Remediation Steps

Follow the steps below to remediate this finding on Apache webserver.

1. If using Let's Encrypt with Certbot, renewal is automatic:

   sudo certbot renew --dry-run

2. For commercial certificates, obtain the renewed certificate and update:

   SSLCertificateFile /path/to/renewed_cert.pem
   SSLCertificateChainFile /path/to/chain.pem

3. Reload Apache:

   sudo systemctl reload apache2