Security guide
Certificate expiry (HTTPS)
When your certificate expires, browsers block your visitors with a full-page security warning, so your website is effectively offline until it is renewed.
Who can help
Your web host (certificates are usually renewed automatically)
Inspect before changing
Use these steps for a website or email domain you manage. Complete the capitalized placeholders with your own values. If a step refers to saved evidence, run the free check and verify your domain to open the private report. Use the exact hostname or DNS query name shown there.
- Note the expiry date and renewal status shown in the dashboard of whoever manages the certificate. A short remaining lifetime is normal with automatic renewal; only a stalled renewal or an expired certificate needs action with that provider.
Hostname: YOUR_HOSTNAME
Observed expiry: COPY_FROM_REPORT
Renewal owner and status: CONFIRM
Next review before expiry: SET_DATE
What to do
Ask your web host whether automatic renewal is switched on and who receives renewal alerts. If renewal has stalled, have them fix it before the expiry date. Keep the current certificate in place until the replacement is confirmed to work.
How to verify the change
After renewal, run this check again: the expiry date should be later and this item should show Good.
What this check can establish
We warn when less than a quarter of the certificate’s lifetime remains, and never earlier than 30 days before expiry. We cannot see whether automatic renewal is set up.