Interface SSL keys should be owned by root
the folder /usr/local/ispconfig/interface/ssl/ should not have a SETGID-BIT set.
because of this the ssl key for the ispconfig interface is owned by ispconfig:ispconfig (should be root:root). www-data is a member of the group ispconfig which could lead to a security problem.