security tls_error ai_generated true

Certificate pinning check failed

ID: security/certificate-pinning-bypass

Also available as: JSON · Markdown
78%Fix Rate
82%Confidence
3Evidence
2023-01-01First Seen

Version Compatibility

VersionStatusIntroducedDeprecatedNotes
any active — — —

Root Cause

Certificate pinning prevents connection to server.

generic

Workarounds

  1. 88% success Pin to leaf certificate AND backup pin
  2. 85% success Use Certificate Transparency monitoring as additional check

Dead Ends

Common approaches that don't work:

  1. Remove certificate pinning entirely 82% fail

    Vulnerable to MITM

  2. Pin to root CA only 75% fail

    Too broad, any cert from CA accepted