was observed.
- IP is an IP address to which the SNI resolved at the moment.