Your SSL certificate expired. Now every visitor sees a big red "NOT SECURE" warning in their browser. Some see a full-page error that blocks them from entering your site entirely. Here's exactly what happened and how to fix it.
What Actually Happened
SSL certificates are not permanent. They expire. Before 2020, they lasted up to 3 years. Now the maximum is 398 days — just over 13 months. When the expiry date passes and the certificate is not renewed, browsers reject it immediately.
The browser checks the certificate every single time a visitor loads your page. The moment it's expired, every visitor gets the warning — with no grace period whatsoever. There's no buffer. No warning to visitors. Just an immediate red screen.
The frustrating part: your server is running fine. Your website content is perfectly intact. The only problem is a digital timestamp that passed — but it's enough to make your site completely inaccessible to most visitors.
What Browsers Show Visitors
| Browser | What the visitor sees |
|---|---|
| Chrome | "Your connection is not private" — full red interstitial screen |
| Firefox | "Warning: Potential Security Risk Ahead" |
| Safari | "This Connection is Not Private" |
| Edge | "Your connection isn't private" |
Most visitors will not click through the warning. They close the tab. On mobile, the warning is even harder to bypass — there's often no "proceed anyway" option at all. If it's an e-commerce store, those are lost sales with zero chance of recovery for that session.
How to Fix an Expired SSL Certificate
Don't panic. You haven't been hacked. Your data is fine. Here's the fix:
- Log in to your hosting control panel (cPanel, Plesk, Dreamhost panel, etc.)
- Go to the SSL/TLS section and find your certificate
- Renew or reissue the certificate — for Let's Encrypt, run
certbot renewor use your host's one-click SSL tool - Install the new certificate and restart your web server if needed
- Clear your browser cache and test on a fresh browser session
- Check that the padlock icon appears next to your domain in the address bar
Grace period renewals usually restore your site within minutes to a few hours, once DNS propagates. Some browsers cache the warning — tell visitors to clear their cache or try a different browser if they still see it.
0 0 * * * certbot renew --quiet. It runs daily and renews automatically when the cert is within 30 days of expiry. Most modern cPanel hosts have AutoSSL which does this for you.
How to Prevent This From Happening Again
SSL expiry is 100% preventable. The three-layer system that guarantees you never get hit again:
Layer 1 — Enable auto-renewal
Most modern hosts do this automatically for Let's Encrypt certificates. If yours doesn't, set it up today. Log into your host's panel and look for "AutoSSL", "Auto-renew SSL", or set up a certbot renew cron job. It takes 5 minutes and eliminates the risk entirely — as long as your server stays configured correctly.
Layer 2 — Set calendar reminders
Find out when your certificate expires (click the padlock in your browser → Certificate → Valid until). Set recurring reminders at 60 days and 30 days before that date. This is your backup if auto-renewal fails.
Layer 3 — Use SSL monitoring
An external monitoring tool checks your SSL certificate daily and sends alerts at 30, 14, and 7 days before expiry — and an instant alert if the cert is already invalid. This catches the failure even when auto-renewal breaks silently, which happens more often than you'd think after server updates or hosting migrations.
The SEO Impact
Google uses HTTPS as a ranking signal. An expired SSL certificate doesn't just hurt visitors — it hurts your search rankings too. Google's crawler detects the certificate error and treats your pages as unavailable. If the issue persists for more than a few days, pages can start dropping from the index.
Years of SEO work can erode in weeks. Even after you fix the certificate, rebuilding search rankings takes time — crawlers need to re-verify your pages are healthy before restoring their confidence in the site.
Fix it fast. The longer it stays expired, the worse the SEO damage.