I'm wondering if anyone knows of a demo site which shows different cases where HTTPS is misconfigured or broken. Or does anyone know of a website in the wild that deliberately displays various broken / misconfigured HTTPS cases? ... If not, how about ideas on how to track them down with a search engine? I'm looking for sites which exhibit broken https behaviors, for example:
- Self-signed certificate
- Certificatewith invalid subdomain
- Expired certificate
- Page with secure and un-secure content
- etc...
I'm looking to find a comprehensive list of the various ways that HTTPS can be misconfigured, and ideally perhaps live examples that I can use to hone a tool to crawl a page and tell you if it's going to produce any browser security errors. (As far as I know there is no such tool, short of a human operating a browser, anyone know of one?)