I just noticed that, at least some of the time, Avast appears to be replacing sites SSL certificates with it’s own?
Why is this?
For example, one site I was using said the cert was from Avast, but when visiting it on my phone, it says cPanel.
Why is it doing this and how can I turn it off?
Thanks.
It’s for webpage scanning, and this feature is there for years (as a feature for Avast Antivirus).
Almost all recent websites uses HTTPS connection, which is encrypted between web-servers and browsers. Thus, antivirus cannot scan/block malicious content transferred via that, resulting in failing protection. So, Avast injects its own certificate and decrypt their communication for malware scanning.
Avast normally uses more transparent method for HTTPS scanning than replacing SSL certificate, but if transparent one fails for some reason, Avast uses another one instead.
I don’t suggest disabling this feature. Almost all website are now HTTPS, meaning disabling this effectively nullifies Avast web protection.